Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File:                     tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier:          pICLwVzOWepngz74cM/BtGTZOr31cSTgvt6Kn2KjQTc=
Subject key identifier:   A4:69:AC:BB:E1:CD:A0:CF:E4:9D:F6:60:2E:7D:F2:09:44:30:32:27
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer:       /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial:       01901E8FBE940FC8DF09368264C985218EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: LDXTj4PfnTzbmV9biM03I7z6iwg.roa (hash: R510hx90VD3yyq6TRXRN9n9LhLVTIBezM3IXATnqiZE=)
                          2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: 1DQ+RHC2cGiqMQTk86afHz1YfuEGN9SidamffXw5+2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:be:94:0f:c8:df:09:36:82:64:c9:85:21:8e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=a469acbbe1cda0cfe49df6602e7df20944303227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:c9:8e:58:f6:4a:a3:e1:65:a5:ba:9e:3d:
                    1a:1f:2b:6d:74:cd:34:56:16:e4:d2:ce:6a:3b:a7:
                    37:82:c0:70:e8:96:d4:fd:21:aa:9a:e8:95:b4:4b:
                    91:ea:e6:cf:2c:74:df:dc:54:7a:d9:92:6d:a0:c5:
                    bc:20:90:be:7c:78:65:f0:9e:e0:5c:11:3b:d3:fd:
                    83:32:40:9b:59:a3:16:d3:7e:7e:4b:72:c4:9a:af:
                    8b:93:5c:f7:6c:61:68:06:0c:ff:aa:98:2e:f3:33:
                    9c:7c:93:de:c4:ae:76:62:b8:af:61:b4:fe:35:30:
                    2e:04:fc:38:51:e4:60:8e:1c:59:bd:46:e9:f3:d4:
                    2a:ea:c4:93:1d:e9:2d:52:e9:5d:35:27:75:9d:84:
                    f6:76:b9:2b:b8:28:80:4f:4b:2e:49:a9:91:b7:d0:
                    e4:af:e3:4c:e2:ef:e6:cf:72:e2:a9:50:4d:10:95:
                    b9:3f:3c:3f:a4:2a:06:1b:22:a6:58:6d:39:bc:47:
                    1f:75:e4:4d:db:96:33:bf:83:92:6f:5a:1d:cd:42:
                    9d:1f:3c:9b:7c:58:dd:97:36:8c:10:3e:a6:40:40:
                    09:71:55:eb:d0:aa:e7:1a:1f:b1:de:56:1b:01:d0:
                    e6:f7:64:58:e4:a1:f8:35:95:ed:4a:e9:1c:98:99:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:AC:BB:E1:CD:A0:CF:E4:9D:F6:60:2E:7D:F2:09:44:30:32:27
            X509v3 Authority Key Identifier:
                keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:95:71:62:4e:5a:ed:03:9d:88:29:19:27:8d:81:ff:26:
         69:7a:89:c1:d8:3b:b4:ae:0f:22:71:da:b8:c8:24:32:4f:7c:
         80:93:d5:8e:e8:2b:38:69:be:dd:74:ae:2b:6c:64:61:30:33:
         d3:44:6b:d5:62:79:2a:24:f6:dc:a3:f6:73:00:ab:39:0a:0c:
         c6:38:9a:75:11:db:1f:4b:4d:49:67:f0:b5:71:7c:c6:7e:36:
         b9:14:c1:42:81:97:b2:a5:2b:99:e6:64:3d:76:5b:56:2e:3d:
         78:be:1d:48:f0:3c:86:d8:d8:3f:0e:c8:ae:06:0c:9d:c3:a0:
         1d:6e:13:7c:c1:ed:fe:21:a6:bb:af:ee:0e:b2:2a:82:a1:f1:
         db:5e:81:0f:de:b9:47:03:97:04:a9:e9:f3:69:05:94:00:24:
         46:4b:53:bb:9b:12:c0:8a:ef:cb:27:ad:1f:6c:26:d8:b5:5d:
         27:96:a6:ee:b8:9a:22:48:d1:20:9c:5a:6f:a4:2a:96:1c:d2:
         18:0a:77:8e:75:b5:27:3d:d1:0d:35:93:37:b3:d4:71:26:db:
         94:11:3d:b8:11:b4:2a:26:17:48:8c:2d:57:48:09:bd:68:9e:
         68:32:12:20:fa:ce:1b:23:63:33:aa:7d:39:c4:79:d4:f9:0f:
         a4:b3:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:07 2024 by rpki-client on console-fra.rpki-client.org