Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          9E7xw3cef4F7Bn8qqtWd0sWTEsP2US8DZF0L7IWdBEs=
Subject key identifier:   F2:24:A0:DC:BA:6D:79:B3:F3:BF:DE:9A:8D:6F:61:E1:5A:DF:C5:56
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       0190448A91A145AC3FEC3DC1A36CF4595F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 10:00:50 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:50 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:50 +0000
Files and hashes:         1: fVQfFyiWl3jMN7CfZeZTd19Nfqo.roa (hash: QTwyeff7EIHQH1mrpSEI6XtcZgxkmonoEnwlTSXGEF0=)
                          2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: /LMQJldFcaGWZgUDJZtS4BfhwMr7o+rL7ztCsbavVJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:91:a1:45:ac:3f:ec:3d:c1:a3:6c:f4:59:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: Jun 23 10:00:50 2024 GMT
            Not After : Jun 24 10:00:50 2024 GMT
        Subject: CN=f224a0dcba6d79b3f3bfde9a8d6f61e15adfc556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:a3:3b:0c:ef:ee:ee:b8:53:c4:31:50:92:
                    c7:a4:9e:9b:f2:b9:ec:5f:db:5b:90:43:4e:b4:0b:
                    51:7b:1f:48:1f:de:3b:bd:9c:05:69:8b:39:bb:67:
                    04:f9:16:e1:1f:e9:9a:de:c4:f4:60:f3:b6:c9:37:
                    a3:53:26:4f:f1:42:1c:71:31:57:9d:1a:cc:09:58:
                    1d:e5:a8:87:05:97:88:f1:3a:74:34:c5:c8:b7:c8:
                    ee:f5:ef:0f:f3:b8:37:fd:f9:ec:63:50:55:20:af:
                    06:87:cd:49:fc:9f:a8:73:9b:d8:f6:f3:95:3c:26:
                    28:54:a2:fb:88:f5:38:5e:7a:0b:c7:20:17:3e:ed:
                    46:ff:e8:aa:2a:90:30:42:5a:49:6a:b8:74:65:50:
                    70:53:06:a0:10:9a:1c:d9:2e:92:3d:bc:e9:de:00:
                    f7:a3:7f:c2:c7:fe:ed:95:89:fb:84:cd:99:9b:2d:
                    5c:da:fe:ff:90:7b:5e:ac:4e:2f:f1:5b:cb:c4:ad:
                    15:57:d0:f3:56:8a:3b:57:0a:33:ab:79:8c:17:50:
                    05:47:11:7a:ff:2d:cd:3c:1b:22:e3:65:ba:65:4e:
                    0a:46:9b:96:a8:95:30:19:6f:94:e1:b9:fa:b7:fd:
                    98:6a:90:9f:50:58:e6:33:1a:3f:68:66:d9:e4:bf:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:24:A0:DC:BA:6D:79:B3:F3:BF:DE:9A:8D:6F:61:E1:5A:DF:C5:56
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:52:4f:7e:18:9c:03:92:41:94:fd:5e:36:9e:d9:e5:23:
         f5:9b:30:f2:a8:53:fc:83:5a:c3:eb:d8:fd:1f:6a:bd:5f:94:
         9f:1f:a9:ce:07:57:85:8e:18:3a:5d:5a:27:12:2d:c6:f6:83:
         3a:ee:4a:22:20:03:70:19:e3:2d:ac:40:ff:d3:42:85:a5:26:
         63:19:db:e4:4e:ea:9b:98:14:89:9b:0e:e6:5c:b8:0f:d4:34:
         b1:41:ca:2f:93:c3:ae:98:23:77:2c:79:8b:71:b9:f0:b4:94:
         0a:b9:b8:a3:69:02:2e:74:c2:cf:34:65:4c:e4:7f:40:ad:34:
         04:5c:3d:7a:35:34:71:4a:f0:0c:a0:65:9b:59:05:56:c0:4b:
         2f:78:7a:61:89:4b:fa:5a:a5:12:a5:39:a9:e5:a3:f0:4e:65:
         d0:6f:ea:56:63:68:81:15:5c:29:60:7f:1c:f0:3c:98:48:7d:
         5b:f4:24:e0:a7:d5:eb:89:c4:ce:e2:db:9a:30:c4:1a:63:61:
         5a:0a:b4:1b:9d:68:a5:48:6d:b2:e6:f2:82:d0:d3:11:53:c1:
         c8:a9:95:bd:c0:e3:a2:11:34:ba:ca:4d:6f:db:6d:10:87:e8:
         4a:3e:9b:16:15:d1:4f:32:04:b3:ad:0a:21:1e:fe:5c:40:a3:
         7b:1f:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:33 2024 by rpki-client on console-ams.rpki-client.org