Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File:                     tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier:          81Is4dIuW6rvZcn6aKaU3G6ApD0/G/afd8tHfcz++Hg=
Subject key identifier:   E3:E7:7C:77:B7:C8:7C:C8:52:D0:65:E0:3C:72:BD:D2:84:45:93:BE
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer:       /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial:       01901EFDCA431A3E8579BFC09ECA7EEBD538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:07 +0000
Files and hashes:         1: YRJyPi3-8d1Eb0U-Dtz2-baff88.roa (hash: EVsNZiVUsHmY+4zLTMqXTDDLsUAMPA9Dun3CUsDfG+0=)
                          2: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: S32t/gxsn4ZPqEgEEnGPtR51LEM0LmZgjNRH0wkze3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ca:43:1a:3e:85:79:bf:c0:9e:ca:7e:eb:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
        Validity
            Not Before: Jun 16 03:01:07 2024 GMT
            Not After : Jun 17 03:01:07 2024 GMT
        Subject: CN=e3e77c77b7c87cc852d065e03c72bdd2844593be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:e2:dc:58:11:02:28:00:9b:96:9c:3e:70:
                    05:1d:d7:11:4c:23:0f:77:e3:af:cc:c4:1d:db:56:
                    40:57:06:7a:40:d2:16:94:11:e7:91:27:69:95:6b:
                    84:a6:93:cd:bf:46:ab:4b:fc:f3:3b:89:74:3c:03:
                    7f:33:b2:03:70:a7:41:04:37:9b:9e:18:76:35:f4:
                    f4:df:7a:90:f8:de:7c:02:95:21:d3:c8:95:4a:9b:
                    f9:6d:27:0f:69:29:26:a0:d0:e9:93:e8:96:aa:c5:
                    fa:9b:69:b1:22:72:99:87:b6:9a:a8:33:72:9e:1d:
                    25:10:91:8f:91:26:01:83:f0:54:3a:fd:e6:b7:f2:
                    e7:e5:26:ba:93:75:71:cd:96:11:7f:a0:54:09:52:
                    b9:a6:21:6d:cf:3f:32:f6:79:81:fa:00:74:fc:cd:
                    05:c7:8f:e7:77:fd:9d:b3:44:1c:65:67:ed:3c:66:
                    18:83:88:06:aa:41:ab:72:c8:50:36:cb:2d:40:08:
                    57:78:7c:90:ae:1c:d8:8e:ba:c9:27:54:bd:01:a0:
                    ba:a4:81:ed:e4:d4:5c:6a:e2:8b:03:2e:5c:42:68:
                    8f:01:a2:c5:5b:e5:20:39:67:d7:87:5a:85:76:a0:
                    d9:49:d2:f8:a2:9b:3c:d8:32:b6:8e:a1:6c:a1:e2:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E7:7C:77:B7:C8:7C:C8:52:D0:65:E0:3C:72:BD:D2:84:45:93:BE
            X509v3 Authority Key Identifier:
                keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:16:5a:cc:55:79:a0:12:82:80:86:3f:9b:b9:70:a6:d4:c3:
         49:f3:d6:27:76:6f:73:61:4c:a1:1a:86:96:bd:ef:d2:10:bc:
         41:d1:f3:1f:01:80:b0:2c:64:04:f8:d4:a7:e0:59:f9:d2:3a:
         12:d2:02:fa:cf:d0:eb:6a:6e:31:0d:86:6d:20:07:6e:af:5a:
         ed:f6:ea:99:05:f2:3f:64:ae:d7:76:34:16:67:f5:93:8c:47:
         7a:a6:c0:44:69:18:20:33:ca:5d:3f:03:6a:2b:6e:2e:2f:c0:
         5b:ca:f1:d4:4f:fc:eb:a5:64:11:e6:bf:13:10:43:20:f6:54:
         66:5e:04:0a:d1:b1:84:29:8f:47:ce:20:85:83:4a:d9:bf:1e:
         c7:3f:c6:7b:1f:6e:91:bd:dc:22:25:5f:7e:de:91:32:73:cf:
         03:b3:d8:3d:23:ed:68:0f:aa:9c:c5:6e:84:d5:0c:1e:28:96:
         a7:61:5b:da:44:fe:00:31:3a:4c:27:32:39:34:bd:7c:3c:e1:
         b8:1f:c8:01:4f:53:ff:04:a2:d5:46:05:a0:0f:14:3a:0a:ed:
         6b:64:37:ed:17:3e:3c:b6:d2:ca:82:75:e1:28:bf:8d:3c:51:
         e0:f6:c0:41:14:b0:32:57:ac:a0:2c:95:0f:0e:81:ff:40:01:
         3b:82:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:36:47 2024 by rpki-client on console-ams.rpki-client.org