Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File:                     0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier:          6Hqf3OJLsx8a2LSKXHW5HHVusI1rbY6bvcHGNPQxu1U=
Subject key identifier:   F8:36:9A:70:A0:EA:07:E4:49:0D:CC:3D:62:2A:FA:FC:78:02:0D:29
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer:       /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial:       0190231128A7E0A1FA94F80F7D9A65B2DAF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 22:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 22:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 22:00:45 +0000
Files and hashes:         1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: TCJEhv+5M3fbLDTFVnVpSzycpBFyZhclYfT8C7i/gns=)
                          2: XgRDPze3aBIlzXgv8RgIYNcUNvg.roa (hash: PheVQyEIKyP8tF+uNb7PNY3ZrAfHwR/vEIUnyHAe7dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:23:11:28:a7:e0:a1:fa:94:f8:0f:7d:9a:65:b2:da:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
        Validity
            Not Before: Jun 16 22:00:45 2024 GMT
            Not After : Jun 17 22:00:45 2024 GMT
        Subject: CN=f8369a70a0ea07e4490dcc3d622afafc78020d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:d0:28:5c:55:99:53:73:9d:82:08:ba:44:
                    d4:2f:24:3b:0d:e4:d9:4b:d3:4d:25:f6:5a:7b:73:
                    45:15:bc:ff:7e:33:96:83:0a:e0:b7:6b:03:18:35:
                    23:90:9d:55:1f:b0:76:bd:4b:66:ba:66:99:6f:b9:
                    86:8e:14:70:0a:90:00:6e:df:23:b5:ba:7c:79:cf:
                    c1:d3:ba:19:ee:2c:76:51:8c:20:c9:24:a8:9e:1c:
                    8e:dd:aa:b0:2e:4e:00:72:8c:4a:0e:c1:86:95:38:
                    29:53:f9:59:cd:b6:b1:8c:3d:2a:f3:e4:b9:9e:33:
                    25:5e:e8:d2:c1:64:a5:ba:b2:0d:20:81:08:f3:6c:
                    e3:8b:8a:5d:d2:5f:83:a9:0e:9e:f2:40:f6:87:66:
                    d2:fa:73:66:e1:b1:21:24:10:da:43:d3:a7:59:a1:
                    a7:06:55:ae:ad:33:03:9e:1b:83:28:dc:c0:42:9d:
                    2a:62:96:60:be:fb:31:9a:16:5a:52:ac:f1:3c:ed:
                    3d:f6:71:72:40:6c:90:8a:a0:53:28:d4:03:3b:d1:
                    bd:c0:4c:a7:8e:d1:8a:fe:72:cc:bf:e6:17:ef:f3:
                    83:da:51:1a:43:e0:92:9a:6d:05:19:43:0d:25:28:
                    0c:26:79:14:96:d4:70:d5:88:49:0e:36:c7:53:5f:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:9A:70:A0:EA:07:E4:49:0D:CC:3D:62:2A:FA:FC:78:02:0D:29
            X509v3 Authority Key Identifier:
                keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:af:5a:06:f7:77:1b:b2:50:06:aa:74:b2:f4:66:f9:73:1e:
         ed:fc:ea:67:4c:5e:f0:89:7a:b5:4f:f6:df:b1:d7:93:e9:e7:
         71:0e:3b:7c:1e:1d:91:50:71:83:e3:ad:23:63:36:1e:30:b6:
         d1:76:1f:7c:a3:a0:86:89:f9:43:df:7f:cb:b1:e1:e8:4b:05:
         86:6e:e9:64:41:0a:97:55:86:97:a4:93:3a:0f:89:1c:8d:2c:
         78:81:b6:72:17:fa:1f:60:8e:f7:3a:26:17:5a:fc:b7:c1:11:
         0b:85:f9:01:ad:cf:ad:c8:ff:9e:24:d7:0e:f5:02:a3:d9:f6:
         5f:15:7e:0b:47:85:69:df:2c:c0:f0:09:88:fc:ee:51:da:0f:
         de:28:af:1f:c6:4c:40:99:98:0b:66:69:b4:5c:21:b3:e3:c0:
         1e:19:92:9c:76:b7:b1:2c:7f:74:3b:fe:18:21:2e:9e:89:cc:
         f4:c7:b2:12:01:63:88:24:1a:d0:8f:c3:cb:d0:e3:74:1c:e8:
         a8:97:47:1a:e2:ef:a0:a1:5e:b9:61:76:a1:96:51:bf:c2:ed:
         16:3a:3c:23:9c:eb:71:d6:b0:ca:c3:1c:a3:25:4e:6d:8c:ae:
         db:13:65:27:c2:16:42:48:72:f5:f0:f9:a0:79:cd:0b:27:66:
         45:7e:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:59:35 2024 by rpki-client on console-fra.rpki-client.org