Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File:                     a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier:          06y2ys9i+HyQsben2XYLqedG02UX0U3QqA16S6hWslY=
Subject key identifier:   38:DC:51:4E:0D:B1:4F:55:BF:5C:27:0D:1F:03:0C:12:E0:E9:1A:6C
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer:       /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial:       018FA13F99BFB9A40DF96029C96E646E0B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number:          059A
Signing time:             Wed 22 May 2024 17:00:50 +0000
Manifest this update:     Wed 22 May 2024 17:00:50 +0000
Manifest next update:     Thu 23 May 2024 17:00:50 +0000
Files and hashes:         1: Il-H7l3XT1x6yXLqYZ54Ya-QIn4.roa (hash: iyxHF2U2r4uN/PTL4sCcuwu3/e+D0ICiu1coyHwcCj0=)
                          2: XHXvdoWL7LeaIBpdMjUMlqbbL2Y.roa (hash: DgbXCcXyL5VzhTEZeOruKYr5QlILU6JQntaLXAiwlS8=)
                          3: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: gpCopJmx4T2kC0xobgW0ziv/r6//by7Oqqh7B05HfZI=)
                          4: aTbkEVghJmSR4I3aYVYs94x4iSw.roa (hash: YkMin1PtjatknJVmKY17nm0yKN59D9gI12CPVo4Y//M=)
                          5: p8zdTssIMDu7uf2_c0tBz9HifT0.roa (hash: JkjAlBJKArxOm/slQSLjkHOLfxNDVrvYV572sADqVPY=)
                          6: q2snSpVa7HdUmQxIJ-hXjDgiNsk.roa (hash: 64m2mY3EcdohNAqjgomkxc8z4QeyXmAhzI37SoXlWuw=)
                          7: uDo5n2RwS0klb3ZLEZ41TEJzNGA.roa (hash: o2bNZ4MSlUZETU+gJeKCbAKNeRZtUufATH6nASm+e8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a1:3f:99:bf:b9:a4:0d:f9:60:29:c9:6e:64:6e:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
        Validity
            Not Before: May 22 17:00:50 2024 GMT
            Not After : May 23 17:00:50 2024 GMT
        Subject: CN=38dc514e0db14f55bf5c270d1f030c12e0e91a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:1e:b2:23:b2:df:b3:47:62:a3:53:8b:b9:
                    cb:10:e8:a7:3d:c6:2b:a0:be:9b:59:b5:fb:38:d7:
                    6a:66:e8:1f:e5:7f:95:29:84:d6:01:d0:e0:b2:5a:
                    e3:e4:e3:42:65:84:fc:4a:f4:34:1b:dc:f9:ef:0d:
                    c2:80:ed:12:02:8b:0e:a0:01:5c:c3:fa:0a:73:45:
                    36:1b:e5:6c:2b:6f:72:e7:b6:67:45:ca:86:c0:7c:
                    17:3c:cb:b3:dd:1c:a3:47:44:4d:31:b2:4c:70:77:
                    ba:d5:a3:a1:b4:dd:22:2f:d3:8b:70:2e:80:c6:4a:
                    c7:72:12:0c:f0:60:14:81:71:ca:f4:28:27:9a:6a:
                    02:29:16:4b:64:a1:76:2c:bb:16:d4:8c:90:13:5b:
                    a9:df:6e:ec:5d:01:63:64:d3:b4:a6:be:9c:54:42:
                    5f:32:2e:93:d5:94:19:9b:67:ef:36:6c:5b:8b:85:
                    d4:16:f2:c9:b1:e4:56:64:a6:b5:2b:74:47:3b:b1:
                    42:90:44:4d:26:16:57:a3:35:22:6d:48:95:02:e6:
                    de:aa:13:dd:72:7a:80:60:85:ea:63:66:da:78:bb:
                    11:50:20:74:89:59:54:7a:2c:89:a0:f5:f9:da:a6:
                    f8:84:5d:cf:41:7d:f3:6d:1e:20:03:8b:60:3d:b6:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DC:51:4E:0D:B1:4F:55:BF:5C:27:0D:1F:03:0C:12:E0:E9:1A:6C
            X509v3 Authority Key Identifier:
                keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:5a:16:ae:36:e2:5b:61:19:b1:11:cc:9f:8b:30:0c:be:
         fd:de:d9:7c:ac:50:e5:f8:6e:19:cd:be:08:50:94:91:29:85:
         84:e6:36:21:1c:3f:e0:d7:cd:64:86:8e:40:b0:31:4f:e2:1b:
         c4:9b:06:18:b3:ed:23:8a:cd:dc:3e:6e:e6:1b:c2:a3:de:35:
         92:0a:4f:49:8a:66:c8:ff:58:dd:ea:f9:a7:f1:c5:d8:1f:d4:
         9d:f3:50:7f:51:9e:e1:84:08:c6:4c:29:11:6d:54:7a:de:5b:
         78:5a:5b:0d:4d:de:4f:de:be:53:f8:1c:1c:8c:05:ac:90:9f:
         d9:2a:d8:04:b5:a7:b8:32:6f:4c:71:29:c5:52:32:a5:3c:47:
         ee:6a:5a:15:16:d3:fa:d0:69:4f:fc:76:b8:1e:42:bf:6c:d9:
         7f:20:c9:91:4d:d3:3f:75:44:79:03:96:64:ec:86:ef:c5:91:
         0b:ed:66:12:a4:21:14:be:7e:b9:8f:01:19:62:25:c2:fd:03:
         eb:eb:58:c1:83:ff:1e:51:04:33:84:25:4a:77:c4:3e:27:58:
         45:ae:b3:16:82:5e:38:ac:88:58:d2:48:93:31:c7:e6:4e:12:
         70:5c:38:aa:43:e5:97:0e:c5:b7:48:85:c4:28:5a:3c:4a:dc:
         df:1e:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 21:05:43 2024 by rpki-client on console-fra.rpki-client.org