Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          xOrL9mp/cMM0w7fbflvYI7Xl6dWn1CMSSm8QUYBzDRo=
Subject key identifier:   27:70:6D:00:BF:C9:B3:4D:B8:5F:8F:73:69:11:39:8A:AC:BC:73:53
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       019039993958441E894489C95D83C626E6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          11D9
Signing time:             Fri 21 Jun 2024 07:01:01 +0000
Manifest this update:     Fri 21 Jun 2024 07:01:01 +0000
Manifest next update:     Sat 22 Jun 2024 07:01:01 +0000
Files and hashes:         1: 8cUBNmosKNwSESOMqk4TGHsM4WI.roa (hash: b6YsZciffhtEXiR20xF11TavRx0x05Ye1wifdADOfpE=)
                          2: JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa (hash: cV6raQ+lqWJ2zuWqmq3bL4K1p1kt1zZFxeNFNGsxvJ8=)
                          3: WopWO5Q1e4T34Azz4Qtnqs7pMSg.roa (hash: bsQSTjGwPEQ4zd9yG4mOvqARd0vU/BLZH4C2BG/ZaUk=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: +rJwvetP4zg8DJItGMitBir6k+Os/0xpXQvUY5BlhPk=)
                          5: bOF3pLP6zcSfAeHWNwGQ7rT8jrU.roa (hash: 40nszCitwbjs72LDOpPtaiRFi26EjPTQCnnRRCPlrl4=)
                          6: pArtkAZCHrgWZcrBKNIoPWNa_LQ.roa (hash: qxgrQ3z1vcqTGCZffrwux1wZjUvishxEAtEFzrEW1Mk=)
                          7: xGTB59bWIq2FOsizUgIzb73X3lc.roa (hash: 2DvGaThSAv/jTZnfY012DIi160OYW0ZL7D66E+e1tDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:39:99:39:58:44:1e:89:44:89:c9:5d:83:c6:26:e6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jun 21 07:01:01 2024 GMT
            Not After : Jun 22 07:01:01 2024 GMT
        Subject: CN=27706d00bfc9b34db85f8f736911398aacbc7353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:39:7a:03:da:a1:78:0d:7e:76:42:1e:2e:
                    9f:84:68:ce:08:2b:28:f9:89:7c:fb:3d:3b:ef:f3:
                    cc:c6:02:0f:d1:27:94:4a:2a:2b:73:ff:81:96:51:
                    0a:b0:27:75:c6:cb:cd:ed:8f:63:c3:a0:a2:63:d0:
                    d6:38:da:f3:b4:65:db:38:2f:80:85:5c:e0:cb:d2:
                    9f:51:12:21:e5:58:26:70:35:c2:ea:d4:d2:67:cc:
                    c3:27:f0:d9:ff:92:ec:26:44:ee:28:40:f5:16:01:
                    1e:85:e3:26:29:8e:ac:36:e5:50:47:09:69:08:42:
                    87:a8:82:4a:44:42:05:92:a0:16:58:1d:0c:8a:44:
                    22:32:fa:fa:50:b0:46:09:a9:4b:dd:73:31:1f:51:
                    85:31:d0:de:35:c5:cb:5a:f4:96:36:c9:79:25:f1:
                    33:e3:46:86:96:aa:f3:c9:e5:d6:af:a0:5f:f8:ac:
                    bf:e2:31:47:88:69:b8:c6:de:f8:ec:fd:d2:c3:1f:
                    a1:8b:0b:7e:01:fe:27:9b:db:44:d7:32:53:38:49:
                    46:83:d4:0b:f5:03:5c:ec:eb:17:08:bb:db:fd:7f:
                    17:0b:cb:a5:d5:a3:31:21:0b:92:b1:7c:22:63:a9:
                    25:3d:4d:e9:2d:55:8e:be:16:6f:ea:b7:4b:7a:95:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:70:6D:00:BF:C9:B3:4D:B8:5F:8F:73:69:11:39:8A:AC:BC:73:53
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:32:95:ee:34:d3:8c:3b:24:58:0d:83:c3:c3:49:18:6b:
         28:04:bc:31:77:80:8f:e1:4f:37:db:ea:2d:f8:d4:bd:3a:18:
         2f:44:e7:e6:80:4b:89:4b:f9:73:03:76:59:c1:94:e6:9e:be:
         29:fe:b4:c0:c4:66:5a:03:be:46:de:1f:08:a5:75:63:26:ac:
         4c:df:62:af:91:cf:b3:d2:df:1a:dc:61:7d:a0:3d:28:0b:40:
         80:2d:7a:c8:95:75:7f:db:06:cb:d6:c3:2b:9b:c8:b4:23:4b:
         fd:9f:a7:d4:fd:c4:f6:ba:89:1d:c7:ef:70:f5:dc:0e:26:93:
         67:f3:b6:f3:98:38:3b:1b:71:dc:29:c8:a8:d9:75:1d:61:14:
         12:ca:18:14:6a:82:37:4e:35:08:8c:a2:24:30:3f:49:4d:6d:
         bc:7f:7b:56:3f:1c:8d:77:95:f2:b4:0a:56:4c:25:20:b7:b4:
         29:5a:70:97:bf:c4:38:fe:4b:50:b1:ff:f3:d7:74:42:2a:3e:
         01:46:b3:49:7f:7b:15:e0:2b:88:0c:7d:00:b9:27:86:eb:88:
         b3:1c:0b:45:da:cd:54:0a:83:38:bc:fd:c4:f1:31:a6:09:af:
         c0:b3:b2:e8:b4:30:80:fb:ca:44:06:1b:40:29:5a:15:dc:98:
         5f:72:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:05:05 2024 by rpki-client on console-ams.rpki-client.org