Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File:                     RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier:          HPs78Hr61NI4YLdqjCIEViJ3u9vRyrG6hyUhsq7b0d8=
Subject key identifier:   CE:7C:51:4E:D2:54:5C:CB:CC:3D:D1:FC:E5:A2:55:C8:E1:14:8B:0A
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer:       /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial:       01901DEC853584EBEDE1F5D54B7F02D7EC35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:37 +0000
Files and hashes:         1: ICU2vqSpX7-2JaI9wyFzCWWdyT4.roa (hash: sPzvng5iGWHWLPl5YMahHANQm0YyHlBq+J6ONVnGqnM=)
                          2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: rwgeoOWPgXMazFdMfzPCeK2dzhmR6Q82vjt0aYKMLQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:85:35:84:eb:ed:e1:f5:d5:4b:7f:02:d7:ec:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
        Validity
            Not Before: Jun 15 22:02:37 2024 GMT
            Not After : Jun 16 22:02:37 2024 GMT
        Subject: CN=ce7c514ed2545ccbcc3dd1fce5a255c8e1148b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:40:09:7b:8d:14:ac:ee:28:79:1a:88:01:
                    97:08:5a:c1:1a:27:e6:de:a1:68:94:53:c1:e3:5e:
                    80:17:09:6a:18:d1:d6:ca:fa:1d:db:33:ef:d8:d6:
                    16:31:9f:09:fa:1b:e2:4f:bf:d0:dd:35:3b:67:b9:
                    68:46:5f:2a:70:4d:ef:f1:bd:4c:e6:4d:d5:3f:c0:
                    ff:01:41:e5:b6:e0:9c:df:9d:60:4b:fd:e9:5f:5f:
                    c4:08:e2:48:65:43:91:92:5c:a8:15:e7:20:58:b4:
                    6a:d5:ef:7a:f8:c0:5f:02:b0:0c:41:46:a8:6c:1a:
                    55:74:70:fa:74:11:c1:01:7c:0d:35:40:e8:16:1d:
                    8a:1b:a1:62:a0:14:3f:38:58:8f:86:43:27:0c:67:
                    34:99:73:b4:59:64:40:9d:da:0f:45:94:f1:4b:10:
                    d7:9c:e6:31:b0:e5:4e:60:fc:bb:60:ef:e4:29:3a:
                    91:32:e5:b0:a1:a5:a2:80:af:3e:8a:91:e0:4d:c7:
                    4a:ad:36:6a:20:29:aa:dc:86:2c:6e:0d:ec:72:94:
                    29:45:e3:64:bf:50:4a:aa:c7:ec:6b:d3:31:a0:29:
                    3f:01:50:a2:fc:28:5b:5c:e2:48:b2:a7:e3:db:1a:
                    99:5a:89:69:ce:6c:5a:7a:54:a4:68:58:74:b9:76:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:51:4E:D2:54:5C:CB:CC:3D:D1:FC:E5:A2:55:C8:E1:14:8B:0A
            X509v3 Authority Key Identifier:
                keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:94:47:82:42:68:68:aa:e5:75:aa:32:9d:ef:63:88:74:f8:
         f6:71:ff:77:d1:30:3f:56:0b:91:db:b1:54:26:af:86:bd:32:
         36:65:e0:7a:51:3d:e4:ce:dd:b4:f8:3a:e5:fb:32:14:c8:87:
         2d:00:32:f7:16:45:5e:b9:3c:61:3e:c2:1a:d3:83:52:a0:3b:
         28:11:71:07:3c:6d:d9:8c:ef:04:a8:e7:88:ca:72:c5:fe:2d:
         2b:dd:02:99:77:39:62:75:a1:b2:33:43:87:69:70:3c:e4:02:
         bb:c3:e4:47:dd:f7:3b:39:34:17:28:06:43:8d:45:5d:5d:99:
         74:56:f5:ff:61:7f:56:0b:5a:d0:13:59:c5:77:e6:5d:0d:c2:
         88:19:ad:b3:7b:7b:bf:32:ce:84:a5:93:5f:a1:39:dc:3d:88:
         36:a5:85:00:c0:1a:9a:54:2a:be:4c:cc:b2:f4:d2:70:e3:9a:
         0d:7f:3e:c2:4b:b9:dc:e3:0d:7b:b5:e2:b9:59:7a:0a:29:a7:
         4a:d4:5c:13:7f:95:f3:c8:f2:5c:57:fa:7b:3f:2f:6e:47:c4:
         53:94:48:b8:52:d6:70:76:51:e2:7e:c5:62:9a:26:af:72:10:
         8d:8f:dd:38:1e:de:f1:53:27:a3:2f:a5:65:18:3d:9d:39:50:
         83:34:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:20 2024 by rpki-client on console-ams.rpki-client.org