Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File:                     AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier:          CXExdOTvq2bd09kxgcMJ0jFeZfg9zEsGuSCXk0XRDfg=
Subject key identifier:   2A:B0:6B:B9:EA:D1:72:D9:32:86:63:2D:61:D1:CD:A1:35:65:D7:D8
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer:       /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial:       01901DED0DBC1BBFA2843110C889078269EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:12 +0000
Files and hashes:         1: 6zsH4r4sHMJ3aOSkPAxh7Nd59vA.roa (hash: YqV8YN4Mu4+UwyF6HQcIYcGhAxQRSCLnK/ZfE08vbDQ=)
                          2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: KdBwi/87JA+UqY1Kp3mdjeyNSuwFDr3OfXlyw97vnx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:0d:bc:1b:bf:a2:84:31:10:c8:89:07:82:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
        Validity
            Not Before: Jun 15 22:03:12 2024 GMT
            Not After : Jun 16 22:03:12 2024 GMT
        Subject: CN=2ab06bb9ead172d93286632d61d1cda13565d7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:ca:6a:7d:18:52:82:93:4a:68:f5:54:7e:
                    ad:19:1b:e8:ed:81:70:b3:6d:2f:42:0f:da:8c:cb:
                    16:43:22:3a:30:90:1c:19:47:b4:32:16:23:9f:94:
                    e1:e5:9e:96:a7:72:00:3d:ec:24:55:37:49:31:83:
                    df:b7:93:ed:62:6b:97:ca:04:29:28:c2:4d:19:f2:
                    e5:3c:2f:af:4d:1d:dd:65:4b:3b:11:f9:83:bd:7b:
                    76:53:ae:b7:db:fb:76:c1:b8:1b:eb:be:93:e4:9f:
                    0f:8e:3c:b4:5b:9d:9f:28:8f:74:e3:61:e2:f0:b6:
                    6d:48:26:f6:4b:df:22:c7:bd:81:3b:a8:44:c0:94:
                    b1:08:19:80:ba:01:00:09:dd:5f:48:15:90:2a:6d:
                    bf:f8:d2:4d:ad:22:b8:03:f2:2b:8b:35:85:ca:7b:
                    b0:9a:f9:9c:1b:51:86:bf:47:b9:27:4c:ab:e1:11:
                    cd:70:9c:4b:f3:e9:31:6d:9e:90:5f:b2:83:04:e2:
                    7c:5c:5b:90:0b:c5:11:87:3e:39:67:12:a4:a2:23:
                    98:14:e1:06:09:16:e7:75:89:3a:8b:33:4f:94:d4:
                    e5:7a:85:28:83:2e:ab:23:65:19:3c:05:3c:2b:0e:
                    2a:ad:02:50:db:54:73:b4:48:96:d7:83:b0:5e:e0:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B0:6B:B9:EA:D1:72:D9:32:86:63:2D:61:D1:CD:A1:35:65:D7:D8
            X509v3 Authority Key Identifier:
                keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:b6:66:b1:38:fe:f7:1b:b5:0f:97:a0:6d:4d:fe:43:7b:
         f3:68:60:02:b1:b9:e6:6e:b9:b1:45:a1:14:85:7d:61:8e:2a:
         f6:45:6b:29:a2:ed:7e:50:16:07:05:d9:a8:dc:22:63:9a:df:
         bc:49:50:c1:dc:99:2b:76:4a:d5:56:84:4a:06:d1:b6:81:31:
         03:25:e7:17:10:f3:e5:d9:c7:d8:aa:5b:8f:5f:5b:16:4a:53:
         3a:63:db:20:23:ef:8d:1a:30:3e:57:c1:bd:95:1d:34:53:dc:
         f3:f5:91:bf:b6:75:42:54:c2:d0:7d:6b:ed:88:55:ff:09:48:
         b7:04:46:0f:a1:c2:2a:ad:84:b5:38:34:0f:1f:a4:f1:27:43:
         2c:bf:79:5e:ee:a0:c7:5e:65:82:03:28:56:65:29:12:30:ab:
         94:66:02:4a:1c:d9:ef:d2:f3:43:d1:8a:64:8f:24:ee:c7:c0:
         e3:54:15:f5:34:07:38:35:c8:2d:98:db:13:b4:00:2f:8a:26:
         ac:76:dd:43:c7:0d:4c:38:04:7a:44:09:00:3f:24:e6:53:93:
         1f:e1:a0:10:d9:15:ed:e1:67:ed:0d:6f:74:60:bc:c8:11:be:
         31:af:06:6b:9f:0d:8a:c3:f6:f0:d2:9b:ce:62:d6:e1:6f:2e:
         1f:39:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:38 2024 by rpki-client on console-ams.rpki-client.org