Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
File:                     s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json)
Hash identifier:          9ijIdmBSFRd6Zt3oATAjpX/fyiDY5/1VjuValxzV6Bc=
Subject key identifier:   FC:3D:88:C9:A6:85:5F:D5:45:7D:B9:1D:25:26:BE:E9:D3:47:A1:5B
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Certificate issuer:       /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial:       019040E49915F302843F996B8E5F201798C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
Manifest number:          11E9
Signing time:             Sat 22 Jun 2024 17:00:41 +0000
Manifest this update:     Sat 22 Jun 2024 17:00:41 +0000
Manifest next update:     Sun 23 Jun 2024 17:00:41 +0000
Files and hashes:         1: 1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa (hash: nEbeoF/yoY3jvmxeIbw39Q0G57SQQ7egaIsnOj5XR8w=)
                          2: 3R-lm5lhuiPbeCwLqsFM9qeTCTM.roa (hash: E1LyXkRAmF3nDR8bBXxYJB7oiojghx6Yhx/2QRC8pXU=)
                          3: BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa (hash: OQITac9AherGb72sUGcK8Cs2Z8KQFS7mmKbQfWEJd04=)
                          4: P6E1it89HIgLIF9ONw1xVf0429g.roa (hash: nXKlmpX9NKxytZ2cvGpKOkD9F1vseXV8FabZWpNkMRg=)
                          5: PbkJxqA5PmNFabqTw1fKGFVkjV0.roa (hash: mDjtZOTD8H5hXGsyS+GZVD0fycZ0nmfA1pzJGIv3NDE=)
                          6: PhsDfVgJ05TgrB6k6mu5W8_N2sE.roa (hash: u+zxxe+PxRzw33Mn85UddaUXLK2cPj4E/cvYptSUOBk=)
                          7: QdHm7On3zoGKrTv3CU4gY5CT5VU.roa (hash: InPHpksy4nUT4Nu+mpJO4rs7QCEoVmiu6cReok/9aNc=)
                          8: TR7Lfe9EIldCywvzm10EkRJwmBg.roa (hash: vx+d21f2ENm4TogU8IhlCECITu67YSg5fHdHLXGFAo4=)
                          9: UoA72pGEBpbhKyRmV5SX18ctcVs.roa (hash: m9zr0+RVKcPRIg+rWIHpkfFG95gevfP36Ptu3FNSTnM=)
                          10: V6cR19X84nxLG7BpHxSvQUosV98.roa (hash: 9EcE69J6jodQ2yyXbKBeUrLPhsNHz/c19W39iLokXJI=)
                          11: d7E4iyie1l75_Naeqjb8ufmcPc0.roa (hash: ubzg9pOBWpUGlN5MjZvWpnhkC0mO3ymuJ5OSt+ll3/o=)
                          12: jDMNkLbwU_r5bJFRwIsnJdTDAEg.roa (hash: vB6tP6FoX9/9v0Lwpiz67K6uHA0agYCMcD88mPQcMmA=)
                          13: mlPY7JS-letkF0iIiKCI6QtG_0Q.roa (hash: 3p/5VBIGN+vR53WtRYMk0Ni+YzJ6xx2dmKEitWK1Nfk=)
                          14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: lENahvD5Fp13Wl7cCFuw9Tjp6czKxX6Zx87Yd7sS39k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:e4:99:15:f3:02:84:3f:99:6b:8e:5f:20:17:98:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
        Validity
            Not Before: Jun 22 17:00:41 2024 GMT
            Not After : Jun 23 17:00:41 2024 GMT
        Subject: CN=fc3d88c9a6855fd5457db91d2526bee9d347a15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:d9:ee:2e:e7:9d:fc:2c:cb:74:a0:ec:ca:
                    97:12:e2:06:49:06:6b:5f:8f:9b:e5:a7:de:22:91:
                    1d:5e:0d:4a:b3:6c:29:9f:2f:7a:9b:ae:1b:8b:69:
                    42:fc:54:0d:37:b0:42:d4:9e:19:04:35:e6:51:82:
                    2e:33:35:f6:50:11:8a:a0:d5:e9:68:33:d1:f3:06:
                    d6:b2:7e:61:c4:98:3b:9d:f5:d3:13:ac:a7:0f:69:
                    78:61:5f:7e:cf:42:00:01:56:6a:1a:b8:1a:f3:1c:
                    68:1b:c0:34:9b:67:27:f1:d1:71:68:75:36:97:d7:
                    41:61:69:54:d2:0f:8e:74:c0:7c:b3:66:50:59:db:
                    03:6f:7e:51:93:31:a3:47:36:80:ad:0c:d7:0b:2b:
                    a3:36:cf:73:85:36:10:eb:41:ad:2c:91:7f:9a:34:
                    74:84:91:6a:39:22:f8:01:fe:36:98:aa:26:90:51:
                    a0:6b:45:41:0e:9e:a9:52:6c:9f:e9:46:08:01:5f:
                    0a:da:96:1c:ed:ab:34:84:05:3e:d4:6d:b3:3c:0f:
                    4d:9b:88:7e:f2:3a:da:c6:dc:64:97:75:3b:ca:55:
                    29:76:33:62:4c:83:b4:75:d2:42:80:3f:97:12:ae:
                    ef:e0:06:0f:85:be:97:6c:88:0d:7a:91:98:36:ff:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:88:C9:A6:85:5F:D5:45:7D:B9:1D:25:26:BE:E9:D3:47:A1:5B
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:88:5b:55:c3:10:55:c2:f2:1b:6e:ab:d3:ba:18:6f:0c:ff:
         64:4c:b8:73:6d:a3:62:b0:8c:7e:5a:49:de:c6:14:84:83:e3:
         d2:7a:e3:7c:50:96:46:47:ba:c4:c5:71:c4:b4:f8:75:88:d0:
         6e:e6:1b:70:83:8e:11:f8:9c:12:f7:4e:71:ae:ac:67:f9:31:
         b4:26:a0:e9:ca:2a:91:ef:be:35:6d:1f:f6:ad:f0:2f:54:e7:
         2e:0b:cf:a3:98:30:08:29:18:68:cd:de:98:10:d8:ff:2e:f6:
         54:85:80:28:41:97:b9:f0:98:8b:7e:d4:2e:9b:20:8a:ce:21:
         6d:bb:ec:52:5b:2a:7f:4e:5c:39:ce:5f:d9:8c:54:bb:0a:21:
         6e:70:68:e9:ea:a5:36:ec:bb:cd:bd:86:71:73:02:84:5d:df:
         8e:2a:b1:fa:68:6c:ec:a1:ab:22:38:47:b9:01:c0:ff:c5:9b:
         28:64:d4:55:03:a4:2e:f3:39:c1:8f:2a:32:b0:53:df:81:78:
         09:a0:04:ad:0b:03:6c:1d:b6:b2:d0:78:02:20:a4:95:58:9e:
         7d:ac:e6:11:79:00:de:6e:fc:ad:17:09:80:0d:1d:14:1a:68:
         5a:35:a5:2b:76:fe:d6:d2:5f:7b:97:19:fa:b2:18:f5:e5:55:
         e5:a7:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:17:16 2024 by rpki-client on console-ams.rpki-client.org