Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
File:                     6WM0sHIQirro8yHsTM50lMEPDvE.mft (raw, json)
Hash identifier:          KFyVGUjatNYt1xWGggzsyH4HW0uFxoBsHtmc9biyQac=
Subject key identifier:   4C:44:25:87:F8:8F:C6:31:C2:D4:22:67:B7:95:F5:EE:17:F7:49:0F
Authority key identifier: E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
Certificate issuer:       /CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Certificate serial:       01901EFDE247F7873EC652F7AC5054E82042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
Manifest number:          04BF
Signing time:             Sun 16 Jun 2024 03:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:13 +0000
Files and hashes:         1: 53kbaQg7FTSB94UmPFJuBx93PGk.roa (hash: M9hPBLO5FpkjMljHL+XFBiLIFwiZ69S6PvOPIs31lX4=)
                          2: 6WM0sHIQirro8yHsTM50lMEPDvE.crl (hash: BDZCEABFwhuxAQk0FTsWBqiEE6ZxGjxzcDPTZ++sau0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:e2:47:f7:87:3e:c6:52:f7:ac:50:54:e8:20:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96334b072108abae8f321ec4cce7494c10f0ef1
        Validity
            Not Before: Jun 16 03:01:13 2024 GMT
            Not After : Jun 17 03:01:13 2024 GMT
        Subject: CN=4c442587f88fc631c2d42267b795f5ee17f7490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:ea:03:43:ae:95:59:2e:1d:f2:7b:7d:4a:
                    d9:48:ab:81:97:a3:b7:5f:5a:de:22:35:c4:9d:8d:
                    e5:41:31:ea:ea:c9:ae:d0:52:22:be:d6:2f:ad:6b:
                    a0:e2:04:34:ac:27:90:a6:ae:ee:02:4e:27:6c:78:
                    8e:e1:c7:9c:b7:dc:2e:71:98:bd:f3:97:0d:de:2a:
                    e1:c7:5f:58:57:6b:8d:cd:f4:7f:74:2f:e1:57:73:
                    f9:46:69:a2:7b:bd:f4:8d:b0:6f:e8:22:39:14:2f:
                    eb:4a:03:38:37:da:85:1e:65:7f:3c:67:d5:6f:1f:
                    44:43:a7:6b:6e:09:ff:4e:96:57:7c:3b:f7:6f:70:
                    e0:b6:32:8d:99:e2:17:f1:50:b1:ef:ba:66:5f:79:
                    28:43:66:9e:eb:7f:ee:35:07:0d:4f:9d:74:b8:61:
                    85:14:13:47:52:ab:26:b7:44:5c:5b:b9:c1:e6:28:
                    f9:37:3d:cb:80:04:e9:8d:82:2d:df:47:b9:c4:50:
                    b4:e9:16:00:71:51:b3:7b:67:5d:b4:75:13:63:0b:
                    b7:c6:e3:f7:84:e7:24:1e:68:f1:9c:f9:c7:1a:29:
                    7f:dc:13:24:5d:89:97:25:0e:5a:4b:76:39:21:ea:
                    e5:af:71:7e:e7:d5:f4:03:fb:ad:3d:66:84:7c:28:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:25:87:F8:8F:C6:31:C2:D4:22:67:B7:95:F5:EE:17:F7:49:0F
            X509v3 Authority Key Identifier:
                keyid:E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:26:6b:13:f9:12:ab:75:43:57:56:80:39:6e:4b:7c:fa:06:
         c9:15:5c:ef:f5:97:0c:da:4e:00:47:39:df:27:d1:34:e1:42:
         4c:ba:03:77:b8:4a:23:f8:74:89:43:23:15:2c:ba:9d:53:c0:
         c6:d2:2a:3e:bc:b3:c1:8e:b4:5a:4e:75:74:32:b3:e6:7a:7a:
         c8:a1:07:55:fb:fc:19:67:bb:92:d2:60:69:0b:c8:da:1d:a5:
         8f:a5:92:5a:79:04:08:9e:ab:e9:3f:b1:cd:5c:ad:fd:00:20:
         8e:83:82:c2:3f:71:93:2c:9e:0d:dc:13:12:e2:48:84:ba:a6:
         34:b3:e3:86:4f:8c:5b:d8:dc:0d:d8:6b:06:c4:de:d4:38:82:
         c6:bb:d1:11:c8:89:c6:66:d1:76:b4:9c:83:61:b5:a4:37:d0:
         8e:45:45:a0:8a:0d:9b:ad:be:75:47:f8:c9:b5:5b:64:58:1e:
         c8:25:ac:44:38:8d:1a:4d:84:f7:ca:e8:2a:5d:ff:3e:fb:34:
         2f:2a:79:77:c2:e8:37:92:e6:c2:16:f5:df:19:21:5a:83:20:
         73:cb:ab:3a:fb:32:fa:52:07:39:42:09:c1:23:0d:47:31:dc:
         59:ae:a2:44:f5:8b:41:c2:49:9d:46:9d:f9:ad:99:7c:90:5f:
         03:b8:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:41:37 2024 by rpki-client on console-ams.rpki-client.org