Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File:                     SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier:          5qwLrW2pMiwEmouIyrO/8FM1OnXXbJH26jEbolqxUEM=
Subject key identifier:   DF:FA:55:3A:51:8E:36:EF:58:2D:39:A3:0F:6B:34:B0:2E:C7:38:43
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer:       /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial:       0190490C1B03403F84F8EC72C80DA03D053F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number:          FE
Signing time:             Mon 24 Jun 2024 07:00:48 +0000
Manifest this update:     Mon 24 Jun 2024 07:00:48 +0000
Manifest next update:     Tue 25 Jun 2024 07:00:48 +0000
Files and hashes:         1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: 2aVm/T24Me5nNsGgZltFQkavcNLCsP3I4aFIJOewQmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:0c:1b:03:40:3f:84:f8:ec:72:c8:0d:a0:3d:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
        Validity
            Not Before: Jun 24 07:00:48 2024 GMT
            Not After : Jun 25 07:00:48 2024 GMT
        Subject: CN=dffa553a518e36ef582d39a30f6b34b02ec73843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:4e:ee:b9:79:d2:62:2f:9f:7d:8a:b7:e3:
                    67:c9:38:60:18:93:bb:89:24:04:16:fe:2d:18:8f:
                    71:04:9a:08:85:b4:7d:d6:f5:99:5c:98:c2:ef:29:
                    ab:2d:c0:02:2f:06:95:3f:37:c6:99:15:09:26:f2:
                    a5:04:8a:57:ad:e7:74:4f:e8:60:2f:f4:f7:cd:57:
                    a1:4f:bc:54:ec:95:c7:41:b1:2d:66:38:b0:7a:59:
                    e2:ce:6e:56:60:d0:c2:e7:b8:c1:41:dd:05:0c:9c:
                    eb:c9:5c:37:82:92:9a:e5:b8:cb:19:2e:12:48:51:
                    27:0e:54:e3:be:5c:76:74:ba:f1:ee:0b:0a:b1:dc:
                    e9:e8:b9:b3:9e:62:73:fc:e5:37:01:03:81:d9:0b:
                    3e:47:81:7a:c6:1b:51:6a:2d:41:ae:4e:5b:9e:20:
                    8a:f3:60:a7:16:59:59:b3:b4:6f:c6:8c:d6:05:aa:
                    26:88:9d:05:22:99:fa:9d:a3:ee:d7:1f:db:18:84:
                    7d:32:40:0d:b0:d6:79:47:77:44:8e:40:ae:20:95:
                    5c:e6:26:ff:8d:41:89:f6:07:e3:05:2c:e7:a5:b9:
                    04:83:97:ec:61:71:fd:16:ae:8a:c5:70:9d:3c:91:
                    62:11:cf:61:ff:79:21:7d:19:e4:50:d8:8a:3b:e5:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:55:3A:51:8E:36:EF:58:2D:39:A3:0F:6B:34:B0:2E:C7:38:43
            X509v3 Authority Key Identifier:
                keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:89:bd:73:34:f8:3e:10:11:d2:70:8f:84:c5:41:4a:85:
         de:14:6f:50:54:4d:39:d9:7d:72:bd:57:1b:22:c9:18:ad:df:
         3e:87:58:84:86:41:d4:31:e5:f4:7e:a8:2a:58:d4:ab:6c:ff:
         fb:0f:50:34:fc:81:d6:58:8b:63:7e:0f:e7:a2:68:28:69:e1:
         a4:6c:19:da:78:3a:2c:15:48:e7:2a:b6:8e:8c:1f:66:ed:6d:
         0b:6d:95:9c:f1:06:d7:22:d9:90:ce:8b:f7:2b:21:a0:7b:46:
         17:22:51:39:05:62:cc:3a:51:38:38:b0:91:a9:f8:2e:e2:02:
         33:ed:9d:e1:2e:40:c7:4c:6b:86:20:76:ce:22:b4:3a:43:84:
         7f:6f:34:c7:f5:47:2b:2c:83:6a:0c:a5:2c:12:64:dc:84:3a:
         1d:cd:eb:93:4a:20:4e:5a:01:b6:e6:23:39:b2:4b:90:5e:b0:
         12:5e:4a:3c:4e:68:4c:54:fe:7f:2a:ac:f7:f2:4c:6c:23:ff:
         29:8a:61:bb:94:7d:3f:c9:af:82:93:33:7d:da:02:e7:93:14:
         c1:c7:9c:83:85:b0:a1:fc:54:7c:03:46:7e:97:8b:1e:37:20:
         8f:dc:0e:d2:8f:db:b9:96:4d:30:08:0f:42:d1:25:76:0b:47:
         9d:66:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:51:49 2024 by rpki-client on console-fra.rpki-client.org