Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
File:                     NYKJN96u4mCK84hcgqMS3KjSuEQ.mft (raw, json)
Hash identifier:          U9JnI3X45eumA9uvFtJfEXJKvOxkfuRQ5VK6mnvjuIU=
Subject key identifier:   59:FB:9B:A5:24:1B:5F:78:21:3C:04:C3:C5:88:04:CB:E2:F5:56:A8
Authority key identifier: 35:82:89:37:DE:AE:E2:60:8A:F3:88:5C:82:A3:12:DC:A8:D2:B8:44
Certificate issuer:       /CN=35828937deaee2608af3885c82a312dca8d2b844
Certificate serial:       01901DEC302DB4C1179B9B0B025EB491F806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYKJN96u4mCK84hcgqMS3KjSuEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:16 +0000
Files and hashes:         1: NYKJN96u4mCK84hcgqMS3KjSuEQ.crl (hash: N3/yyImmuqxwa7Id9BjNWnuFzRsIYb34bmnuIX6r7GY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NYKJN96u4mCK84hcgqMS3KjSuEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:30:2d:b4:c1:17:9b:9b:0b:02:5e:b4:91:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35828937deaee2608af3885c82a312dca8d2b844
        Validity
            Not Before: Jun 15 22:02:16 2024 GMT
            Not After : Jun 16 22:02:16 2024 GMT
        Subject: CN=59fb9ba5241b5f78213c04c3c58804cbe2f556a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:ea:9f:ce:db:c1:cb:7c:7b:cb:fe:ac:62:
                    d0:b4:bc:25:da:35:9d:e7:c6:59:a2:6e:7a:9b:18:
                    15:48:b3:d8:55:5d:95:fe:d5:ab:33:73:a8:f4:78:
                    57:28:8e:05:bd:39:ff:de:80:03:10:e5:e1:bd:e2:
                    dd:34:86:6c:28:f3:26:1e:5f:db:42:ea:50:0f:36:
                    53:36:8a:72:53:81:30:3d:2a:15:6e:99:06:9c:c5:
                    4f:52:43:13:3d:9a:af:b4:9b:5c:ed:a0:26:4c:b7:
                    7d:1b:75:f7:e5:36:06:a1:89:94:2d:ea:1b:8f:66:
                    c2:b5:13:85:69:69:be:fb:73:6f:6d:d6:42:61:80:
                    43:1f:59:a6:1d:04:98:45:e3:7c:a7:65:fb:cb:3c:
                    53:c4:15:e3:4b:a3:d1:e6:f0:9a:f2:e5:22:66:56:
                    34:a1:6f:60:f3:60:a0:ea:fa:a5:ad:4c:ba:95:61:
                    e3:7c:cc:0c:3c:7f:ad:28:a8:68:40:32:9e:18:27:
                    11:ef:39:5a:0c:f1:0c:a9:02:9b:29:79:f6:e8:69:
                    56:5e:d3:74:6e:05:d8:35:66:ef:12:24:23:b3:46:
                    31:12:6b:fe:6e:8b:00:77:fd:f9:50:1b:6b:a0:76:
                    f3:79:d0:1d:c1:5c:8a:e2:6a:16:31:34:5f:ce:b6:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:9B:A5:24:1B:5F:78:21:3C:04:C3:C5:88:04:CB:E2:F5:56:A8
            X509v3 Authority Key Identifier:
                keyid:35:82:89:37:DE:AE:E2:60:8A:F3:88:5C:82:A3:12:DC:A8:D2:B8:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYKJN96u4mCK84hcgqMS3KjSuEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70b858-a8e2-4e8b-a900-26d075eaa2b3/1/NYKJN96u4mCK84hcgqMS3KjSuEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:29:f0:5a:2c:57:e6:bf:d6:7f:0c:5f:7e:86:eb:bb:61:
         d7:f9:53:b0:5b:f2:9c:98:26:d1:d4:f9:72:72:98:23:ca:bc:
         84:e8:2a:78:03:1c:04:68:b6:09:56:93:b5:12:de:8b:27:f1:
         51:e0:7f:7d:f9:dc:09:19:b9:d4:e8:ab:31:5a:5b:47:26:d8:
         1b:0e:f4:21:60:5f:e0:18:b3:06:38:17:e2:f3:c3:97:ab:d1:
         b5:f0:34:24:67:ac:1c:21:cb:05:4a:17:1b:ab:59:cf:11:d2:
         9c:9c:4a:1f:46:73:05:6b:1a:6a:b6:8b:f6:13:4d:78:1f:59:
         23:c6:fc:24:17:c2:6c:9e:48:e5:11:57:c7:16:44:06:e2:f2:
         4c:ce:00:f6:a2:68:b2:ab:2f:32:bf:88:4b:37:d6:42:82:72:
         f4:75:c3:16:df:ca:27:29:21:2c:2e:ab:70:29:ca:6a:9f:99:
         ac:89:53:0f:4b:5f:96:7d:84:bf:84:5b:5b:67:5e:b4:0a:43:
         9d:85:7b:97:90:35:73:1f:e4:86:8e:14:75:10:42:0d:e0:b7:
         52:f1:13:c0:dd:3f:4e:23:03:09:d5:46:19:23:59:a1:69:4f:
         60:2d:de:e3:34:32:d5:50:b3:98:3e:4e:2c:82:18:f9:43:6e:
         93:58:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:42 2024 by rpki-client on console-fra.rpki-client.org