Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File:                     v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier:          amNMaWJohS1kvPjV4bWzjc2yv/1h83VS4LTY4ovF0xU=
Subject key identifier:   6A:9C:7B:C7:A8:6F:41:38:AD:F5:24:57:12:38:01:68:9F:D9:8C:30
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer:       /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial:       01901DEC1BDD11A04A6743BA2D9AD5562389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:11 +0000
Files and hashes:         1: 6k7WAYIeXXs34Gf03sjVBAYtLKE.roa (hash: Q9bCst4ykRYHA9Z+XI3s0SpWQFa52478E/q6vumeF9A=)
                          2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: zeqmAA3etICnfQnV3CGULeAhnhaJf2LJHG+dmSEIMWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:1b:dd:11:a0:4a:67:43:ba:2d:9a:d5:56:23:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
        Validity
            Not Before: Jun 15 22:02:11 2024 GMT
            Not After : Jun 16 22:02:11 2024 GMT
        Subject: CN=6a9c7bc7a86f4138adf52457123801689fd98c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:d6:a0:c8:80:89:1c:a8:13:51:52:66:2f:
                    87:14:2d:bb:2e:a8:69:68:5d:d2:99:52:6a:e4:33:
                    33:75:b3:8d:46:41:42:44:9d:1f:a8:0c:dc:43:ce:
                    c5:73:0d:11:66:f0:ae:bb:ff:3d:06:44:ec:a6:0d:
                    b1:65:e1:f9:54:fe:7d:01:12:40:d9:88:75:66:92:
                    7b:bc:2b:0d:9c:92:61:64:f4:1e:64:71:c7:d1:06:
                    32:27:bd:13:73:c4:7d:33:3a:2c:45:04:fd:98:02:
                    ab:24:fb:64:4c:63:16:7e:ea:6d:0e:83:cf:df:16:
                    86:d3:9f:67:9f:de:b7:06:c6:bd:c9:72:44:6b:24:
                    f9:9b:13:fa:5d:5d:90:cc:9a:1a:cc:68:d2:ee:3c:
                    98:f9:ec:8e:1a:85:7b:41:dc:18:ad:4e:fc:1e:21:
                    e9:b7:02:42:9d:5c:55:64:74:f6:eb:ef:a6:21:19:
                    db:d2:7c:18:69:7b:9a:1b:5e:cb:77:c1:2f:40:4b:
                    ad:f0:97:bf:cf:2d:7e:bb:5d:60:ab:ab:5d:56:da:
                    e7:5d:2e:5f:d8:f7:2f:54:89:85:2f:95:4b:81:68:
                    ef:6b:2d:4d:0f:6d:0b:53:a1:38:22:c7:8a:58:21:
                    d5:e3:e2:69:f4:f8:a3:89:d4:72:f5:bf:a6:ff:71:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:7B:C7:A8:6F:41:38:AD:F5:24:57:12:38:01:68:9F:D9:8C:30
            X509v3 Authority Key Identifier:
                keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:50:13:fe:24:61:f5:df:37:67:d8:49:cd:13:c6:ab:7b:
         99:1f:f7:b4:8d:a4:1d:2b:5c:87:82:ab:60:00:4d:0c:c6:22:
         6b:d5:bb:39:1a:79:d8:dd:b0:ff:12:29:1c:b5:ce:21:70:14:
         ba:b1:a0:eb:d2:6a:01:65:44:d3:ce:19:6e:be:e1:b0:77:d6:
         44:5c:cd:cf:1d:80:de:3b:f6:ed:42:b7:37:d3:99:fa:76:81:
         28:c5:ee:0c:ef:74:a1:4b:f0:96:88:41:56:69:cd:64:17:88:
         9c:a4:05:0e:2f:39:b3:6c:45:4e:a4:67:e5:25:c8:af:be:f6:
         de:12:84:c9:fa:f4:c7:ae:5f:d1:73:06:c2:94:ed:80:51:37:
         ce:96:6a:0e:bc:35:96:e0:f1:f6:6a:d7:76:02:4e:f1:97:dd:
         15:3d:62:82:47:38:4e:f7:07:1f:6d:a0:ab:b4:02:ac:90:80:
         9d:a0:50:77:97:01:f3:76:24:1e:ab:fe:ac:e9:19:c3:14:cb:
         63:26:5e:ec:f9:ea:ee:32:89:0f:c5:29:32:56:d6:ce:0b:1f:
         f7:c9:08:b5:dd:c8:fa:78:da:73:cb:67:ab:b9:c8:8f:2a:27:
         5a:e9:30:43:99:f5:39:3b:1d:f1:d5:df:03:b9:1a:00:e1:46:
         1e:1f:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:01 2024 by rpki-client on console-ams.rpki-client.org