Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File:                     mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier:          iW7b71ttn4WM4c6wAztAUWTmcJzyhOWeden+z9/BkgA=
Subject key identifier:   A2:E5:32:DF:8A:53:FC:16:DB:34:17:7B:CC:5C:C2:03:3F:88:8D:87
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer:       /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial:       01901E5929498AA31DCDE98D42A5611718CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:18 +0000
Files and hashes:         1: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: Bahw7qW5lmoVBFUEL8/rNDrB007YVIoS++8jVresVsc=)
                          2: ypmW8onlmC65ZNCFGexcmBv7SII.roa (hash: HIJfX8EOYqIGTk36MD+GlcTgx0ueucdlEL9Zju/dBOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:29:49:8a:a3:1d:cd:e9:8d:42:a5:61:17:18:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
        Validity
            Not Before: Jun 16 00:01:18 2024 GMT
            Not After : Jun 17 00:01:18 2024 GMT
        Subject: CN=a2e532df8a53fc16db34177bcc5cc2033f888d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:02:75:c9:2a:99:d3:3d:08:a2:55:40:b1:
                    1b:62:75:d1:f9:c5:9b:a6:78:9f:79:66:33:dc:c7:
                    4e:4f:51:d1:72:1e:bd:80:a9:97:76:15:39:03:07:
                    f3:71:e3:5e:28:fc:7d:6b:7a:f7:47:30:ff:2f:3e:
                    ba:9f:6f:ce:fc:90:45:9d:16:91:54:3d:ff:98:fc:
                    52:ef:26:51:5a:fc:8d:a3:c7:20:f3:b8:d9:57:8c:
                    2b:4d:bd:f4:89:8d:59:fc:95:56:89:1d:c2:29:6b:
                    a9:ff:41:56:92:26:5f:cc:43:91:8e:c0:d3:17:22:
                    c0:da:f0:58:b1:46:e3:1d:ad:20:5a:b5:7c:62:9a:
                    67:d0:76:0d:5f:d5:a1:45:26:8f:43:04:20:bf:20:
                    a1:49:da:76:33:c4:35:12:52:46:8b:16:c4:a3:3e:
                    b5:5e:36:cf:28:a9:38:7f:75:05:b9:a8:e9:0d:0b:
                    3e:77:23:d8:2b:49:7a:cd:05:10:95:75:28:b7:5c:
                    f5:47:86:71:c8:55:70:dd:23:3c:b4:ac:56:9a:e1:
                    09:f2:86:58:e2:e3:f7:27:7c:c0:31:7f:48:0d:f1:
                    1b:06:77:11:b6:16:6b:f4:cc:69:f4:2d:11:02:05:
                    0d:4b:bd:17:40:0e:4a:89:47:7c:86:06:c0:e0:8a:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E5:32:DF:8A:53:FC:16:DB:34:17:7B:CC:5C:C2:03:3F:88:8D:87
            X509v3 Authority Key Identifier:
                keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:77:dd:98:1a:d6:3d:80:9e:39:27:23:69:ca:88:38:41:
         72:15:f2:be:b2:ba:e0:e6:d3:8e:c4:85:ce:32:ed:10:60:d2:
         8f:45:b0:9e:32:36:c3:be:18:3f:14:ec:6e:c8:f6:e0:95:f0:
         ee:15:a6:dc:7c:5b:8d:21:a1:30:66:79:3c:c1:ec:81:16:33:
         58:2b:83:0c:63:74:b2:6c:93:35:63:99:96:bb:a5:a3:fa:59:
         ba:3e:45:78:4a:e7:0b:41:60:3c:fc:bf:67:4e:16:4d:8f:61:
         06:5a:12:9b:29:04:a1:ca:09:ed:c8:e7:bb:74:22:2b:75:dd:
         ce:be:b4:5c:b1:19:38:18:06:bd:59:bf:fd:8c:f3:51:8a:66:
         74:a4:61:34:75:74:57:9d:b9:95:53:b0:70:8f:fd:5b:76:3a:
         db:a9:17:71:cb:39:31:4e:b5:c2:00:e0:45:e6:a7:df:cd:26:
         ab:78:46:a0:aa:96:2e:38:39:e3:78:86:21:70:f1:ea:8a:31:
         8c:ba:c4:d9:13:a8:2e:67:43:01:1b:c1:a6:e7:9f:20:58:7f:
         a4:c5:9f:28:9e:8c:85:f4:18:8e:6e:35:22:80:1e:29:4a:5b:
         3a:0a:c5:65:f5:69:c8:ff:df:01:7d:21:45:d5:c6:06:e9:f8:
         6d:9f:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:03 2024 by rpki-client on console-fra.rpki-client.org