Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
File:                     r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft (raw, json)
Hash identifier:          8qM3n9Dfjg8s88zZQi7Yj9XRZ6jElSOplFIr2RcE+s0=
Subject key identifier:   45:85:CA:31:6D:39:70:6B:70:E8:08:C1:54:24:16:72:FB:6D:18:9C
Authority key identifier: AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F
Certificate issuer:       /CN=afaaa537aa667361129f763894fc8bfcbfdea96f
Certificate serial:       01906B2A785FA9FE3B08539711D650FA07B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
Manifest number:          0324
Signing time:             Sun 30 Jun 2024 22:01:03 +0000
Manifest this update:     Sun 30 Jun 2024 22:01:03 +0000
Manifest next update:     Mon 01 Jul 2024 22:01:03 +0000
Files and hashes:         1: 8VXLkzFzk7HW4wcb4qjOuE81Qg4.roa (hash: H6/qrzKkCjEazgaxwt4yuVb3qHgDsgyMOLDN7qLNAh8=)
                          2: r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl (hash: pNkLkrBxKs5bx4ihmXwCvrhN57Rhu0m6HD5gvYRfyiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2a:78:5f:a9:fe:3b:08:53:97:11:d6:50:fa:07:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaaa537aa667361129f763894fc8bfcbfdea96f
        Validity
            Not Before: Jun 30 22:01:03 2024 GMT
            Not After : Jul  1 22:01:03 2024 GMT
        Subject: CN=4585ca316d39706b70e808c154241672fb6d189c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:cd:db:98:a4:3f:93:28:50:fd:6f:6d:58:
                    74:c4:21:84:73:e2:43:ed:10:fc:60:ca:a9:99:2e:
                    c1:11:77:11:16:ba:ac:e9:6a:b4:d4:b7:1c:5d:92:
                    12:28:b0:9a:32:25:a1:6f:72:93:93:7e:bb:a2:2b:
                    c2:af:63:16:55:e0:8e:84:a1:b8:55:cc:93:df:18:
                    3b:50:b8:26:99:94:33:55:3e:55:50:ef:08:f4:81:
                    de:f0:0b:f5:8e:dc:67:c6:9d:95:8f:70:4b:40:a2:
                    e6:c9:8a:fe:a5:7b:3b:ff:cd:17:c9:30:94:00:c7:
                    ae:ee:8e:ee:83:c8:9c:12:1c:09:e0:a7:a7:31:59:
                    81:a8:8c:be:63:d5:13:29:56:c6:a9:ec:7c:72:57:
                    83:b5:6d:6d:1f:ab:d6:9e:ca:a3:76:a6:8a:1c:82:
                    0b:b0:2e:d8:7a:ab:1a:38:85:a9:1a:c6:36:e0:84:
                    e6:5b:55:3d:53:eb:ef:bb:ec:6d:08:81:08:13:cc:
                    08:95:63:63:ba:8e:18:11:8f:5d:07:0c:29:b6:7b:
                    ae:25:bf:65:fb:66:db:b8:1e:35:6a:95:34:d6:74:
                    f4:b6:02:76:72:d3:3d:d4:54:25:4f:f7:c6:f9:fc:
                    df:74:ed:46:48:78:06:e4:32:7c:04:39:6a:a0:14:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:CA:31:6D:39:70:6B:70:E8:08:C1:54:24:16:72:FB:6D:18:9C
            X509v3 Authority Key Identifier:
                keyid:AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:73:dc:c0:b3:58:67:cb:ca:ee:80:ab:05:64:58:c0:22:ef:
         d6:0b:0d:d1:15:94:1a:51:c1:bb:cb:72:6f:dd:48:e1:12:40:
         d2:cf:6a:38:22:08:a5:71:a7:d5:38:5d:42:1c:ab:06:72:37:
         e0:14:b1:b6:19:21:0c:ff:db:69:7d:08:5c:a5:9c:eb:50:ce:
         11:57:c9:74:51:90:ed:b0:db:70:96:1f:f9:b8:31:80:c7:21:
         a4:55:6c:a2:40:3b:c6:a9:51:8b:98:c5:ad:83:98:3d:de:38:
         71:3a:39:2d:af:35:33:62:ff:7b:7d:e9:b4:2b:16:ca:73:09:
         a7:dd:f8:2b:9f:fa:7c:ca:a4:ba:7f:f1:6e:a2:8b:23:0b:5f:
         12:b3:a5:a4:a6:09:be:40:3c:2b:8b:be:3d:ed:64:33:df:23:
         dc:10:a5:8e:a2:bc:44:9c:96:32:93:51:5c:a7:d6:21:00:b4:
         34:72:4a:85:8a:f6:31:5b:d6:e2:97:10:ad:a9:ea:1a:4e:05:
         b0:dd:92:63:af:4e:39:fc:5d:bd:d4:0b:87:50:9d:22:e2:d0:
         5e:35:f8:46:c6:2e:59:51:79:ba:11:54:1a:84:a5:e9:c1:7a:
         d5:75:b5:4d:9f:e4:4e:ab:42:74:58:47:1c:61:42:96:51:d6:
         1a:4f:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:40:58 2024 by rpki-client on console-ams.rpki-client.org