Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File:                     EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier:          qjVego2C92Er/Rkbgn22BLiZ8tv/LnqlXD1G1tU0zeo=
Subject key identifier:   6A:84:AD:8F:61:EC:11:5C:F3:D5:A8:38:DA:4E:FB:B1:39:A3:9D:E8
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer:       /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial:       01901C6A29F4EF9B1A8E7D45458F00A161D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 15:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:37 +0000
Files and hashes:         1: 7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa (hash: 63zmTKJ6GKt1z9NK9tTAmpRTH5K08kwrovo/E+7DsAU=)
                          2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: 2gxfGtHmtal24XWLEHE4vTyG3pfZ25vE8FyCSDmw+D0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:29:f4:ef:9b:1a:8e:7d:45:45:8f:00:a1:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
        Validity
            Not Before: Jun 15 15:00:37 2024 GMT
            Not After : Jun 16 15:00:37 2024 GMT
        Subject: CN=6a84ad8f61ec115cf3d5a838da4efbb139a39de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:d6:62:1e:9b:c8:87:43:f8:69:33:1f:90:
                    d9:a6:f0:30:8c:23:1c:41:d0:d7:1a:01:24:a1:d0:
                    c1:ca:13:cb:10:e5:e6:da:82:43:10:1a:c5:1c:3a:
                    5a:54:f6:92:4b:ee:d6:bc:29:fb:c4:90:8f:4a:ab:
                    53:54:ed:e1:00:ed:81:ee:cf:4e:65:e5:40:66:87:
                    83:98:cc:a2:7a:3a:06:31:e9:be:d2:56:6a:c7:4d:
                    99:21:93:fa:71:10:a2:4f:28:89:a1:52:a8:c2:4e:
                    b3:48:47:97:78:fe:03:f5:4c:be:e1:1e:43:9a:2a:
                    54:19:12:75:95:95:60:93:b4:3f:44:a2:cc:08:ed:
                    7d:9e:1b:38:b7:83:cb:88:9a:44:8f:d1:61:4c:86:
                    66:0e:a6:15:a7:ca:b4:79:5a:b3:41:3f:8b:38:70:
                    7f:bc:0a:d2:70:69:d4:da:49:f4:08:27:72:79:05:
                    7b:d2:96:36:b6:94:9f:1d:d2:c9:e0:72:66:e8:64:
                    a2:bb:9b:74:a5:4e:82:1c:cb:32:4e:85:b5:b0:ec:
                    bb:8e:f7:0a:fe:33:a2:37:6b:05:aa:a5:f1:b6:cc:
                    89:28:e2:2f:b9:9e:7f:a6:d2:26:87:3c:df:03:56:
                    9d:3f:9b:55:a9:a9:49:64:60:dc:3a:cf:c4:f7:29:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:84:AD:8F:61:EC:11:5C:F3:D5:A8:38:DA:4E:FB:B1:39:A3:9D:E8
            X509v3 Authority Key Identifier:
                keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:d1:ca:c7:ec:32:9d:4e:d4:cc:52:d2:27:01:2c:68:0c:
         60:00:85:a9:19:ed:d7:53:4e:35:8a:53:3f:08:ba:26:8a:37:
         6e:e0:ed:71:68:84:48:f3:60:c2:1d:bc:a2:de:31:d2:3b:ae:
         2b:00:5d:c6:bf:40:34:5e:a2:e5:ce:de:6a:ae:3f:d3:7f:39:
         f5:13:cc:9c:83:54:a6:01:33:74:1a:fd:fe:c8:c3:79:d0:f3:
         82:a2:d3:bd:32:62:ac:03:08:ee:b8:43:09:f8:0c:07:76:af:
         34:fc:d5:5f:58:16:0d:f0:18:4d:93:9b:9e:9f:59:d0:76:5f:
         aa:6a:71:ef:ff:2d:72:14:14:88:64:bf:00:c2:58:41:15:c3:
         aa:d8:5e:22:c5:13:b8:a8:d4:cd:de:27:46:2e:a1:a1:0f:23:
         0e:fa:05:96:24:f2:e9:19:a1:ec:0a:ba:bb:5d:38:f7:ac:d6:
         e2:6c:f2:33:46:de:80:e9:b7:76:6f:d3:b1:d0:b1:89:00:fe:
         83:47:34:dc:8d:d6:09:32:a0:72:08:12:52:0d:07:db:75:cf:
         e3:d8:20:35:61:50:30:7c:69:85:f4:61:01:98:75:3a:21:4b:
         95:77:a0:97:10:b5:09:1d:c7:c8:81:11:e0:94:1b:5d:3b:0e:
         f7:22:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:30:15 2024 by rpki-client on console-ams.rpki-client.org