Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          +OI8SeCelveS4gadWkfzf6MmNYi26wvXOGLlz1bawmU=
Subject key identifier:   9A:45:87:81:06:4C:B4:21:A8:46:95:68:75:99:07:46:17:74:4B:C9
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       01901DEAE3CD99841EF66FC5EF2295FFC650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          021A
Signing time:             Sat 15 Jun 2024 22:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:51 +0000
Files and hashes:         1: YHkgKLBbJvwPTPNXnEAz0Dyk42w.roa (hash: hKNNcitrpMgg9zt79BPiSaUHm23+/zp3MoOiDzD+jis=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: 7silEB9mI42EvIQtqumAWH7O3vru5QCZbYrpdnd4DLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e3:cd:99:84:1e:f6:6f:c5:ef:22:95:ff:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Jun 15 22:00:51 2024 GMT
            Not After : Jun 16 22:00:51 2024 GMT
        Subject: CN=9a458781064cb421a84695687599074617744bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:e5:54:43:16:02:09:50:40:dd:a6:eb:1e:
                    b3:13:d8:0a:84:f5:06:2f:ab:a4:c4:84:8d:1e:92:
                    f3:36:9d:2c:23:eb:57:dc:3f:9b:28:07:6a:cc:cc:
                    ce:b3:31:e0:ac:17:c6:ae:c0:13:ae:88:75:cf:f1:
                    2b:85:66:c1:e3:f4:3a:ff:84:89:fd:dc:ee:5e:2c:
                    3e:51:c5:70:5a:09:30:2f:70:eb:92:c5:7f:59:fa:
                    f5:cd:9b:21:96:86:ab:56:d9:51:c2:73:d5:a4:1b:
                    ca:91:57:24:97:a3:30:c4:4e:dd:ed:16:01:86:03:
                    5d:d7:94:30:1d:02:a7:16:a5:02:d4:f4:be:f2:91:
                    c6:81:a9:74:e4:d1:57:69:bc:14:35:0e:24:61:03:
                    01:f0:68:fc:0a:67:2f:13:0b:47:aa:bd:9c:0b:6a:
                    dc:ab:68:7d:34:b9:92:e2:15:bc:aa:14:16:0e:4b:
                    55:fe:b3:cd:f9:e1:ad:3a:20:65:71:f9:0c:3c:94:
                    dc:a6:0b:8c:48:8a:ae:00:12:b8:86:82:f6:6a:46:
                    f5:78:fe:b4:8a:0b:14:87:1b:cf:19:0c:fc:df:1b:
                    18:b4:80:cb:14:10:ed:55:55:bc:62:d2:cd:77:7b:
                    67:42:f2:fe:9b:8d:df:e2:eb:7a:fe:d5:cc:e2:86:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:45:87:81:06:4C:B4:21:A8:46:95:68:75:99:07:46:17:74:4B:C9
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:36:0b:ed:29:1b:db:54:d8:7e:0a:24:88:05:01:d7:f2:76:
         59:43:c9:2b:93:ca:0f:c2:63:4b:22:ff:0e:c7:52:03:ca:d1:
         41:2f:70:52:2c:8a:1a:ac:4e:42:10:94:c7:3f:0c:a5:a4:3e:
         e2:31:ad:3a:74:0f:74:d8:9d:90:ee:0c:9a:f9:b7:cc:0e:cc:
         ef:f9:d6:00:0e:89:4e:91:64:41:11:fd:3c:ed:bd:ef:6a:00:
         56:cd:b4:9a:6d:c7:73:5f:3e:4a:c2:44:1c:5c:8e:e9:f1:89:
         56:0a:99:cb:03:0c:e6:26:be:04:ca:07:42:69:1d:91:a7:a0:
         e6:36:32:e6:bc:0c:e2:43:48:e7:b6:30:15:89:db:82:80:28:
         c2:1e:32:31:ed:12:df:f7:48:1e:e5:80:ef:f5:26:5c:ea:65:
         bb:c1:f4:96:3f:18:4f:ec:a5:d7:b6:e9:d2:b9:e9:b8:dc:45:
         6b:76:04:f3:dc:4f:10:73:d3:c5:d2:b4:73:1d:6f:60:ba:f9:
         f9:e5:74:3d:d8:26:18:96:f2:1f:cd:fd:fe:3b:ec:98:cb:cd:
         cc:2e:cf:af:9c:e8:51:f1:44:57:58:84:81:d4:c8:85:d6:5b:
         d5:fe:51:1b:4d:46:f5:20:a7:1a:26:f8:55:b3:2a:dd:55:32:
         65:01:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:40 2024 by rpki-client on console-fra.rpki-client.org