Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File:                     roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier:          6H/YoGHHMwOQnu2lBEQllGDMqeTk42TbhQd4+3jKeK4=
Subject key identifier:   C8:EA:68:65:83:D4:17:E9:28:D2:66:6D:43:19:9F:79:25:EA:33:D9
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer:       /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial:       01901DEDB7013C5FC71A7B8E5819447A0F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:56 +0000
Files and hashes:         1: 0f1pNyRjkr6LuXeiWR_ZFzD9cIs.roa (hash: E58rMSzWjOx0DKpJmLklvsGVpXNmsw44mKJzkwToRo8=)
                          2: 8nY5C9uhCQ0T0S2Ro30Cr1K6vGc.roa (hash: 6/w9F4jUNR9ir2GkupRGmKtVn3eZe1Y9FMPxRUfyp00=)
                          3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: TQZHIfBgnMBYrTt9fPZt0BKFd2xXLHgIPQIbqQdHO6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b7:01:3c:5f:c7:1a:7b:8e:58:19:44:7a:0f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
        Validity
            Not Before: Jun 15 22:03:56 2024 GMT
            Not After : Jun 16 22:03:56 2024 GMT
        Subject: CN=c8ea686583d417e928d2666d43199f7925ea33d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:a4:6c:eb:09:86:3d:8a:de:9d:cf:13:7a:
                    8b:a3:00:a0:6b:d7:4b:e4:89:3d:7e:bb:96:51:45:
                    9e:8f:1c:f5:8c:dc:01:02:d7:5d:90:4a:88:59:3d:
                    a7:69:59:47:60:76:eb:b3:d2:8a:f3:47:1b:64:9e:
                    79:f4:7f:db:8e:2b:4d:28:71:9f:82:db:cb:34:4b:
                    01:54:26:4f:ea:70:be:78:c0:34:bc:9d:a8:20:58:
                    f7:40:39:e2:af:b2:22:da:04:43:82:9c:25:6b:70:
                    af:8b:03:55:d1:c0:4b:af:a6:16:3d:8f:a4:f2:15:
                    f3:ba:f2:b3:20:72:a2:e5:b0:2d:f5:47:9c:e6:22:
                    03:b9:ac:a9:a9:44:54:45:c0:7c:e6:03:25:19:df:
                    6f:e3:37:c1:6b:59:02:6e:d5:fc:81:7e:c1:87:90:
                    36:b6:be:fd:e5:c9:d0:de:a0:51:d2:33:06:d4:88:
                    68:e0:9f:31:a1:c5:1c:1c:60:00:05:a0:78:cb:10:
                    a4:19:16:88:b3:22:49:44:f4:75:d5:8a:f7:8e:67:
                    53:c7:3a:e6:af:eb:00:57:6e:55:1e:b3:1a:86:87:
                    48:6a:23:72:fd:39:a3:85:5c:e3:69:c9:a5:1f:1f:
                    96:a7:dd:aa:2e:73:d0:41:a4:48:dd:8c:5c:2f:0e:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:68:65:83:D4:17:E9:28:D2:66:6D:43:19:9F:79:25:EA:33:D9
            X509v3 Authority Key Identifier:
                keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:56:8e:94:c7:cd:75:11:4d:bd:42:c1:c7:82:b7:d7:17:2a:
         3a:fd:97:6d:49:c8:b0:46:0d:c5:f7:c0:44:ff:99:05:7c:49:
         86:34:88:35:6b:dc:0f:2b:e6:93:32:b0:0d:c8:23:b7:d8:7f:
         b9:ba:69:ce:dd:91:0b:eb:9c:ad:95:42:72:f9:83:df:ad:13:
         97:95:75:d0:2e:e6:b8:e4:a6:c5:35:c7:ae:35:f9:c4:f7:25:
         f8:10:6b:f7:a7:35:9f:c4:31:7d:09:5a:aa:43:ca:cb:cd:61:
         c2:e1:db:87:40:b2:e2:df:65:2e:43:f8:fc:44:9a:5a:9d:95:
         52:8d:d0:ed:e7:48:9d:fc:8f:65:cd:cc:df:2a:88:92:32:87:
         e9:c6:37:75:41:7b:26:74:bb:74:4f:39:e9:f1:51:90:38:f8:
         1e:83:6b:33:70:f0:e0:6a:d1:ec:ad:7a:3c:ef:0a:f5:63:86:
         04:33:02:eb:74:95:b4:13:dc:b8:14:f0:bc:d7:17:b5:6e:f2:
         7c:5d:58:0c:7f:a1:89:aa:0c:86:2a:cf:31:bd:7b:d8:f1:53:
         15:30:2e:4e:70:80:24:d6:9c:dc:7f:96:28:3f:c1:92:e9:c0:
         42:e7:b7:35:b2:98:08:07:1e:a0:19:e2:de:2e:9e:b2:e9:5a:
         c9:b7:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:06 2024 by rpki-client on console-ams.rpki-client.org