Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          N0mvN8lRvIX00pxCw103D9VMjBAKK5rowhv/CBRoQr4=
Subject key identifier:   43:21:33:AF:8C:64:BA:AF:89:B1:39:0B:98:28:EE:57:F5:49:06:A8
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       01901DEAD953651DF8BE56C8B9E48FB6CF14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:48 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: lTIXlFxB/jiuvIt96DSk2D8qoIMQ4Xx86lz0L4OQX/4=)
                          2: 683kX2ob1VVE7jLs8a8tpPBxA2c.roa (hash: eZlMXw5cMU5xczOAFhHMtir7RLcOBqHwcqF0t5CuRdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d9:53:65:1d:f8:be:56:c8:b9:e4:8f:b6:cf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Jun 15 22:00:48 2024 GMT
            Not After : Jun 16 22:00:48 2024 GMT
        Subject: CN=432133af8c64baaf89b1390b9828ee57f54906a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f8:75:da:84:8d:6e:96:80:ce:52:3f:c1:a3:
                    40:e2:41:db:03:cc:8f:da:54:8b:8b:a9:3c:e5:1a:
                    5f:13:9f:71:e2:a9:f6:f9:6d:6f:9e:6a:8a:b8:c3:
                    b9:0e:fe:ed:9e:7c:89:ef:0d:7a:14:d2:4f:2a:69:
                    e0:d7:19:10:42:e3:0a:97:bc:76:19:d1:08:25:4b:
                    28:b0:8f:c3:7d:0b:57:5c:96:64:a8:af:2a:71:16:
                    7d:07:15:18:23:b6:c9:f6:75:1a:2b:aa:07:f7:75:
                    de:a2:8d:f8:65:7f:e0:99:80:4a:be:9e:b1:8f:3f:
                    6e:71:ce:b3:86:40:2e:aa:ae:b5:42:25:f6:26:e0:
                    15:1c:56:ea:9b:e0:47:2f:88:86:9d:e4:3e:48:21:
                    7b:7c:f9:02:b5:0e:9b:6b:cc:cb:61:56:e8:e8:f7:
                    57:1e:48:36:f1:08:6c:c3:af:c4:29:40:ae:c5:3e:
                    04:f8:8e:82:d5:56:87:0b:7f:7b:74:48:67:dc:1f:
                    45:54:e1:41:28:fc:0b:0b:fe:71:0e:91:08:36:74:
                    f9:50:de:31:b6:c9:ef:5e:8b:0e:e3:98:e5:05:5b:
                    22:38:41:bd:52:e7:ea:67:ae:d6:d7:04:16:35:7a:
                    b2:7d:94:0a:10:03:b6:21:33:38:3d:43:21:e2:be:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:21:33:AF:8C:64:BA:AF:89:B1:39:0B:98:28:EE:57:F5:49:06:A8
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3d:09:fd:04:66:cf:30:94:fa:fd:35:f3:c6:23:7a:b7:98:
         00:c5:0d:cb:d9:d9:b7:be:ca:8e:30:89:ce:41:84:84:37:41:
         9c:b1:b7:9b:ea:7e:aa:fc:4f:ab:4e:36:de:e8:43:1c:93:a1:
         e2:cc:52:40:77:e2:af:48:f0:62:d9:47:94:39:3a:3f:7a:9f:
         89:c8:44:a4:29:62:24:f7:2f:89:fe:63:87:ca:00:a5:c8:91:
         b0:aa:b5:6d:7f:04:b7:50:7c:ab:f0:3e:a9:90:33:05:0a:18:
         db:3c:c2:ce:09:4c:df:5f:df:0c:4e:2d:24:ef:64:d3:93:9c:
         b1:b9:60:a7:7e:54:d1:af:b4:c8:21:3f:a4:64:43:aa:6b:98:
         e7:1f:48:b4:1a:ae:ba:ae:9f:19:80:0c:c0:23:08:cb:8c:f2:
         3d:3a:ce:93:57:7b:22:18:dc:12:d1:10:44:30:d1:ed:43:79:
         3c:ca:05:db:c2:38:81:a9:92:f3:fc:90:3e:10:a5:a3:d3:7a:
         18:26:c0:30:d6:a4:b0:b3:85:66:80:76:e6:0b:c3:fe:b7:e9:
         33:38:a0:97:f2:55:e4:88:cc:e7:2b:8c:44:ad:a5:e3:23:d2:
         90:b0:8d:f5:24:8c:89:20:a7:e0:47:82:b1:3e:a4:9b:74:a5:
         37:2d:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:27 2024 by rpki-client on console-ams.rpki-client.org