Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          mT+8MC+EMSmpmue3wEGjsesAcoyWiIfRcg8ZZgFs5JQ=
Subject key identifier:   28:AD:BB:55:66:A9:DF:00:6F:36:2D:AB:A7:3F:C4:21:17:32:3F:92
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       01901EC6B561165F955E5DEA7ECB9B6EAEA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 02:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:57 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: 34A0A2HFHSIGyPM2XtaaWdKtEFiVMgFiE260FCzqYIE=)
                          2: pt6zw4hIVJDWAcxY0bzU-YY9ei4.roa (hash: aka2cRqPn+Bi5piL1W2OL0T+xEvvg30jbAfTUqiGcGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:b5:61:16:5f:95:5e:5d:ea:7e:cb:9b:6e:ae:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Jun 16 02:00:57 2024 GMT
            Not After : Jun 17 02:00:57 2024 GMT
        Subject: CN=28adbb5566a9df006f362daba73fc42117323f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:fb:28:e8:c3:3a:2c:66:32:c5:ca:c2:33:
                    3f:42:92:29:b2:ec:72:4c:36:6a:6e:76:5c:72:cd:
                    33:bf:1a:e1:10:d3:df:ef:26:46:14:d9:76:fb:a5:
                    38:64:22:68:36:cf:80:91:ba:14:f6:69:7d:7a:ea:
                    44:31:40:e2:68:45:d5:ed:fb:d8:51:76:cf:8a:a4:
                    4f:e5:7c:7c:04:07:5b:90:ca:84:e9:cd:0f:21:49:
                    1e:96:14:24:a7:47:e4:fa:cf:a5:46:21:4d:ce:27:
                    e9:d8:94:08:3e:ee:1d:ea:b9:7d:02:8f:d5:1c:73:
                    fa:d3:da:28:65:68:f3:93:c7:3c:d3:2d:53:c9:69:
                    31:23:0f:56:08:77:5f:93:b6:e8:e7:eb:98:33:9e:
                    e3:37:48:fd:4d:25:7b:bf:6a:fb:ba:b9:41:d3:28:
                    c9:35:38:01:2f:eb:d3:21:6a:a4:78:4d:b0:e8:cf:
                    16:b7:9c:dc:30:73:c7:72:87:b4:9e:58:e9:5e:9f:
                    db:e0:c8:87:0d:12:a1:16:f2:2a:b2:c4:a2:bb:75:
                    7a:ee:1d:ed:0a:35:fe:ab:cc:39:15:a9:b6:9a:50:
                    33:56:d5:c8:46:09:3d:88:5a:70:9a:d2:7e:b1:8b:
                    27:be:4c:fb:cf:06:df:fa:a1:21:c2:dd:33:8a:dd:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:BB:55:66:A9:DF:00:6F:36:2D:AB:A7:3F:C4:21:17:32:3F:92
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:d0:c3:43:90:be:3a:71:c3:32:12:5d:08:31:0c:80:5a:
         81:21:72:c7:1e:5d:d1:cb:c5:b7:b2:e1:9a:21:d1:19:ca:ed:
         6a:52:aa:ab:bc:2e:e1:54:ff:df:25:cb:aa:1c:47:46:87:8a:
         a9:5d:7c:92:6d:81:77:f2:d8:1a:de:29:4b:e1:02:bb:6c:a3:
         03:4c:d3:80:1f:0c:18:f4:c7:8b:1e:59:d9:81:93:2a:57:26:
         75:23:23:0b:e9:24:e5:15:e4:5b:35:35:62:10:d3:11:8a:30:
         1f:b1:56:31:30:bd:af:58:2d:4f:7d:31:fc:c6:38:e6:98:d5:
         78:c9:dc:8f:14:25:cb:73:7a:df:96:ba:69:8b:ae:06:3f:d3:
         61:75:d6:d5:96:a3:cf:6a:87:3e:2e:26:2c:12:ee:07:1c:29:
         50:73:71:da:51:24:ec:7f:da:d3:ef:18:13:d6:e9:18:d9:f9:
         bf:7e:4e:44:7c:42:b5:6a:19:69:c3:2e:ff:aa:a2:d3:64:01:
         c7:e6:2a:75:8b:86:9a:63:35:2b:b3:63:fc:36:26:98:f2:fb:
         bc:53:59:f2:ea:72:cf:88:df:02:e4:bd:b8:42:9f:21:68:69:
         35:bf:dc:0e:28:be:b5:ba:96:01:78:70:da:52:96:ac:57:d3:
         d8:a3:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:21 2024 by rpki-client on console-ams.rpki-client.org