Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          C+6IHrdJYQBjruHHYezl3ydHFUPcD8lGthp6bS1Bnus=
Subject key identifier:   FA:92:EC:17:D7:61:57:E5:83:11:E8:15:ED:A6:E7:BE:83:86:C4:E5
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       01901DED9711A903FB3710E9944DFC869812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:48 +0000
Files and hashes:         1: fVQfFyiWl3jMN7CfZeZTd19Nfqo.roa (hash: QTwyeff7EIHQH1mrpSEI6XtcZgxkmonoEnwlTSXGEF0=)
                          2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: Ggg13ZsPqM9g0DLpfAr/ggkqipiZyt7v5omIfDQp9dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:97:11:a9:03:fb:37:10:e9:94:4d:fc:86:98:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: Jun 15 22:03:48 2024 GMT
            Not After : Jun 16 22:03:48 2024 GMT
        Subject: CN=fa92ec17d76157e58311e815eda6e7be8386c4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:67:9a:f2:c8:81:53:be:04:6d:71:a5:ed:
                    d1:33:c5:7d:ed:fc:ac:c6:df:c9:f4:3b:4f:65:01:
                    f1:d1:48:40:d6:93:79:b1:31:71:f2:31:19:1b:b2:
                    38:61:8b:2b:ff:ae:d1:d6:f4:77:d4:50:d0:4f:7c:
                    43:0c:98:9c:81:9a:e9:e3:4f:c7:ba:fd:93:e3:16:
                    71:e8:2b:02:a5:6a:a7:1f:d0:3c:89:91:e1:4a:0c:
                    72:de:c3:a1:5d:a4:3f:e5:b5:2c:2a:64:31:7e:b4:
                    9f:ad:b8:23:01:42:ed:75:fe:36:54:9e:25:95:63:
                    6b:d3:01:10:0b:9f:64:32:69:e2:68:fc:a2:81:ea:
                    23:cb:17:a1:52:20:6e:df:8f:2d:03:12:46:78:2c:
                    04:14:6e:7a:87:7c:d9:1f:ed:a8:42:fe:c6:1d:4c:
                    9f:50:66:d6:27:fb:ba:95:cf:14:03:92:3c:b5:61:
                    7f:9f:3c:b8:eb:78:c7:a9:85:e5:03:bf:d3:7d:13:
                    19:2f:82:7e:2d:80:67:6a:7b:a0:17:1d:cc:83:69:
                    08:5d:a0:e6:58:11:58:d1:6d:9f:54:9e:b2:f2:68:
                    93:50:4b:fa:11:5c:e0:5c:16:b8:85:a8:75:17:de:
                    d1:e0:f4:ad:4d:5f:86:ef:2d:2d:c6:94:0e:a5:85:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:EC:17:D7:61:57:E5:83:11:E8:15:ED:A6:E7:BE:83:86:C4:E5
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:bd:75:2a:a3:03:af:8a:ac:7e:77:14:fc:67:ef:ed:b3:
         28:d7:f2:24:0d:83:d0:56:2b:8e:7f:38:db:b8:7e:f9:f2:26:
         1d:75:43:88:5e:09:5b:f8:4c:8e:77:19:3e:6b:22:a6:11:19:
         5e:74:a2:62:28:ce:2d:f0:ff:a3:c4:30:69:69:9d:5a:2b:7c:
         a2:cc:1c:4f:7a:c4:26:32:05:d7:da:46:ef:80:99:fe:5d:d5:
         9e:49:6b:f4:1b:df:13:40:47:ee:6f:48:6d:b9:3d:b1:0f:4e:
         8e:80:5f:d5:70:76:d2:b5:49:cf:8d:ed:83:85:d6:6d:81:50:
         ef:68:4d:63:04:b9:bb:cd:d5:a4:a2:b8:50:b5:18:71:e4:fb:
         c4:2f:ac:66:05:1a:14:c4:ca:6f:8c:66:f1:39:42:40:c4:68:
         33:c9:19:26:4e:02:6e:98:fb:b9:3b:73:45:d0:99:02:0e:b7:
         83:6f:92:9a:88:e0:95:49:6f:12:c6:36:98:4a:8c:34:44:f9:
         71:eb:df:36:bc:6b:7c:20:af:2c:36:28:e4:07:f4:72:ac:88:
         71:21:69:55:de:54:8e:4d:fa:d2:59:50:97:ab:08:40:e2:4a:
         33:ef:1b:a5:6c:ff:27:53:f6:c3:07:3b:2d:00:84:b6:b4:06:
         d3:d5:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:59 2024 by rpki-client on console-ams.rpki-client.org