Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File:                     NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier:          eUENHzMJtWdiEDgbOUILzDLqbL5AbhTj0OEq9eILrqQ=
Subject key identifier:   10:C6:F5:F3:3A:F2:12:80:9D:85:31:BB:C7:11:3A:A9:59:BF:27:50
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer:       /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial:       018F87ECFA08BD934A4EC49B5D5C2721F8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number:          0DB0
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: RtuPTCRFhNPefDRCoP4zfNuqDtKyLSfoSOYCM9yjkVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fa:08:bd:93:4a:4e:c4:9b:5d:5c:27:21:f8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=10c6f5f33af212809d8531bbc7113aa959bf2750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:f5:5a:c3:98:f5:20:e6:d0:6a:39:08:fc:
                    8d:0a:6e:70:d3:fb:2f:64:8f:3d:7a:f5:72:9e:02:
                    6e:8c:d2:08:6e:fc:7f:d0:a4:26:32:6f:c3:f4:16:
                    ae:32:49:38:52:31:59:0f:c2:40:6d:4c:f7:e7:30:
                    43:50:b6:97:64:f4:fd:61:d6:d5:8e:31:b2:6a:8a:
                    1f:1e:5c:03:83:7c:eb:2e:6d:0e:03:5a:dc:c5:59:
                    3f:c4:08:3c:07:98:57:6f:94:35:ee:f5:0e:3f:7f:
                    c4:e1:50:f3:86:c6:e5:02:e4:80:aa:f5:ac:1e:33:
                    de:c4:d7:cd:b7:00:ab:70:8d:72:5e:77:d0:56:97:
                    2f:a7:a1:c4:d5:ed:c9:0a:2c:ca:e9:c5:f8:5e:f1:
                    26:af:1a:c7:85:e3:71:36:1e:55:4c:c2:bc:bd:50:
                    04:0a:17:f7:05:b6:11:da:04:1a:09:f3:1f:89:cf:
                    97:c6:51:fc:44:0b:f3:51:89:0c:46:1c:b0:8c:6b:
                    39:23:73:b3:2b:80:4f:a4:23:9c:8b:2b:08:01:c0:
                    76:41:8f:2e:f0:7c:01:b2:ed:c1:9b:3f:ce:99:2c:
                    4b:0f:77:5a:f9:2c:0f:8e:55:2a:45:13:c1:c1:32:
                    9a:70:e3:8f:48:33:84:65:5a:aa:cf:8b:83:74:9f:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:F5:F3:3A:F2:12:80:9D:85:31:BB:C7:11:3A:A9:59:BF:27:50
            X509v3 Authority Key Identifier:
                keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:5c:b6:5d:ee:02:a4:96:5d:32:ec:8a:13:08:fb:88:84:
         d6:4a:cb:b2:c3:59:0c:76:22:1d:88:48:e7:bc:c6:6a:ef:91:
         27:0c:92:b5:dd:a5:c3:3c:4d:5f:72:c7:e1:e5:25:ba:90:fc:
         8f:05:6e:f1:2e:0c:ea:99:de:9a:ab:c9:31:74:8a:fa:0d:bc:
         9d:a6:ea:d6:23:dc:84:6c:4e:53:28:27:78:ee:c8:01:ad:79:
         6f:fe:d8:b6:3b:9f:d4:c1:fc:e2:37:cd:c7:a7:62:22:e8:4f:
         d5:d0:72:0e:21:9e:da:dd:97:98:ae:18:f3:9f:24:ce:34:43:
         3d:45:01:e7:52:2a:e4:13:77:4b:39:b0:c8:03:37:e0:84:bd:
         a4:a7:ad:b4:de:81:59:43:fb:14:e7:ce:1e:26:04:79:01:c2:
         fa:06:09:66:4b:f4:5a:89:14:74:95:4b:32:aa:c6:ac:2f:9d:
         81:ea:02:ca:a4:cc:23:91:dc:cc:e0:b2:12:d6:9c:fe:a6:d7:
         ad:48:78:00:95:25:56:0a:0e:05:a6:75:9b:ae:fc:82:f4:2e:
         29:fb:f3:b0:2d:e8:a8:29:89:df:ce:95:59:93:fd:bd:71:b2:
         b7:b3:b4:1d:96:ec:dd:7b:d1:38:d6:7b:b3:02:54:38:80:c2:
         94:f7:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:56:33 2024 by rpki-client on console-fra.rpki-client.org