Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier:          IyfipNOECGaVmp4z3z0VIag6hYMtvCajU1psYmFneak=
Subject key identifier:   D0:82:65:92:1F:73:E0:CC:7C:D6:56:59:32:73:64:DE:F9:F7:30:A1
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer:       /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial:       01901DEC185109B9E39623D6CD676F514575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:10 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:10 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:10 +0000
Files and hashes:         1: 1q2bjLvXSw5RJXY2jb_aPYi9dNk.roa (hash: joTvv21VicCycxITkC6OzOCtAH+P8BRtEkXzkxu3e5c=)
                          2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: RChTitocboF8cUd24iOGHZzMZ8KgdFm3PMSbzpo2j7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:18:51:09:b9:e3:96:23:d6:cd:67:6f:51:45:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Validity
            Not Before: Jun 15 22:02:10 2024 GMT
            Not After : Jun 16 22:02:10 2024 GMT
        Subject: CN=d08265921f73e0cc7cd65659327364def9f730a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:be:7b:14:0e:6f:26:87:a6:9c:46:be:ea:
                    88:ef:59:aa:6b:f0:bf:ec:b6:07:fc:c7:73:e8:04:
                    ad:fe:10:50:7a:52:b2:16:d1:d4:00:b5:21:99:08:
                    49:99:aa:ab:97:7e:2a:41:ab:1f:40:72:3a:65:cf:
                    78:31:ec:b7:08:4e:0a:c3:08:a7:e9:43:ef:7d:2b:
                    c1:76:a1:0b:e6:e3:9a:b5:75:3d:d9:4b:8f:6e:4e:
                    bd:f4:a2:8e:65:43:9c:bf:c4:97:35:c0:82:80:ef:
                    84:d4:77:3c:02:8d:95:0f:6d:d8:e6:12:30:3d:1e:
                    bc:b7:36:fb:33:ae:3a:87:ad:74:9a:03:36:f5:8f:
                    d4:c1:16:fd:09:46:d2:b0:73:0d:c1:50:e3:d3:19:
                    08:e1:0f:1b:52:3b:b5:1e:35:89:ed:5c:df:ea:62:
                    03:ad:4c:02:6e:f9:e9:e0:46:7e:70:80:d9:f9:96:
                    59:e0:20:9e:4f:66:4d:c5:8e:2e:09:f7:28:cb:a0:
                    40:38:76:45:a0:e2:4d:38:09:8b:aa:b3:65:7c:a1:
                    3f:77:58:5d:b2:f4:4e:a0:3b:df:68:a5:ee:4c:58:
                    5e:43:78:7b:43:6c:ea:c1:bc:fe:60:29:72:67:bb:
                    e1:6b:91:80:c8:a3:4c:b5:d0:b8:98:f7:db:ba:43:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:82:65:92:1F:73:E0:CC:7C:D6:56:59:32:73:64:DE:F9:F7:30:A1
            X509v3 Authority Key Identifier:
                keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0e:67:39:24:23:5e:93:e8:7e:37:f1:96:de:ac:f4:01:34:
         9e:24:f1:3a:1d:54:72:3a:f0:fb:51:c3:57:5d:0b:bf:85:e0:
         e8:c6:f5:2a:2c:08:68:c4:07:0f:d5:a0:31:bf:10:ab:1a:b8:
         46:91:1a:78:6f:92:73:23:e8:3f:db:b9:07:78:02:1b:c3:f3:
         bd:55:b6:60:3a:ca:29:ce:dc:2f:7b:33:85:f4:13:48:5c:1b:
         8f:b2:df:66:76:dd:df:85:ff:01:69:cf:88:1f:ff:59:d3:af:
         2e:df:67:96:8f:c2:95:56:18:12:94:0e:35:8c:35:2f:0f:6e:
         3e:39:8c:ad:ae:7b:e7:e8:f6:42:82:41:d0:72:7f:6b:a6:8b:
         34:82:3f:02:bb:17:d0:e8:e7:bf:69:05:f0:d2:13:93:a4:20:
         13:5d:e8:12:36:46:67:cc:d0:cc:b2:5f:88:fb:8f:8b:87:53:
         63:85:72:ac:10:f0:23:05:f3:a6:e1:9a:e6:b1:f7:bf:84:a1:
         1f:9d:6a:1a:34:d0:ab:b9:0c:9a:49:f4:27:8b:4e:62:14:b4:
         28:0f:5e:5d:75:a6:69:21:69:18:01:7d:3e:2a:4e:08:d6:b7:
         3f:b5:5b:52:f5:80:c2:a7:14:23:c6:49:fd:c9:09:34:48:44:
         e4:9e:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:04:15 2024 by rpki-client on console-ams.rpki-client.org