Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File:                     tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier:          HH6kQOcJ5/bke1G0+0bn2Tmn46ZFCP/tHie6i91epYg=
Subject key identifier:   9A:A8:1F:D5:37:41:B8:61:22:84:61:EE:D0:89:E0:74:52:6E:F3:81
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer:       /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial:       01901DECA55292FC4933988A0BA5BD97619D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:46 +0000
Files and hashes:         1: MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa (hash: 0xEiXwpypDowIAwaMgRsUBq+/RHgv4BQbe2Fa2390u8=)
                          2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: huQDjYdUu5o5SZsA5eikqRWxEoYMqno8cTQwtUsOy4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:a5:52:92:fc:49:33:98:8a:0b:a5:bd:97:61:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
        Validity
            Not Before: Jun 15 22:02:46 2024 GMT
            Not After : Jun 16 22:02:46 2024 GMT
        Subject: CN=9aa81fd53741b861228461eed089e074526ef381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:52:16:c5:dd:68:07:da:74:ba:cd:88:63:
                    f3:bf:01:d9:27:d8:12:1d:22:21:d2:e5:33:e6:09:
                    22:5e:04:fe:ea:2c:d7:1a:3e:15:e2:1a:69:d0:40:
                    12:33:6d:83:27:5c:94:18:39:b2:87:61:53:6c:11:
                    02:83:d0:14:78:74:e1:3b:ee:ab:38:85:59:c0:fc:
                    0f:3f:c7:f0:83:cf:45:0a:e3:70:b7:19:ab:de:2c:
                    fc:75:ab:00:e2:7c:35:7f:3e:49:c3:b1:5f:ca:9f:
                    f8:9b:32:15:0c:48:da:14:49:40:03:9f:f7:e8:5d:
                    1c:a9:2c:11:25:5d:2c:42:83:98:ff:a0:c1:5f:f3:
                    66:ce:21:94:cb:c7:4f:2d:32:71:d3:d2:d6:d3:96:
                    38:2f:9f:ac:79:33:d5:55:4b:0c:e5:d7:14:7a:96:
                    78:a6:d5:8c:5b:ad:3e:54:96:a0:de:dd:44:58:7a:
                    e0:c0:1e:c3:a2:7f:cc:5a:ed:1d:f5:31:00:4a:2f:
                    9a:63:f2:8c:2d:b8:e6:4e:07:77:1f:5a:ab:2f:df:
                    2b:d5:8b:b6:5f:f5:2e:fb:e0:40:8c:b3:42:1a:e3:
                    33:77:02:d0:a0:3c:23:ce:b3:e4:d6:4e:b5:b0:cc:
                    dd:50:77:d5:92:dc:ec:38:37:5d:0d:c0:e7:5d:54:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:1F:D5:37:41:B8:61:22:84:61:EE:D0:89:E0:74:52:6E:F3:81
            X509v3 Authority Key Identifier:
                keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:5f:02:9b:0b:77:d9:ba:a2:d0:97:c5:be:d2:5b:ae:32:
         78:d6:68:6e:8a:e3:eb:49:5f:07:62:07:cf:b5:86:79:6b:34:
         bc:7b:a2:14:82:31:aa:e6:36:8b:6e:75:e7:70:9e:b0:cb:ad:
         76:11:56:4f:f6:aa:52:07:e1:50:79:a7:98:e6:d0:15:85:97:
         69:4f:c1:73:bd:a7:2f:5a:1a:c6:73:09:52:2b:b5:6c:de:e6:
         98:83:da:22:99:a6:0e:2b:b6:fc:d6:3f:25:c4:a3:71:e9:66:
         79:44:7e:38:aa:be:1d:23:bb:14:15:5e:8e:07:f6:dc:0e:f5:
         db:0a:40:ab:08:23:bf:9e:09:82:ff:b0:5e:81:cf:b7:ff:11:
         8b:71:98:da:92:d7:9b:dd:98:0a:bd:60:0d:d3:1f:2a:08:a0:
         f5:cc:d4:7d:98:c6:61:1b:8f:14:c6:c6:5b:d9:32:74:70:c4:
         17:a5:05:7a:4b:4c:ca:8f:9b:71:b6:99:01:97:03:ba:26:dd:
         30:f1:9c:ad:a7:b2:18:17:b0:5b:60:05:e5:87:89:89:3c:59:
         1e:61:c9:f3:32:4f:83:9b:f9:3d:ce:a3:f3:a9:dd:26:45:94:
         50:ab:02:35:d7:da:15:26:41:3a:3f:c8:8b:f0:fd:8c:5c:72:
         28:d9:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:07:38 2024 by rpki-client on console-ams.rpki-client.org