Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
File:                     xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json)
Hash identifier:          lnV9JnSN4HlXp4EoC7oQI2kLZWSLzLNWmQbG+3W1dnQ=
Subject key identifier:   37:6E:3B:01:E0:AD:6E:59:DF:0D:9E:DE:15:DF:72:13:43:7A:0F:FE
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       01902A944095168101088FA1568F594B279B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
Manifest number:          084C
Signing time:             Tue 18 Jun 2024 09:01:17 +0000
Manifest this update:     Tue 18 Jun 2024 09:01:17 +0000
Manifest next update:     Wed 19 Jun 2024 09:01:17 +0000
Files and hashes:         1: dpUN2g0FR4gM63y3UnF9NEB9XmQ.roa (hash: O6ADjBqmL2OgYA5tEc52BXHd83lLr6j4Hzf3F+miubg=)
                          2: fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa (hash: dMbI/SvWU1n6mCuOmDtjgF8MsbaLCUXGuA1MOG7Tkmo=)
                          3: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: P07vGoPSbmeQLW2J2Sz9O3ediC50P37yj2VkQ5YwRpc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:94:40:95:16:81:01:08:8f:a1:56:8f:59:4b:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jun 18 09:01:17 2024 GMT
            Not After : Jun 19 09:01:17 2024 GMT
        Subject: CN=376e3b01e0ad6e59df0d9ede15df7213437a0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:50:cf:f2:81:b3:69:53:24:56:2d:ba:ad:
                    ce:49:58:90:e8:ca:60:64:8b:88:1e:dd:f0:b9:f1:
                    ce:44:d9:f0:25:f6:fe:e7:13:7a:cd:c3:10:a1:47:
                    98:5d:a1:31:98:bc:78:97:f7:dc:dd:c3:f2:3c:ac:
                    dc:38:54:da:e8:80:be:e0:4e:b2:6e:78:f0:98:66:
                    73:97:55:d5:f1:ba:a5:ee:e5:23:3e:65:e4:92:8a:
                    75:3b:42:2b:21:ff:c6:b5:83:61:ea:a4:ec:5d:1b:
                    e1:71:63:d1:a0:9f:4c:96:47:a4:db:1a:3f:f4:89:
                    7f:0d:8d:5b:dd:5a:02:fa:02:d4:bf:14:3b:c4:32:
                    fd:d7:10:3f:40:15:73:8f:28:94:e5:f4:eb:7b:52:
                    2a:bb:a2:e8:be:51:78:c1:7c:c1:56:6a:35:9f:9a:
                    d5:ca:32:ad:5a:83:d7:3b:7d:58:87:8c:3a:33:66:
                    61:50:e2:03:31:eb:24:23:4a:2a:f5:bb:5b:81:8e:
                    72:1c:09:75:78:60:3e:06:3d:21:4d:45:a8:b9:f5:
                    bb:ee:e9:1e:37:55:fc:b1:4b:76:18:48:03:87:30:
                    7b:5e:8d:6c:54:bc:8f:00:b4:07:1b:e3:39:1a:54:
                    dd:49:2a:f9:5f:e8:b2:83:d8:34:5f:87:48:8d:e1:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:3B:01:E0:AD:6E:59:DF:0D:9E:DE:15:DF:72:13:43:7A:0F:FE
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:47:9d:79:9a:d6:da:89:0b:cb:5d:00:33:41:cf:1c:56:
         53:90:37:5d:d4:ae:e6:cf:4a:3a:96:28:0d:ca:c3:b7:7a:30:
         b8:66:11:11:de:e9:3f:aa:3d:cc:09:e1:58:1a:44:cf:72:cc:
         d2:ec:5c:33:fd:69:f4:a5:c8:ab:e7:ae:13:a7:81:ee:28:1a:
         be:8c:af:ef:ec:f1:0d:ea:e0:e3:5d:d9:3a:7b:3a:c1:58:a1:
         cf:40:1b:30:fa:20:49:6c:b4:14:cb:e0:b4:ba:bd:79:a4:6b:
         36:de:d9:75:44:58:d4:0b:ff:a4:fd:c8:2b:0b:0d:4e:bc:c0:
         36:4d:73:7a:f1:f5:1d:92:cd:9d:66:5f:36:eb:5c:5b:ab:60:
         02:3b:79:39:0c:f5:6a:14:17:9c:c5:16:3d:c3:2d:65:3c:19:
         9b:3f:5b:2a:f8:55:6e:2f:09:6c:7d:dc:a4:c8:be:cd:51:98:
         96:05:86:1f:c1:e3:15:21:ee:b6:05:82:01:af:ad:e9:0a:e2:
         e9:8d:e0:87:1f:27:62:d7:ad:d2:54:78:0f:6f:e1:20:24:fe:
         65:e2:af:ed:1e:cf:6b:60:3f:f9:50:fa:62:4d:f2:b3:c3:c6:
         4c:00:04:20:af:92:f3:de:bd:c0:bb:19:e2:af:73:fb:dc:bc:
         df:4c:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:28:42 2024 by rpki-client on console-ams.rpki-client.org