Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          6DACzwIJ7aTzwuRNAGY35d4adlTmY4c1+t5k9OuN7DA=
Subject key identifier:   F4:87:80:46:0B:E6:71:3F:9D:F2:89:30:71:FD:C2:69:4E:F5:A1:6D
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       01901E591E52D3AE025042F766A255F9CA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 00:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:15 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: Z/pO+Gd3CCnAIMEZu4bOiP6bhxqjM28130WA60Cq1FE=)
                          2: xJjO5kcTDHaoLrXVlJiQJEapjp8.roa (hash: 3xq/hsOW7yEK6OripsAmkEXoKX9LDwG3rj/54Q1EMrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1e:52:d3:ae:02:50:42:f7:66:a2:55:f9:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Jun 16 00:01:15 2024 GMT
            Not After : Jun 17 00:01:15 2024 GMT
        Subject: CN=f48780460be6713f9df2893071fdc2694ef5a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:a4:a0:c0:a9:ee:37:71:c1:88:59:f0:76:
                    02:84:75:9d:47:a3:70:d9:7c:ee:6f:51:92:c0:dd:
                    ab:a7:dc:0b:97:13:4c:b3:38:e4:a2:a8:32:8a:10:
                    10:1e:47:c7:63:7d:3a:76:5b:a8:34:cd:99:6f:e8:
                    69:eb:b6:a0:dd:61:e4:f1:8e:16:21:6d:3b:70:c8:
                    6a:25:3d:3e:92:a4:10:f8:f7:ce:05:a5:ba:72:a9:
                    c6:9e:cf:38:fe:71:5a:a5:db:8d:23:ad:7f:9a:0f:
                    2d:98:33:ca:73:17:92:98:fb:e4:9c:1c:5a:1d:3c:
                    30:1e:6f:e5:64:b2:bd:86:91:37:7d:f4:86:9c:be:
                    5f:8f:d4:42:0f:84:91:9a:65:91:df:27:6f:93:70:
                    c1:7f:a9:f5:0b:59:54:97:2a:4b:0c:46:6f:54:18:
                    ee:fa:8b:11:92:3b:78:b4:14:ac:5f:05:a4:14:99:
                    72:38:d1:d8:79:3c:ad:17:3e:5d:6d:21:3d:b1:6a:
                    7a:23:4f:7b:83:c2:c1:ae:73:93:ce:d1:c1:35:8f:
                    92:f7:71:a8:c1:52:5b:39:b6:69:8f:7a:c0:0a:55:
                    8c:24:a6:8e:20:18:96:60:97:73:aa:c1:18:53:d3:
                    30:1f:6a:f1:01:5e:2b:ff:0c:2f:e3:71:17:68:b8:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:80:46:0B:E6:71:3F:9D:F2:89:30:71:FD:C2:69:4E:F5:A1:6D
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:03:d7:e4:25:11:88:c1:33:cd:73:e8:07:a1:91:49:37:e6:
         70:0f:7f:d7:04:f7:e7:74:e7:e7:cf:32:9f:3a:3c:23:7e:25:
         14:3e:ea:19:6e:63:f1:de:09:6b:63:ae:2f:1a:07:54:cf:f0:
         ec:58:46:a0:de:08:80:09:ed:8e:5b:bc:29:0a:77:4b:4b:d4:
         02:19:d4:e5:28:c9:36:44:e7:b8:0a:00:28:7f:0b:b6:46:83:
         00:da:aa:de:e5:fb:06:ea:f3:f6:b8:e9:3b:d6:9d:a6:47:14:
         1a:5a:c2:17:5f:12:d7:62:9b:73:95:e4:3f:62:ed:71:d0:60:
         9a:a6:2f:24:4d:af:f0:a7:1d:dd:92:b4:6e:00:9c:26:5c:11:
         5f:9c:b8:fa:56:ab:e6:7c:15:1b:39:03:a4:02:ca:41:eb:ea:
         01:d2:ca:d5:59:2a:9a:cb:4c:60:44:f8:fc:15:8e:e9:da:98:
         36:f0:30:c0:5a:94:e7:91:28:4e:e2:e0:ab:34:77:5b:28:38:
         c8:72:51:8a:ef:61:5d:07:9f:d1:6e:5c:97:bc:9c:9c:62:57:
         f7:56:d8:55:95:ab:66:20:c6:f6:91:08:8e:fd:8c:bb:d1:d0:
         8c:81:a2:a4:99:47:58:01:55:ea:d1:fc:81:e3:f1:a4:fe:1b:
         75:ab:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:06 2024 by rpki-client on console-ams.rpki-client.org