Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          u9FoZE7SxsCiQsa0qxWuPYOHNpPHyw4gaNgPxmgM5BY=
Subject key identifier:   7F:55:CC:3B:95:20:F6:19:38:16:3E:D7:38:75:DD:AA:B3:E8:86:CE
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       0190452F9A0C297F278A6FAAED6FD93A55F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          11D9
Signing time:             Sun 23 Jun 2024 13:01:05 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:05 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:05 +0000
Files and hashes:         1: Fu1VK4j8_UVdVYjazM5j8Tk3aRE.roa (hash: rizKWg+SeXgVsm+jqTRb7tfbfdRL3s768hCrATF2OlM=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: gPdqOZQxaeXG3K8eooSE+qer5KK0RMkP4pbKy6cgcdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:9a:0c:29:7f:27:8a:6f:aa:ed:6f:d9:3a:55:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Jun 23 13:01:05 2024 GMT
            Not After : Jun 24 13:01:05 2024 GMT
        Subject: CN=7f55cc3b9520f61938163ed73875ddaab3e886ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:4c:16:77:c7:6c:4b:0f:4a:a1:62:4b:57:
                    1b:36:2b:a2:65:02:7f:8d:7b:ea:d6:94:b1:14:f3:
                    3d:37:67:88:55:89:a3:6c:8a:8c:72:58:7a:1a:6e:
                    0a:6e:9d:47:3a:79:59:64:1a:11:5e:bf:56:de:2b:
                    40:1d:95:19:88:29:20:34:3a:0d:63:cf:a1:87:8c:
                    11:0c:3b:9d:fa:e7:df:18:4a:13:f0:16:35:52:30:
                    12:24:c4:9f:48:99:18:d1:c7:b4:15:74:2b:f2:b7:
                    33:65:1b:a8:63:25:7b:81:56:e9:b3:1e:a7:4b:c4:
                    e7:2f:a8:be:c8:35:23:43:f7:c7:e1:7a:38:ca:d7:
                    46:f4:fe:31:1d:3d:d8:60:53:cb:e3:97:04:29:cf:
                    1a:42:dc:79:69:f7:b2:61:56:ce:1c:7a:6c:2f:99:
                    d6:d9:10:8d:30:d0:cf:d8:cf:11:8e:4e:5d:f7:7b:
                    b9:c1:92:a1:17:7f:4f:a1:39:84:1e:db:97:fb:c4:
                    d0:be:28:ac:7a:78:09:3a:b8:e6:77:70:7e:01:d5:
                    82:e1:cd:d0:6c:7f:ca:96:c5:ec:f2:a6:0e:63:e1:
                    55:d6:61:18:01:d1:9f:77:66:e1:02:4d:c9:b1:5c:
                    d7:58:88:25:1b:f1:d5:47:b7:9e:6e:e2:d9:da:b3:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:CC:3B:95:20:F6:19:38:16:3E:D7:38:75:DD:AA:B3:E8:86:CE
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:37:34:c3:e4:5d:bc:9f:7f:88:0f:3e:6c:57:ad:08:35:
         0d:19:ea:74:ed:9f:3c:cf:1e:f7:26:e1:66:f3:76:25:65:3f:
         37:9e:d0:4b:48:c7:9b:0f:86:b1:6e:97:51:b0:23:66:1f:44:
         dc:3e:db:60:82:16:ac:b3:cf:c4:8a:62:71:ab:1d:15:bc:44:
         4b:60:8b:82:71:cb:3b:f7:da:52:d6:49:c2:36:e8:cb:8d:c9:
         a9:5b:86:05:ae:5f:94:27:11:8d:d7:35:fd:85:59:91:12:d0:
         6b:31:e8:85:89:b4:d8:68:63:7c:5d:ec:89:3d:90:81:3a:00:
         19:cc:7e:f5:6e:74:32:33:c1:af:07:57:fe:eb:2a:76:79:56:
         77:85:2e:56:f4:94:4b:e7:65:03:eb:5d:97:62:da:f0:a6:cb:
         ef:9f:1e:c6:0e:c9:73:b9:49:1f:1f:a1:95:e5:ff:f9:05:62:
         6d:67:db:f1:4f:83:6f:f4:1f:c5:14:9a:22:74:2e:0f:97:22:
         56:d8:52:1c:13:5e:4a:3a:93:30:50:3a:6c:b8:3f:59:03:a2:
         18:aa:39:d0:fb:f1:4c:4c:ee:34:b9:ed:5c:8b:81:47:e8:e7:
         9e:19:2a:4a:3a:82:0b:d7:fb:dd:70:6c:51:25:75:ac:62:51:
         a8:a2:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:23:51 2024 by rpki-client on console-fra.rpki-client.org