Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File:                     ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier:          gdTd70KU6JEPuDK1tz+VwgASMGXabdMlx2E6GoLsWfM=
Subject key identifier:   65:4E:E0:D8:EB:22:71:01:C6:07:E1:EB:89:88:F3:FB:22:39:D2:B3
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer:       /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial:       01901DEAFFF42F30D31499C0395949312C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:58 +0000
Files and hashes:         1: 3hed-oMTFsuGaf7kUupK92m_BRQ.roa (hash: fsMWfEJFl0XlJhlUnIK7I4PIcfwNS3SjivWF8d8ZF84=)
                          2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: oIp3xkAYn/0WjxwNUXfrOZInQG3m11MV2h5I2/uAvRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ff:f4:2f:30:d3:14:99:c0:39:59:49:31:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
        Validity
            Not Before: Jun 15 22:00:58 2024 GMT
            Not After : Jun 16 22:00:58 2024 GMT
        Subject: CN=654ee0d8eb227101c607e1eb8988f3fb2239d2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:35:58:53:ad:1f:81:dd:df:5a:a1:d1:fd:
                    ee:8d:74:58:5f:92:7c:8a:fb:68:c8:48:8c:ec:89:
                    f1:1f:d2:47:b7:13:78:69:7c:81:45:7e:f9:7a:60:
                    a4:73:a9:34:8f:ff:e5:01:c1:6f:a6:34:b5:12:12:
                    79:c5:e2:30:88:41:5e:ad:bc:ea:2c:84:7e:26:65:
                    c9:07:da:cb:21:a0:e6:08:1c:26:f7:5a:68:d2:0c:
                    16:e6:63:a1:f8:47:95:e4:66:a2:4b:17:8f:a8:a6:
                    08:26:70:a7:15:41:b7:cb:44:8d:65:35:5c:ff:fe:
                    57:a0:13:9b:4d:0d:a6:11:d0:49:80:77:c5:5d:b6:
                    b9:9b:c5:b7:34:65:c9:cf:24:a6:ef:50:a4:fc:d7:
                    d4:a7:85:03:ed:65:63:d0:2d:8d:bf:38:21:7f:7a:
                    f1:5c:5b:0a:c4:d2:9a:ed:e6:50:ec:33:7d:c0:00:
                    78:b8:9b:00:d9:68:5a:41:38:b1:2d:c4:63:c6:82:
                    e5:b1:e7:4d:57:5b:d6:fe:c3:85:66:07:0c:c8:ea:
                    4b:eb:8a:2e:33:8f:9d:5a:93:df:d8:0e:2f:57:93:
                    4f:fc:59:55:d8:7a:27:e7:b6:4b:1c:85:12:cb:ac:
                    0e:36:cf:e5:0f:81:9f:f9:b4:11:79:a5:eb:fe:31:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4E:E0:D8:EB:22:71:01:C6:07:E1:EB:89:88:F3:FB:22:39:D2:B3
            X509v3 Authority Key Identifier:
                keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:68:ef:27:10:7b:ea:2a:af:e5:7b:41:0c:a3:9c:23:3b:b4:
         e9:01:14:62:d4:ee:5d:c8:31:03:81:08:4e:f4:98:ad:d2:3e:
         51:0b:74:83:ab:64:f2:ef:b0:2d:20:99:3c:1f:5f:75:95:1f:
         55:a5:1b:ab:75:17:ef:4e:f5:aa:4e:ec:ba:33:99:2e:c0:48:
         ef:3b:d7:8a:45:9c:80:ec:3d:c6:8a:86:f5:43:6b:35:37:d5:
         49:05:d7:a7:14:2d:e1:c7:8c:57:93:9f:75:b5:fe:c6:bc:9b:
         0d:43:1b:b8:97:1c:44:c9:4d:a0:49:93:72:ba:97:5e:e0:8b:
         aa:4b:d6:2c:d5:f1:07:f3:1f:0c:7e:a0:63:86:41:6c:da:7a:
         e6:37:4b:91:61:9a:d3:14:e6:46:05:23:e9:59:5f:f5:7d:f1:
         80:90:dd:76:42:0f:48:8a:1d:8f:c2:20:b3:0d:e3:ef:ff:9c:
         68:69:a0:6c:54:77:78:77:e2:91:f8:5b:56:c5:6d:8e:de:9c:
         96:0d:84:4f:9e:63:e1:9a:a0:32:1a:67:e6:d9:48:1f:72:dc:
         81:94:0b:5d:78:2d:b7:74:66:20:a7:0f:af:5b:de:64:a7:7d:
         21:06:4a:6e:c7:95:89:bc:68:f4:4d:e9:db:97:22:c5:45:5f:
         7d:29:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:16 2024 by rpki-client on console-fra.rpki-client.org