Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File:                     IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier:          yGM7UPsh1617b6yxRhmCkK1WlT1cTnKuVhjRqfdxwZk=
Subject key identifier:   74:C7:2E:61:74:DA:0C:6A:68:42:FE:04:E5:56:48:2C:66:97:D7:87
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer:       /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial:       01901EFDEA62AD9B6C86988A1CFEB4A5AB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number:          11B1
Signing time:             Sun 16 Jun 2024 03:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:15 +0000
Files and hashes:         1: HaNLVUNjmjJ7tAk1U7_k7yvr5zc.roa (hash: R7EhoacM7f2hB2P7/c07FgCX4tb/uPa/nm4YjR6OtMY=)
                          2: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: v4VOYdM3zLhg1G++XvZkRo3tHpp7vCpQObti9wcP9MA=)
                          3: OnG_85qZ_RDQ9ORu2mVxfXdwmJg.roa (hash: CJRr2euPa/WAO4BqY17DvKNHQb9/4Nux36kXat8Z2qQ=)
                          4: UIhshyHc1VeJ_7E_M0zgEAzy6Do.roa (hash: VWcsJTyqN1Bh0xMkW3/Pqkuo3zU1VOGAY9Ur2DyOIWs=)
                          5: UOARW4Efpe67MVYGYqC65cBcvgQ.roa (hash: uXGJha5kym3X1jfPWm5oA+SLDwTOihE+rxJJxHVcjk0=)
                          6: pKlLqWb2Ec1GyNRt9KcLMlb3Rag.roa (hash: wYG3XUL9wT/eynISQ1e9jVe9GC6n0zL3AkldjWzXobE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ea:62:ad:9b:6c:86:98:8a:1c:fe:b4:a5:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
        Validity
            Not Before: Jun 16 03:01:15 2024 GMT
            Not After : Jun 17 03:01:15 2024 GMT
        Subject: CN=74c72e6174da0c6a6842fe04e556482c6697d787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:f8:ab:71:ea:d0:4b:39:40:37:38:dc:2a:
                    1c:5b:72:2f:e7:01:90:4d:33:08:df:e7:90:9a:32:
                    30:79:b9:85:b3:30:15:c9:be:c3:5a:cb:7f:11:bc:
                    bb:00:4e:28:d3:7f:8c:81:86:a1:e5:50:6a:44:80:
                    dd:41:e6:98:13:29:d0:35:93:48:19:d4:69:fa:9a:
                    48:44:d6:04:27:11:0e:4b:b3:cc:81:83:97:f3:cf:
                    6a:94:61:10:19:b7:b6:61:8c:be:7e:60:ad:4c:60:
                    a9:3d:f7:3a:0f:74:a8:8c:d9:10:02:32:f4:b4:a0:
                    da:cd:19:7e:17:04:37:04:4d:05:4f:9d:6c:4b:8d:
                    1d:0d:ea:ce:61:a8:f0:4f:98:66:e3:f6:7a:a7:25:
                    53:a0:c9:ec:34:bb:86:25:ec:b2:d3:63:ff:6f:20:
                    2d:22:00:91:94:d6:7d:d5:19:6d:20:c5:41:8a:4b:
                    4f:be:14:2a:1e:c3:a7:de:1f:29:30:5c:0a:fe:fc:
                    c3:72:04:ff:d4:32:9e:0e:2e:36:82:7e:32:82:5c:
                    7b:6a:1c:19:7e:7a:c4:74:f5:51:17:5a:c3:b4:9c:
                    d9:45:07:76:b9:ed:09:62:36:a6:c9:16:ef:23:06:
                    dd:2e:a6:ac:8d:f3:8a:97:03:c0:62:ee:c7:48:69:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:2E:61:74:DA:0C:6A:68:42:FE:04:E5:56:48:2C:66:97:D7:87
            X509v3 Authority Key Identifier:
                keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:61:91:97:1a:c1:f5:9a:c2:df:2a:b1:fd:80:82:dd:a1:b9:
         fb:34:71:64:c1:cf:a8:f9:3a:cb:2e:ee:bd:77:0e:ab:2c:d5:
         57:0b:18:8d:c7:78:dd:22:f7:28:9c:ca:7e:63:53:c8:ff:5f:
         18:59:b7:89:80:7e:6b:7f:c1:2a:06:60:e3:5f:3c:0a:84:3f:
         6b:08:d2:ed:22:54:16:98:ad:6b:54:9b:ff:9f:86:cf:0f:3a:
         68:1d:f8:34:87:d5:1e:3b:64:83:88:a9:7f:3c:06:aa:db:5f:
         a1:1f:a7:cf:5f:37:2f:81:69:84:a1:35:06:1d:a4:eb:88:ac:
         98:dc:af:40:ee:31:73:8f:42:f9:52:c9:7a:96:d5:6d:70:9c:
         54:af:48:a3:b1:7c:cc:b8:cb:41:6a:24:09:bf:77:e0:f4:65:
         bc:1e:df:4c:28:a1:3b:6a:88:28:b7:e9:96:f0:7c:07:74:d0:
         d3:6e:e8:49:03:e6:1e:c1:1f:fc:98:f7:a8:42:de:83:8c:5c:
         65:de:58:b4:79:11:38:c7:c1:67:fd:39:70:30:21:80:b9:10:
         99:4d:05:9c:49:21:a9:bb:1c:de:d5:ec:9e:26:3a:f6:71:f6:
         43:52:b7:cb:60:ec:7d:e7:bd:7d:2a:8d:f5:0d:0c:d5:a6:6d:
         2e:0f:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:30:42 2024 by rpki-client on console-ams.rpki-client.org