Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
File:                     h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft (raw, json)
Hash identifier:          lyyYQwrSuMkQz+aGB1iRy88NFPlONZEJgSq5Bf0U/UQ=
Subject key identifier:   33:34:FB:5A:08:F7:8C:37:72:3D:E3:4E:27:9B:B4:96:28:E3:1E:F0
Authority key identifier: 87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8
Certificate issuer:       /CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
Certificate serial:       01901E58C3AF31A04E995CA3BDD8C215B873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:52 +0000
Files and hashes:         1: 3vZq4hUVcMiBAY85NaOcEyuKf6A.roa (hash: WEK2U+uZ6iDRs13yjXwzeCDzV7E90Rdmx74htopKK30=)
                          2: h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl (hash: R+bHIUQpwpn2wa8r+DQqlQxoZE0iKokqGDgYfGpTW9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c3:af:31:a0:4e:99:5c:a3:bd:d8:c2:15:b8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
        Validity
            Not Before: Jun 16 00:00:52 2024 GMT
            Not After : Jun 17 00:00:52 2024 GMT
        Subject: CN=3334fb5a08f78c37723de34e279bb49628e31ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:98:31:28:f8:49:8a:b0:91:93:47:ba:b5:6c:
                    30:58:8d:85:ab:55:02:d5:b2:86:49:2f:26:62:21:
                    c3:8c:fd:e8:5a:53:54:32:1b:40:f0:39:9d:82:e2:
                    27:38:0b:83:52:1b:1f:8e:94:b0:02:f1:25:6a:43:
                    e4:d4:f4:c4:98:32:68:a1:aa:75:b8:4c:c9:8e:6b:
                    a7:58:cf:07:13:fb:10:54:d0:7e:69:29:22:29:95:
                    19:05:01:59:fb:34:58:50:12:ef:f1:c5:0a:d6:1f:
                    43:41:77:07:89:00:84:5c:1b:29:35:19:83:57:ba:
                    7f:0a:be:77:9b:df:48:64:ee:e1:4b:2b:56:7b:33:
                    69:42:34:05:6d:31:88:bd:00:8e:5f:fc:ae:f0:40:
                    4b:e9:c0:76:27:56:45:10:23:51:75:76:b7:0a:0d:
                    08:77:ce:ef:9e:3f:ff:e6:f0:08:53:d0:fd:73:91:
                    54:1c:dc:b8:9e:8e:17:54:03:fa:bd:db:be:42:38:
                    a1:d2:be:b0:e4:78:fe:4a:f1:b6:58:2c:4f:7f:42:
                    45:e2:a4:17:b7:1c:ae:a6:a0:4c:55:d9:6c:3c:af:
                    e9:2c:06:00:14:62:02:06:45:b1:f8:fc:12:bb:49:
                    21:c3:83:20:d9:18:e1:5e:07:4e:ce:20:88:b9:a8:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:FB:5A:08:F7:8C:37:72:3D:E3:4E:27:9B:B4:96:28:E3:1E:F0
            X509v3 Authority Key Identifier:
                keyid:87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:2d:ce:bc:4a:13:92:05:dc:66:b7:03:0f:39:80:d5:10:
         16:3c:68:f3:d0:69:3d:d9:cb:2d:c0:3f:6e:b7:3f:d6:fa:54:
         6f:5f:5a:58:df:30:9f:93:5e:a3:89:7a:52:c6:5c:13:da:71:
         78:c4:d0:b8:ab:23:15:a0:d8:3f:72:cd:d6:01:3c:b2:28:fb:
         5d:4e:b7:38:5a:21:ff:7e:19:c5:25:c3:22:eb:6c:8a:8c:68:
         cd:9a:6c:9d:2e:82:d5:10:4c:fd:7b:f6:a4:a3:85:ce:ed:dc:
         b5:ee:d0:58:26:6d:eb:e0:d5:e8:3e:fe:75:72:74:d4:35:9b:
         81:9f:f3:02:92:a3:d7:40:2f:6e:ea:9c:ce:d2:85:21:24:b2:
         78:f7:c1:73:59:17:54:06:d0:44:18:ae:4c:b6:9a:d9:72:80:
         4d:8b:c2:ee:f5:0c:33:b1:40:e3:c0:aa:18:7f:48:6f:70:d4:
         85:70:a8:01:ee:ab:ea:1a:15:e6:fa:66:bd:8c:c3:fd:fb:47:
         b0:d7:30:0f:0c:9a:3d:f3:32:34:bd:f2:8b:ce:2f:d9:19:9f:
         4e:82:ca:2c:b4:30:d8:6a:6f:66:2a:c2:d4:98:5f:a1:84:26:
         a9:c8:f8:f2:d8:d1:96:2d:56:15:40:e9:62:be:bf:f5:64:30:
         c3:c1:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:03 2024 by rpki-client on console-ams.rpki-client.org