Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          /MvumeeO45ndtN6y3153DddIPyAebMFrzHDMPbPYPXY=
Subject key identifier:   40:53:82:42:FA:D6:9F:05:C4:4C:44:C1:E0:4D:8E:F3:AD:44:A5:A5
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       01901E8FFD28E6C7421A40CB92D84DC101E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:11 +0000
Files and hashes:         1: CcXyKrLKh_ZQZCSRzb3WH-q9pxo.roa (hash: fcU7jODB5y6k+oAovMZ6xMTAOaQ3NM6G5kcqZdQntAA=)
                          2: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: nMxNMxzXipu7n12FgunEsQt4Yh4gEb9U4cmaT6a241Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:fd:28:e6:c7:42:1a:40:cb:92:d8:4d:c1:01:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Jun 16 01:01:11 2024 GMT
            Not After : Jun 17 01:01:11 2024 GMT
        Subject: CN=40538242fad69f05c44c44c1e04d8ef3ad44a5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:8f:aa:a3:f7:c2:68:bf:96:b5:7f:fa:a4:
                    49:e5:39:b1:b8:3a:fc:26:23:ef:c9:d7:53:d3:85:
                    0a:61:49:9d:34:7c:b3:ab:4a:6b:2a:7f:95:3f:84:
                    e3:16:48:ad:9b:f9:58:cc:f7:54:6f:75:83:ad:1d:
                    ea:4e:92:c8:41:43:e8:06:d3:7a:eb:1e:22:bc:8a:
                    07:8a:b4:90:28:e5:42:54:d2:ef:bd:75:5b:d5:2a:
                    73:a9:8d:34:de:93:f9:45:8d:a8:53:9a:ab:f9:9c:
                    fe:dd:a6:5e:e8:f0:e6:cb:a5:d0:8a:85:65:9d:c5:
                    f4:a7:17:db:24:c3:34:28:af:ae:bd:5b:38:12:08:
                    93:f3:4c:bb:8b:72:03:ba:7c:0c:74:d4:da:a4:62:
                    c1:e9:71:1a:c3:b6:45:e8:5c:41:af:de:7d:57:d2:
                    18:a8:86:dd:48:e2:34:f4:1f:b0:e6:fc:e3:29:6a:
                    29:30:80:68:c6:a5:74:db:ad:5d:96:13:bb:90:1a:
                    62:a8:f6:fa:73:ee:be:55:28:ef:a9:36:e1:ad:24:
                    88:43:f8:f3:35:46:fe:36:db:14:af:eb:15:09:b7:
                    29:7f:51:ea:b8:bd:a3:35:c5:bc:7c:1e:49:16:0d:
                    f4:3f:6f:c2:60:2b:44:2b:93:00:31:77:d8:f8:ec:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:82:42:FA:D6:9F:05:C4:4C:44:C1:E0:4D:8E:F3:AD:44:A5:A5
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:ec:1e:17:26:77:5e:27:86:cc:a7:32:17:21:55:73:83:
         ec:21:40:0b:74:4b:7d:9e:93:ee:8a:d7:d3:21:02:98:78:a9:
         2b:49:40:cb:2b:64:63:f0:86:f6:de:d1:cf:01:c8:f8:75:94:
         db:a9:ea:5f:1a:fa:6a:40:86:ec:66:64:1f:2b:93:3d:8f:38:
         6f:63:0d:35:cd:86:b5:91:03:6c:79:98:57:f3:b8:42:4a:85:
         43:3a:a9:e6:32:7c:aa:c8:6e:20:bb:95:2b:30:92:22:65:13:
         59:d6:08:3f:ed:d0:01:1e:6d:1f:25:59:cc:89:ae:46:5d:e6:
         b9:8a:be:42:57:41:e7:0b:ec:b3:e1:b6:23:76:7e:a7:c7:77:
         47:80:70:53:1b:0f:c6:82:0e:d2:90:99:e6:09:aa:4f:fd:ba:
         40:96:b6:0d:54:a3:42:6a:65:43:2b:1e:51:17:0c:1d:22:39:
         cc:70:7a:6b:c3:f4:8c:b5:cc:dc:ef:d0:a7:36:c3:62:c5:b6:
         8d:2c:73:0e:dd:1e:20:71:bf:88:6d:1c:f3:70:95:ac:2a:ba:
         eb:67:83:9b:02:8e:dd:d4:1e:9a:0d:69:29:07:da:42:50:51:
         08:b2:b2:d7:87:7a:57:2c:2b:dd:08:97:88:7a:53:47:08:5e:
         95:16:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:53 2024 by rpki-client on console-ams.rpki-client.org