Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File:                     DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier:          NTTVLxv3+gnHDDslBmQ06dz2i2LUzH6U8O+mH+AjCa4=
Subject key identifier:   B4:71:CC:CF:C1:93:D0:83:02:3F:EF:80:2A:D4:A1:98:BE:93:77:CE
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer:       /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial:       01901E58BDACEB959A3633BC19F85C537763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 00:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:50 +0000
Files and hashes:         1: ByEmA8Qazs8EOt6OWMDIIccfBf4.roa (hash: bAqFzYq+Y63vLoPeiqRw2MxymlTZ2vDuSbSGVO61ZE4=)
                          2: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: OU1jmaJp/zamPQDsCUXJl7cm74h7ux3TNIYLEp/D7dA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:bd:ac:eb:95:9a:36:33:bc:19:f8:5c:53:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
        Validity
            Not Before: Jun 16 00:00:50 2024 GMT
            Not After : Jun 17 00:00:50 2024 GMT
        Subject: CN=b471cccfc193d083023fef802ad4a198be9377ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:c8:56:6f:3b:d3:9f:6c:f6:2b:8b:0c:d8:
                    a9:95:f2:59:54:6d:48:32:6a:48:94:de:cb:f8:6f:
                    e0:a3:45:cb:00:ce:01:08:47:f0:66:f5:bf:9f:a6:
                    59:36:15:ec:8e:1e:32:ec:ae:63:4f:1c:39:a1:71:
                    7c:63:2d:63:e5:ff:9e:81:91:d6:44:d0:b4:8b:6c:
                    d5:96:17:d1:06:8a:66:fd:1d:f8:bd:a1:02:23:10:
                    f8:9c:16:ba:07:2c:fd:c4:c1:52:c5:91:60:5e:ec:
                    5b:5e:5e:fe:4f:28:26:5c:8e:f5:77:c2:0b:64:a4:
                    9d:a5:55:f1:e0:ba:20:86:17:69:14:9a:e5:bd:ee:
                    d2:be:12:e8:aa:0f:15:d4:58:cd:63:4f:a8:9e:65:
                    0f:18:de:14:70:69:ae:fc:34:ab:80:33:d5:31:86:
                    05:46:b3:e9:de:26:9e:25:5e:43:9c:74:0c:7e:7d:
                    56:c2:0a:86:a2:a4:e6:b1:0b:db:79:96:f0:cb:ca:
                    e5:5c:49:22:c1:68:5f:4f:0b:bc:09:9d:15:8d:68:
                    aa:b0:e0:28:bb:f1:79:71:25:cc:0f:d1:f6:de:13:
                    84:72:fb:f1:5e:dc:ce:ab:31:2a:ca:2a:99:fe:77:
                    cb:a7:30:e1:b7:5a:67:86:d6:59:9a:56:24:de:56:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:CC:CF:C1:93:D0:83:02:3F:EF:80:2A:D4:A1:98:BE:93:77:CE
            X509v3 Authority Key Identifier:
                keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:44:0c:47:79:16:e3:97:67:9c:73:f9:d1:28:f2:f4:cb:
         7a:5b:dc:c9:d0:0a:f4:68:81:3c:3b:c7:34:57:fc:80:fe:4a:
         eb:d9:ca:f7:22:54:83:82:5c:36:42:f6:3c:5e:67:a5:bc:a3:
         1d:7d:e5:f2:4c:6c:6b:6a:13:c5:24:4e:fb:43:8d:2a:4e:e0:
         bc:9a:4e:b4:94:c2:d5:17:60:da:c1:c7:d2:09:b7:61:aa:09:
         d0:36:4e:c8:6e:66:c1:93:de:05:6a:bd:9f:ba:ce:17:c7:42:
         c9:25:9f:ca:bf:56:04:ec:9e:fc:bd:1d:cc:b9:46:f3:b5:6c:
         4e:45:70:ea:11:66:15:70:f1:07:5b:b6:c8:82:59:f6:ae:81:
         d1:11:ab:dc:88:0b:c9:81:b2:54:e8:17:d8:4c:eb:4e:e8:16:
         fc:58:10:ba:b0:99:5f:b4:4e:55:22:81:58:88:54:84:96:47:
         c2:fb:f4:be:04:ef:b9:e5:1c:31:ee:5a:fb:be:93:3e:e5:09:
         e2:30:4e:06:f9:d3:8c:cb:a9:4b:97:e9:89:54:fa:80:3e:b7:
         14:bb:2f:75:8c:2c:50:eb:a6:b9:7f:bf:83:c3:a9:89:95:6d:
         ed:f7:39:af:50:90:ef:72:2c:2c:e4:f6:36:fc:88:10:3c:31:
         28:61:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:08:39 2024 by rpki-client on console-ams.rpki-client.org