Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File:                     EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier:          d+5lBmlCc2UEAlocW1FAyWlW6FTxsXcSTNtXMEznktk=
Subject key identifier:   F2:F0:BC:41:24:3F:8D:0B:80:06:47:3F:06:15:D8:67:69:B6:71:70
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer:       /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial:       01901EFDB2E81C1FD0085416845674E8CDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:01 +0000
Files and hashes:         1: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: YbuWX/fcaWR/CFIq06HRvO9mzF6ZSmrdj1hVyiPY13M=)
                          2: KJRJLsHRbejthC1tuk083w-bsuc.roa (hash: pV4eCjX4VuC6WTnDrFVzyGb2KML9xhIqzwHqsDhzdFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:b2:e8:1c:1f:d0:08:54:16:84:56:74:e8:cd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
        Validity
            Not Before: Jun 16 03:01:01 2024 GMT
            Not After : Jun 17 03:01:01 2024 GMT
        Subject: CN=f2f0bc41243f8d0b8006473f0615d86769b67170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:6e:07:d5:41:6e:7c:88:4c:b2:31:b4:04:
                    a2:da:a8:e7:17:9d:69:6c:04:d2:ae:e1:24:72:77:
                    e2:3d:89:5e:f0:90:2b:ac:4d:78:77:11:31:f2:d2:
                    e3:f6:12:58:bc:5b:d0:fd:14:2c:61:18:41:07:d3:
                    ac:fd:33:5a:d5:8d:83:a7:7e:87:03:22:03:16:f5:
                    84:8e:32:1c:42:60:61:cf:03:13:c6:81:1f:74:8a:
                    d8:8d:86:8b:5c:eb:32:1c:12:68:88:89:f5:1f:47:
                    f2:c9:b1:7a:8f:a7:4b:9c:6b:39:b6:66:34:51:77:
                    50:dc:ea:17:13:f2:2c:02:d7:90:4b:66:1f:ac:84:
                    94:d3:c4:7d:a8:b6:0a:af:2d:e6:0c:51:ec:e9:20:
                    e5:64:82:df:12:3a:91:b3:c2:97:c8:28:be:f5:f8:
                    9e:41:3f:d5:35:2f:82:ee:71:b0:ba:d1:65:67:49:
                    37:e3:7b:de:ab:25:c2:f7:ae:a4:38:57:a6:aa:96:
                    07:27:2b:01:63:b9:8e:bb:01:80:86:51:5c:2c:14:
                    08:d5:e0:05:49:20:e0:67:22:7c:ec:76:7a:c1:5d:
                    c6:4c:37:04:c1:31:7c:14:0c:c7:17:bd:bd:2c:e3:
                    a9:cb:7d:f8:f3:71:73:f5:b0:26:83:b5:a7:0b:bb:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:BC:41:24:3F:8D:0B:80:06:47:3F:06:15:D8:67:69:B6:71:70
            X509v3 Authority Key Identifier:
                keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:d1:e8:da:c7:88:98:32:41:3a:8f:b2:05:68:df:d7:24:
         97:6c:87:6b:3a:7b:c5:7e:18:98:a2:f6:a4:4f:27:fa:77:79:
         a1:ed:44:d2:ef:a8:0d:bf:ad:10:97:49:08:53:71:cb:e7:a3:
         bf:71:f6:dc:68:e0:59:86:c7:4d:3d:6b:ac:18:c7:fd:af:2e:
         49:f7:f3:ee:08:b8:89:0b:8d:18:b6:75:e7:08:00:47:86:51:
         d9:bc:7f:63:60:73:43:f6:ba:0c:2b:72:12:73:3f:b5:9c:01:
         c2:e9:f9:88:c5:33:75:f8:44:33:87:09:85:9c:96:f1:df:f0:
         06:ad:22:1e:bc:48:a3:89:70:df:63:2b:c0:d5:73:84:f6:27:
         01:1b:d9:2d:14:81:b4:a9:ad:8b:fe:3e:29:72:78:9c:c1:d5:
         6f:29:71:fc:3a:0c:f3:22:20:30:75:b6:41:77:42:47:a8:a2:
         13:8d:86:65:5f:0b:5c:ee:03:bd:91:2b:d4:02:6c:63:b8:73:
         72:58:32:ec:c8:2c:e5:0a:8d:a5:ae:ee:e2:40:5d:52:40:52:
         14:94:e4:00:f2:9d:6a:31:45:cb:57:0d:25:3b:b3:1a:32:e0:
         80:2b:1e:ff:af:e4:f0:a3:87:f6:b8:5a:5a:83:54:50:12:47:
         6a:dd:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:29:06 2024 by rpki-client on console-ams.rpki-client.org