Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File:                     bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier:          +LwCOuJ2lcKw8cWJZZ9Y0vk8mgANSS3/TzuPWR12KoI=
Subject key identifier:   13:1E:C9:5A:4E:8B:49:8C:84:D3:1D:BD:56:03:BD:2A:5F:99:1B:E8
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer:       /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial:       0190486749DA78F7882155EF33FE73CD549D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number:          063F
Signing time:             Mon 24 Jun 2024 04:00:46 +0000
Manifest this update:     Mon 24 Jun 2024 04:00:46 +0000
Manifest next update:     Tue 25 Jun 2024 04:00:46 +0000
Files and hashes:         1: FfQAx7HNz4k7ld2-KMGafGR6ISQ.roa (hash: ngbfwXRNtOOBUMZ0f002IqYW8RHQh88OFMlqZd05JB0=)
                          2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: qEmok0wk0PLWrTUTyz+DDzPGFDOtJzN1dhEl9zEnbi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:49:da:78:f7:88:21:55:ef:33:fe:73:cd:54:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
        Validity
            Not Before: Jun 24 04:00:46 2024 GMT
            Not After : Jun 25 04:00:46 2024 GMT
        Subject: CN=131ec95a4e8b498c84d31dbd5603bd2a5f991be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:d1:d1:ba:40:b0:ed:e5:b4:cc:b5:5f:05:
                    0c:7c:54:02:5a:55:00:b2:ce:99:60:9e:f3:2d:10:
                    8b:5a:ca:93:ee:1e:98:15:7d:08:17:97:4f:4c:e7:
                    ba:0e:a3:7a:96:90:1c:4d:45:e0:9c:4c:17:a2:32:
                    06:4d:62:df:a6:77:6a:4d:93:d1:e0:36:49:55:97:
                    f7:cd:a1:81:76:7e:10:de:58:4a:0f:c3:a0:50:a8:
                    57:9f:0e:3b:a5:15:de:c4:b5:1c:45:75:6e:49:e9:
                    95:19:37:9e:5d:ff:35:a1:17:1d:ca:db:0a:e4:74:
                    19:6a:26:b0:c7:32:5f:82:b1:ae:c4:e3:06:1a:d7:
                    49:62:bf:8f:32:52:e5:d5:b6:2c:25:4c:ed:b3:c8:
                    a8:d8:ec:7e:9d:93:b7:c1:21:5c:67:0e:ee:49:a1:
                    e3:ed:29:f5:56:7b:a6:bf:58:f0:52:4c:82:f1:74:
                    77:ac:45:4e:43:0f:dc:d4:6b:83:e2:3c:34:ac:97:
                    88:0c:3f:09:49:f3:7c:f9:9c:69:ec:64:a6:bb:e3:
                    5b:00:4c:b0:8f:67:89:d8:78:4f:5a:25:13:5a:c3:
                    6c:32:d8:ba:4b:b4:60:30:65:51:b5:11:1f:2d:40:
                    29:dc:ec:9c:1f:c7:3f:08:0c:a7:20:28:07:13:37:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1E:C9:5A:4E:8B:49:8C:84:D3:1D:BD:56:03:BD:2A:5F:99:1B:E8
            X509v3 Authority Key Identifier:
                keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:55:37:b5:e4:1a:04:0a:10:10:6b:f3:15:59:91:94:ea:
         7d:aa:80:ce:2d:0c:77:d9:52:cb:91:88:9c:ee:bb:88:b4:28:
         b7:20:dd:cb:4e:83:c9:e1:1d:16:6f:2a:39:85:c4:c1:d7:bd:
         0d:3b:4a:4b:1e:80:93:db:93:8b:83:ec:8e:18:01:a8:d1:33:
         b5:b9:4c:cb:f9:0a:6a:b3:83:86:69:c0:d8:b4:20:27:dd:71:
         19:f3:02:73:63:fa:ec:f6:1c:21:b1:47:e7:ff:7a:55:b5:b7:
         be:fe:b0:55:be:08:01:cb:eb:82:b9:da:54:1a:0b:95:7b:de:
         b8:d0:ca:d9:8b:8c:c1:7a:7e:3e:23:96:0e:ce:62:31:14:42:
         ed:92:a9:6e:e8:60:b4:7e:b6:ee:50:39:82:af:ab:e6:8f:5c:
         96:68:c8:93:9b:f3:88:d2:d6:48:dc:d3:51:69:e3:0c:aa:1b:
         e2:a3:4c:d8:5a:a0:b7:ea:18:f7:bc:21:fa:c7:06:60:c4:0c:
         2a:da:ba:1c:97:83:df:27:d8:be:7e:43:4f:0e:e3:10:90:0e:
         31:26:44:65:f9:bd:e3:d4:d2:32:39:f3:6e:e4:1c:e6:a8:9d:
         66:31:37:9a:87:a7:2b:f6:b1:d4:7b:8c:2e:1b:7a:a1:6a:df:
         89:1e:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:39:42 2024 by rpki-client on console-ams.rpki-client.org