Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
File:                     mtwSkCJrj1smd2T7lWXAvBmDNpc.mft (raw, json)
Hash identifier:          xwxH/5psJu6gLU8IGYNNIOT9J/kXXagDyiOWa0cFudM=
Subject key identifier:   36:BC:0C:D9:06:4E:1D:B8:C8:E9:82:3E:5A:6A:E2:40:8D:11:96:15
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Certificate issuer:       /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial:       01901D46637BF9CB3F204ACE502ED76CA2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:10 +0000
Files and hashes:         1: kG-b5eX-ELvCTwP2E1cJFOaFZDA.roa (hash: 71MRL3lPaqvgJ7u8oEQP1mJUa7C8hsZgIU1QepvG6/k=)
                          2: mtwSkCJrj1smd2T7lWXAvBmDNpc.crl (hash: ukDJwPQNbOFpmCuBKzqLdqtTsa5XrKIyMUipxJF5SXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:63:7b:f9:cb:3f:20:4a:ce:50:2e:d7:6c:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
        Validity
            Not Before: Jun 15 19:01:10 2024 GMT
            Not After : Jun 16 19:01:10 2024 GMT
        Subject: CN=36bc0cd9064e1db8c8e9823e5a6ae2408d119615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:2c:8e:93:8d:33:b0:a5:c0:e0:2b:97:67:
                    5d:dc:73:92:04:f3:11:92:3b:d6:ef:96:f2:e9:16:
                    6f:2f:4a:67:75:65:44:62:c3:ad:62:b1:82:43:f9:
                    eb:29:64:b3:a0:e9:4f:af:64:d3:7d:24:07:08:8f:
                    af:db:3e:90:16:f9:fe:0e:28:6d:80:8d:c1:76:68:
                    9f:6e:27:fc:23:18:bc:b7:53:08:5e:63:e1:b7:d9:
                    4b:a1:4a:fc:46:27:85:bc:37:35:e4:d4:67:66:90:
                    d5:e7:33:b0:f3:0e:e8:7b:08:d6:a7:1e:67:91:ab:
                    dc:a1:3a:6b:5c:e4:75:d2:7b:ec:97:a7:2a:68:b6:
                    53:87:90:28:b7:b9:2c:83:f4:35:15:c7:19:b8:16:
                    33:5e:7c:3e:b5:07:ee:95:57:40:90:74:af:b8:2f:
                    f8:fb:87:04:14:5a:38:1f:cf:46:78:d7:59:d6:e2:
                    d4:77:c2:c4:95:fe:c4:40:18:7a:f9:4e:7f:5d:e3:
                    b1:b1:d7:c1:8e:12:22:3a:54:4a:3d:54:10:e7:6e:
                    37:63:57:cd:df:94:53:80:3c:c0:8f:4d:28:58:4d:
                    06:37:99:5c:34:c2:eb:e2:7c:ed:2d:bd:fa:7a:e2:
                    34:52:f1:45:f7:d8:8a:b4:a3:97:d2:19:ef:49:7f:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:0C:D9:06:4E:1D:B8:C8:E9:82:3E:5A:6A:E2:40:8D:11:96:15
            X509v3 Authority Key Identifier:
                keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ca:15:46:48:9e:81:f1:f9:84:6b:99:3a:8c:75:25:cd:2a:
         73:61:f6:d5:f7:c2:cb:ca:9e:1a:67:aa:b8:ef:51:9a:c1:88:
         37:6a:4d:61:5a:f1:10:46:78:c2:b1:9f:78:79:2c:6e:f4:6b:
         aa:cc:dd:d4:9c:68:9a:3f:f7:da:a8:13:36:12:24:5a:db:23:
         eb:c2:de:83:04:f6:f8:0a:2a:92:3c:11:70:38:13:df:48:09:
         19:ee:58:7f:a1:e2:11:2c:d0:5e:75:0e:9b:a1:8a:66:a6:3a:
         10:9d:72:dd:fd:b5:d3:55:87:5e:9e:ba:6b:5d:f8:62:af:f9:
         68:81:a8:46:76:c9:d5:ac:28:cb:92:bd:9b:a0:84:0d:d4:f5:
         72:dd:99:d1:fe:f3:0c:2a:b7:4a:fc:ba:66:d0:0a:2d:ab:8e:
         34:42:8c:51:06:90:39:6c:d7:57:ab:11:66:8b:aa:09:01:33:
         db:02:27:64:87:a1:9e:25:6b:80:9b:da:1e:5b:28:05:47:48:
         7c:4a:9d:47:b5:18:e0:c9:38:d6:96:f0:dd:57:d5:5c:c4:9b:
         dc:3b:94:43:06:89:c1:76:56:9a:1e:fe:58:f3:be:f2:5d:17:
         f2:8c:a0:a4:1b:38:3d:a5:eb:ae:94:f6:46:76:0e:24:72:86:
         2e:26:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:40 2024 by rpki-client on console-fra.rpki-client.org