Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier:          8y9RgOYwi/5T78xzLRhNIe/WBxSJlrG5qxoEUbEw0qo=
Subject key identifier:   A9:FD:2C:2A:D1:4F:DD:B5:99:CF:77:FF:E1:F8:E0:D8:07:40:54:54
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer:       /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial:       01904867C6325DFDF506FE04FE1B51601220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number:          11DA
Signing time:             Mon 24 Jun 2024 04:01:18 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:18 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:18 +0000
Files and hashes:         1: 1q2bjLvXSw5RJXY2jb_aPYi9dNk.roa (hash: joTvv21VicCycxITkC6OzOCtAH+P8BRtEkXzkxu3e5c=)
                          2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: K+fO+FJnbX4Ojfkn9+dv1yqLeIJHncFxGSB60DggcdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:c6:32:5d:fd:f5:06:fe:04:fe:1b:51:60:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Validity
            Not Before: Jun 24 04:01:18 2024 GMT
            Not After : Jun 25 04:01:18 2024 GMT
        Subject: CN=a9fd2c2ad14fddb599cf77ffe1f8e0d807405454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:72:d8:40:bb:33:31:80:20:63:46:6d:5a:
                    88:37:65:a3:d2:01:ff:9d:97:9a:51:a2:93:72:33:
                    f8:9e:8b:d5:df:2a:f2:11:1a:14:0c:ed:cd:62:2a:
                    33:f6:87:2e:ca:bc:75:b6:dc:c7:fc:7b:f7:a2:45:
                    a6:4c:55:e6:34:96:c9:63:21:40:29:d5:cf:a1:eb:
                    d0:01:82:a1:e0:4c:0d:5e:f5:62:01:a5:14:5e:0e:
                    86:64:7e:d7:a8:3e:9b:62:db:33:12:25:64:97:d9:
                    17:e3:89:4f:d3:90:02:d6:e2:60:cc:51:04:24:8f:
                    80:fc:2a:1c:57:26:57:13:fb:f7:61:be:8e:47:d3:
                    b4:8d:05:99:5b:13:7f:7b:b8:fe:cd:90:fb:e4:8b:
                    c1:da:4d:bb:bd:76:b7:c2:9d:a1:2b:8a:c3:7e:dc:
                    5f:37:18:fc:47:45:c3:18:a3:48:cf:ce:ad:f5:0a:
                    ac:f1:bd:13:2c:1d:12:7b:a6:04:80:2d:a5:18:be:
                    8b:04:41:78:f5:73:a6:a1:12:fe:9e:12:05:eb:31:
                    f6:ff:cc:34:bd:82:76:a1:cd:56:e8:aa:b5:e0:d2:
                    31:fb:d3:74:df:5a:03:9c:9e:46:e3:29:a7:8b:e9:
                    f3:c1:bd:bc:fc:1a:6d:5d:fb:5c:3f:36:d8:5a:51:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FD:2C:2A:D1:4F:DD:B5:99:CF:77:FF:E1:F8:E0:D8:07:40:54:54
            X509v3 Authority Key Identifier:
                keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:f8:eb:fe:89:df:f4:11:ce:e2:22:38:6e:e6:15:0e:12:
         47:59:b9:60:de:78:f7:f9:62:ff:fc:fe:31:48:8e:87:17:d5:
         a2:97:4c:9b:5e:95:63:d7:28:2d:79:8e:b8:6d:c3:bf:6a:45:
         8e:ca:70:54:fc:74:24:9d:c7:eb:cb:de:fb:ad:fe:b9:db:47:
         96:7f:8c:e9:68:27:7d:a1:7b:51:e8:b8:5c:64:89:4d:ec:39:
         49:52:28:9e:e9:99:da:17:f1:53:e5:64:57:94:d8:89:15:5d:
         44:c2:df:9d:a9:76:09:8c:40:9d:dd:40:1d:ff:93:c8:1f:fd:
         17:b0:f8:b2:94:f7:aa:14:d1:3e:81:67:77:9a:79:b3:27:fc:
         de:88:43:a1:f9:79:40:73:b9:33:8a:d9:75:b6:22:5a:ff:54:
         59:5f:98:84:f8:d2:42:87:f8:d1:c6:db:82:a2:bb:39:88:0a:
         a9:04:cc:d3:63:6a:5c:1d:b0:c3:4c:58:8e:26:ae:27:57:56:
         ff:f5:6a:43:7b:36:64:00:a1:aa:0a:a6:fb:47:e6:55:24:c9:
         2e:e8:9c:98:45:03:b1:e4:94:9f:15:fa:8c:fa:a2:9c:e3:3b:
         a9:6a:da:6e:d7:a2:f5:d7:15:0f:b9:1f:00:df:cc:03:85:29:
         22:3a:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:16:55 2024 by rpki-client on console-ams.rpki-client.org