Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
File:                     mtwSkCJrj1smd2T7lWXAvBmDNpc.mft (raw, json)
Hash identifier:          QhQYWU067d3WpevPXSEKsedkJVomNb9+OnkXAHdvATw=
Subject key identifier:   AA:7D:EA:B2:6F:19:72:F1:D7:4A:C6:34:C7:D0:7D:49:14:E9:1E:5B
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Certificate issuer:       /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial:       01901B57A4CA2BF09EF4B6CF66C445C0AAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 10:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:46 +0000
Files and hashes:         1: kG-b5eX-ELvCTwP2E1cJFOaFZDA.roa (hash: 71MRL3lPaqvgJ7u8oEQP1mJUa7C8hsZgIU1QepvG6/k=)
                          2: mtwSkCJrj1smd2T7lWXAvBmDNpc.crl (hash: MeShKH8Ydb8FW+FXnBcJKtc/NKuCapwD0ACcmkmZHao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:a4:ca:2b:f0:9e:f4:b6:cf:66:c4:45:c0:aa:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
        Validity
            Not Before: Jun 15 10:00:46 2024 GMT
            Not After : Jun 16 10:00:46 2024 GMT
        Subject: CN=aa7deab26f1972f1d74ac634c7d07d4914e91e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:85:88:e6:b4:cf:15:15:ca:d1:f2:c7:0e:
                    06:be:46:ef:20:1b:60:9e:36:09:ba:93:12:8a:04:
                    1b:45:5c:08:14:56:0e:af:9f:ec:ed:ba:27:c7:35:
                    84:17:ce:7d:f3:af:9f:50:a9:0d:67:d5:f1:78:c7:
                    7c:a1:cf:3c:ac:31:b0:98:f2:12:b8:c8:4e:c3:1f:
                    8f:90:2d:7f:9c:bb:1d:6e:5e:89:73:b6:8e:83:bf:
                    a2:02:3a:10:bf:17:4c:ba:27:75:f5:00:bb:7a:75:
                    a8:e8:0e:a1:11:5a:8a:9d:0d:ae:a8:fc:54:04:4b:
                    9b:f6:5d:76:e5:c8:f1:b3:81:fd:f7:18:46:30:f2:
                    c5:df:52:d5:45:04:4a:d7:99:7a:0c:a5:81:1a:07:
                    0a:b6:d5:48:5d:f4:e5:3b:12:96:08:28:93:f9:bd:
                    03:4b:01:ac:1b:ac:cd:1b:51:f0:4b:52:d7:61:5b:
                    43:29:45:71:72:13:65:21:9e:b6:29:7f:7b:2f:11:
                    71:58:90:3c:1c:cd:c9:d1:a2:06:f1:3b:3f:4f:6a:
                    cd:31:a5:63:5c:00:dc:cd:c4:de:2f:10:5b:e6:e0:
                    00:22:db:39:d4:1b:79:ed:35:10:3e:e0:f9:42:b5:
                    90:34:8e:6f:d7:5b:a6:62:f2:b9:89:a5:1c:87:bb:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:EA:B2:6F:19:72:F1:D7:4A:C6:34:C7:D0:7D:49:14:E9:1E:5B
            X509v3 Authority Key Identifier:
                keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:ce:da:65:6d:34:d8:6b:d3:6a:bd:27:5f:25:b8:f7:0e:
         74:ab:89:c1:f4:33:0e:70:33:6a:5a:f4:65:97:6f:50:9f:b3:
         de:db:74:a3:c6:d2:9c:f8:57:13:52:6c:77:91:ac:32:12:ea:
         08:16:44:57:8d:a0:71:41:99:17:74:8c:26:41:4b:15:14:e2:
         f5:d1:f8:97:8a:64:6a:f0:a6:49:17:97:83:75:f4:a8:b3:73:
         6d:2b:d2:ff:63:2e:8c:09:cb:5a:11:6b:2d:d8:92:02:56:27:
         a3:2f:e0:b5:83:de:da:81:6a:82:28:db:0b:4e:95:8b:84:39:
         27:6f:37:53:40:12:20:80:8c:df:76:b4:8b:cf:fa:f6:1b:b6:
         da:a1:c2:df:ab:85:2c:90:20:02:ea:7b:45:c2:10:86:17:85:
         81:9a:f7:76:1b:6a:45:0a:94:6a:fd:dd:7a:96:dd:7e:d4:f7:
         d9:58:e2:bb:d8:55:ea:85:5e:59:94:a3:34:e6:de:11:d4:8d:
         ad:eb:21:1c:32:09:e1:be:8f:a9:23:76:26:4f:9b:8c:b5:54:
         93:08:dc:6d:09:44:e6:4b:23:71:1a:b7:91:c1:3f:73:1c:31:
         1f:39:5a:53:0c:18:7d:8f:17:c8:00:5e:bb:1f:27:70:e9:da:
         af:63:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:44:19 2024 by rpki-client on console-fra.rpki-client.org