Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          DIAH+ReYEiBetw8lLVLGJn5tnktpXwuMSq/+z24L1U0=
Subject key identifier:   B5:22:62:0C:D5:22:30:84:59:8A:2A:39:1A:58:04:52:4C:4C:84:CA
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       01901DEBC622A0637E549E4EF1D8F22B12BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          08BB
Signing time:             Sat 15 Jun 2024 22:01:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:49 +0000
Files and hashes:         1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: fZgRGUKMEroQVNPiC/49Y1S/ihpCI65e5J8sdrbKYds=)
                          2: jeXGGRnbwg-f1pvmnqcS873qWVY.roa (hash: qmXm9GSuvOLDWXeGPwWr8GZzkGZmYc53EjRsmql4UY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c6:22:a0:63:7e:54:9e:4e:f1:d8:f2:2b:12:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Jun 15 22:01:49 2024 GMT
            Not After : Jun 16 22:01:49 2024 GMT
        Subject: CN=b522620cd5223084598a2a391a5804524c4c84ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:5f:df:06:e6:7f:ef:a2:15:83:97:e0:a6:
                    63:a1:96:db:9c:11:cc:54:41:73:c2:ff:b8:b7:04:
                    c1:81:95:39:bb:f8:0d:7c:67:44:27:f9:e9:20:64:
                    88:af:9d:41:0b:9c:8d:17:ca:d1:31:ea:21:42:9b:
                    8b:ad:8f:48:f2:a9:37:3e:4c:12:43:36:f8:51:6c:
                    94:22:3a:cf:de:37:3b:40:e7:1d:c6:05:1c:6c:58:
                    f6:a4:d9:96:f2:05:15:76:af:49:30:81:8d:7d:ac:
                    72:5a:91:8c:6c:9f:b2:06:d2:fb:67:a3:e0:a6:13:
                    5f:3d:e3:0b:43:fd:18:5b:9b:da:cf:33:07:a3:26:
                    9b:60:ff:4a:75:ea:b7:ce:42:7e:5d:c9:d8:3a:c8:
                    75:05:be:cc:c9:51:6d:f2:b7:8e:0b:ae:1e:eb:ed:
                    3c:39:43:0e:78:3b:4a:04:b9:15:75:2a:18:a4:07:
                    55:79:5a:fa:91:05:9b:d3:61:51:80:45:e7:20:71:
                    f5:bd:77:0d:d4:94:d0:d2:03:55:e1:f2:b5:1e:ab:
                    0c:61:9c:9d:b4:79:a2:b3:90:55:15:43:96:8b:4f:
                    d7:de:97:62:c6:c7:77:56:99:c9:c3:f4:77:83:62:
                    3a:9f:fa:25:3e:2e:cf:9b:c4:3b:10:13:78:ee:cc:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:62:0C:D5:22:30:84:59:8A:2A:39:1A:58:04:52:4C:4C:84:CA
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:87:32:c6:be:f3:3b:36:51:ab:66:93:a0:08:9e:21:69:
         7a:53:b2:88:1e:6c:c6:31:e1:29:57:0b:ff:95:03:31:34:65:
         d0:94:79:a0:87:c7:68:55:19:84:1a:6c:7f:23:9a:db:b9:3b:
         ac:74:17:7b:a4:ce:48:df:d0:8e:74:bc:0c:be:2b:35:a8:f5:
         17:66:5d:36:bc:fc:47:69:a0:da:04:b4:56:60:78:55:7b:50:
         c8:65:a1:fb:18:8a:da:55:16:f8:67:13:6f:d2:0f:92:30:4c:
         39:06:e1:48:b7:99:c1:7d:05:8f:e6:42:d7:f5:56:68:03:a7:
         82:2a:42:ec:8e:ad:3b:e4:1d:9c:60:9d:8d:7a:13:cc:90:52:
         31:a8:e6:d6:57:df:67:5a:3d:98:f4:b6:df:4d:dc:d8:62:34:
         28:ab:bc:7d:c3:65:55:4a:9e:26:cd:d1:b9:45:58:a7:49:8b:
         01:01:8a:f4:6f:72:63:d1:60:79:af:e6:98:48:e4:72:7d:a1:
         86:74:a0:4d:17:95:96:28:45:c1:94:9e:db:11:c8:2e:24:2a:
         74:b7:27:ce:24:cf:73:1a:7c:cb:ae:76:0b:eb:ab:0b:41:f6:
         67:46:18:96:ae:67:85:f6:8b:ce:1e:f1:ad:70:62:b6:19:2d:
         d2:44:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:51 2024 by rpki-client on console-fra.rpki-client.org