Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          xxr7pjFKABQ3rE0VezGOUP4gtd3NTZmivYTeaAJF1Ow=
Subject key identifier:   54:10:65:C7:5F:7F:5C:A2:81:BC:A6:B7:19:5E:15:EC:9E:48:8C:C7
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       01901CD82C7065AE1DF42FE75AE5D9471576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0500
Signing time:             Sat 15 Jun 2024 17:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:47 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: YR/6kpByBreGQD9gZ0z+wk1oqKR8ArT0EEU1y8tlghA=)
                          2: Q82hmbK31GWFtGPExGhCRFgX-Nw.roa (hash: oXGUgmNZ0TnBQfyeD6ksZIEnRlYziiF/U32gndNXJ5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:2c:70:65:ae:1d:f4:2f:e7:5a:e5:d9:47:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Jun 15 17:00:47 2024 GMT
            Not After : Jun 16 17:00:47 2024 GMT
        Subject: CN=541065c75f7f5ca281bca6b7195e15ec9e488cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:56:1c:44:33:11:d7:7f:32:6e:fa:be:e8:
                    8d:29:be:6e:e7:ce:ea:0c:f5:02:0e:86:8f:3a:f8:
                    01:10:de:14:66:f6:55:60:ca:94:ae:9a:b0:c6:a8:
                    0a:2c:1b:17:b4:b3:82:70:78:6f:8a:c8:e8:5c:6a:
                    87:82:08:a0:9f:19:a5:c2:67:58:f3:ec:2a:35:c4:
                    5f:5a:80:78:95:26:be:94:9a:95:29:05:b5:40:68:
                    87:31:05:f1:95:5c:ee:09:0d:f5:59:cd:1e:70:2b:
                    f2:58:c3:07:e9:e0:5d:c0:41:07:b9:40:26:3a:49:
                    fb:e9:17:32:91:d8:a7:07:a4:7f:37:62:61:25:5b:
                    72:e7:04:14:ab:e5:f1:70:87:c3:80:72:5f:3e:4e:
                    49:b5:12:ad:59:ed:ac:01:e0:eb:4f:6c:2a:e2:d1:
                    a7:88:33:86:b8:31:88:32:2a:45:78:c2:06:25:fd:
                    15:43:1d:06:88:2c:4a:be:39:3b:90:d0:23:ec:aa:
                    f9:42:82:c3:b9:cb:80:4f:b3:22:98:d6:ea:4d:03:
                    7f:f9:0b:f0:25:3b:b9:1b:bd:f0:2c:63:e7:43:23:
                    78:2e:f9:22:c4:3d:4d:f4:7c:35:c4:bf:ca:0b:c2:
                    36:53:a2:89:66:31:69:27:38:f8:36:d2:7f:7b:b9:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:65:C7:5F:7F:5C:A2:81:BC:A6:B7:19:5E:15:EC:9E:48:8C:C7
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:af:94:cf:3c:35:e2:5f:95:44:68:15:f4:d6:6f:98:7c:4f:
         b1:36:bc:0c:e0:ca:89:da:6a:e3:9d:0b:18:5f:92:6f:39:6d:
         8b:47:11:2e:1f:fe:1e:53:94:a3:e9:95:e2:fd:73:86:c6:f2:
         62:65:88:1f:40:e2:55:94:c0:ff:37:25:08:8f:66:7f:3a:0a:
         44:00:55:ca:50:2a:4d:42:09:cc:6c:62:01:72:01:b0:4d:87:
         b0:08:de:47:ca:07:1a:80:12:b2:a3:35:da:33:91:2c:9f:d2:
         09:40:58:74:3a:4e:00:7e:de:05:f6:29:cc:c2:32:a8:65:d2:
         9e:23:df:b5:e3:a2:be:01:5e:d3:e6:c8:9a:e6:0c:e7:7e:87:
         85:16:61:47:a0:30:9b:55:df:59:7a:ee:22:70:40:2f:85:be:
         2f:bf:62:7a:1b:0d:fe:f4:fb:83:53:f3:99:f2:5a:d7:65:78:
         45:87:25:48:47:22:df:2b:23:62:78:81:76:00:8e:c9:0e:48:
         ba:3d:c3:97:f0:24:41:88:96:50:5d:b1:34:7b:1b:f3:66:7e:
         2f:75:ec:3a:e1:e7:12:3a:43:0b:d7:c8:0f:0f:c0:1b:c2:b2:
         bf:47:09:1d:be:fd:d0:29:cb:c5:56:b8:c4:91:db:b2:ad:96:
         0e:d4:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:42:10 2024 by rpki-client on console-fra.rpki-client.org