Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          /sBl+PE20ZB0pkyHm8VgrrrlrH7ICGGsXEdDQRmeN4o=
Subject key identifier:   A8:65:FE:1C:45:52:73:A3:92:68:F1:C1:76:54:EC:56:10:FB:1B:8B
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       01904152D3FFDEF0D2C6D86956EF4F83A49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          A3
Signing time:             Sat 22 Jun 2024 19:01:05 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:05 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:05 +0000
Files and hashes:         1: QE2cfsD1zr6EnLrgrc2FlIlxfFo.roa (hash: cH5RFsV+yyDmBuXUbz8C8cVTxSQPyvsiKwpzQQ1B8U0=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: davLVq5AjwoxleWN+PQ5qgwiEnzzZkO5mYN5hG6Ay4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:d3:ff:de:f0:d2:c6:d8:69:56:ef:4f:83:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Jun 22 19:01:05 2024 GMT
            Not After : Jun 23 19:01:05 2024 GMT
        Subject: CN=a865fe1c455273a39268f1c17654ec5610fb1b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:2d:b0:5d:d4:21:79:ce:d6:97:e6:ca:d6:
                    68:bf:0b:7a:79:e3:01:4c:0b:6b:88:b1:67:4e:7e:
                    7c:a2:ff:b1:97:33:d2:05:1f:59:dd:42:89:58:58:
                    42:cf:69:a0:60:2b:6f:92:bd:61:ee:2d:d6:dd:1a:
                    89:c4:ff:38:b1:0b:45:7f:e1:2f:0f:01:ed:e6:fd:
                    5d:c1:08:d0:10:32:82:61:ae:3a:0b:bc:b5:bb:0b:
                    34:3f:a5:76:ad:34:a4:4d:80:1a:b6:e7:bb:a7:a8:
                    4a:06:38:ad:42:da:cb:df:3c:f1:65:fb:dd:72:71:
                    c9:6c:10:a9:6d:8f:cd:79:ec:4f:83:09:37:93:d8:
                    14:d0:59:81:be:2e:3c:91:b3:5f:9a:8a:7d:e9:c9:
                    13:b5:a2:cd:ca:6d:a7:88:35:b4:79:85:06:3c:27:
                    12:9a:23:40:f5:1d:42:42:b6:50:fd:05:17:d9:f0:
                    2d:8e:cd:d3:c1:e4:1a:d1:74:98:f7:40:3b:f1:b0:
                    e3:5d:ce:69:82:bf:22:36:42:36:c6:69:a6:29:1e:
                    4e:92:a9:0a:50:76:76:ec:1d:35:36:17:f8:fc:99:
                    27:cd:a4:bd:3e:35:77:7a:28:22:ad:75:87:ee:f9:
                    5f:d1:11:b2:62:50:5b:63:b5:f6:d6:07:3c:4e:b0:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:FE:1C:45:52:73:A3:92:68:F1:C1:76:54:EC:56:10:FB:1B:8B
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:a9:2a:62:7f:6a:27:d7:83:9c:80:2b:86:a3:14:16:e9:
         2d:14:f5:02:83:91:89:17:1a:64:fe:a0:93:7b:f4:4b:01:9f:
         da:54:ef:77:52:64:cd:51:1c:83:4c:93:26:5a:50:75:6a:88:
         c5:06:dd:13:e8:a0:3c:34:cc:42:36:c7:d7:1a:83:33:c7:b8:
         29:84:81:2e:e7:48:44:23:f4:dd:92:43:c3:1b:55:fb:8c:ae:
         42:92:6f:e5:05:04:20:f6:19:32:d4:db:84:b8:af:70:43:e0:
         55:03:d2:c5:84:0a:fa:12:f5:ab:1f:a6:ef:5c:80:5b:8d:0f:
         8d:88:7f:57:a6:0b:be:2f:65:c0:7c:8d:56:65:70:18:c1:6c:
         4f:e2:3b:98:0c:79:ad:72:cf:0c:27:2c:30:22:2e:8b:42:99:
         5b:ca:79:22:4b:9d:cf:2d:2c:5d:56:97:70:71:f1:25:90:89:
         28:e8:0e:ef:9e:cb:57:b3:19:ca:0f:52:8e:3a:ab:9e:fa:99:
         b9:fa:36:e8:ad:92:60:12:83:21:86:ec:22:0f:c7:70:e9:ce:
         42:55:6c:c8:01:27:87:b4:73:ad:a7:8e:b5:b4:05:b3:d7:14:
         f4:d5:c5:cd:6e:a1:39:43:b9:88:60:20:61:68:1e:29:32:16:
         37:bf:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:52:58 2024 by rpki-client on console-fra.rpki-client.org