Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File:                     6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier:          H/55qvEJOOFA882U3w/TtHaTxrE4n6oSJ5++MCM0pBI=
Subject key identifier:   E0:2C:B3:AE:C3:3F:37:D2:B0:B1:9D:43:FE:C9:9B:06:4D:22:BE:AA
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer:       /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial:       01904943383EB7639D731EF0B2E7EA772FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number:          084D
Signing time:             Mon 24 Jun 2024 08:01:00 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:00 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:00 +0000
Files and hashes:         1: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: iMDeBZh1vlUqK9+s2F8fsXTuwDoKjwaLJFVLuhtGhuM=)
                          2: KomAupEUTouLTNpFp_Xcp2v6Q94.roa (hash: CfOLa21BWT2MywXQRh6RsQhwQt4z4rp32IUSoUjAEFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:38:3e:b7:63:9d:73:1e:f0:b2:e7:ea:77:2f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
        Validity
            Not Before: Jun 24 08:01:00 2024 GMT
            Not After : Jun 25 08:01:00 2024 GMT
        Subject: CN=e02cb3aec33f37d2b0b19d43fec99b064d22beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:2b:42:ab:21:6c:34:ae:f4:99:de:92:ec:
                    88:90:ee:57:22:0a:79:00:c9:f6:2e:71:f3:3c:2d:
                    d5:a5:c6:c4:53:e6:66:97:dc:2b:3d:10:c0:9a:26:
                    af:25:83:b1:fa:88:69:b5:44:1e:a3:38:dc:dd:3c:
                    76:ff:3e:53:5b:2c:50:33:08:8c:02:dd:c1:b8:c9:
                    ef:7d:9f:c9:08:d6:be:72:94:fb:6b:d6:be:cf:18:
                    d8:3f:da:e3:2c:a2:d4:dd:78:a1:00:98:1a:3f:16:
                    c8:f8:6d:02:16:49:1c:11:4c:01:c9:78:bc:49:d2:
                    ee:d2:14:e7:61:70:6a:d7:6f:e9:bb:da:b9:56:3c:
                    9d:67:cc:2a:59:86:9a:db:36:f5:f5:78:e7:ea:4f:
                    40:bf:4d:b0:9b:d8:9e:d1:c3:61:db:ff:33:92:e4:
                    a9:29:4f:08:97:f1:36:31:68:e4:0e:f9:29:07:1a:
                    ab:3f:ef:43:87:fd:19:04:6c:29:3b:dc:41:e2:c4:
                    48:0a:63:6f:dc:64:74:1a:b4:e6:72:ad:b5:ea:1d:
                    b0:ac:00:48:4c:26:b6:43:80:e2:ad:5a:45:8b:6f:
                    e9:3a:79:65:7f:bb:8f:ee:26:19:85:a3:d7:11:89:
                    58:81:95:32:c1:ea:e3:fc:16:36:d3:90:15:ab:2f:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:B3:AE:C3:3F:37:D2:B0:B1:9D:43:FE:C9:9B:06:4D:22:BE:AA
            X509v3 Authority Key Identifier:
                keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:e7:dc:9d:d2:d3:98:4a:c1:db:30:9f:05:e7:8b:38:c3:
         0d:90:9d:c4:42:51:ce:fc:58:56:0f:78:b6:49:c7:df:4b:f8:
         fa:cd:1f:b8:f3:56:74:5e:e3:22:4c:f4:73:fd:62:95:87:aa:
         b6:ac:e6:da:65:0a:55:52:06:52:2f:5e:aa:a9:b9:47:d4:a8:
         93:86:d0:57:56:95:e9:3c:fe:a1:7a:b9:3e:b1:42:86:42:59:
         72:05:bd:97:06:01:cc:23:77:43:13:92:b3:c1:86:fb:c0:62:
         59:63:0b:f6:0b:62:88:1f:5c:36:fb:1e:de:98:c4:b9:a7:70:
         6a:27:3b:90:ce:94:d5:8a:9c:07:f7:5e:26:cc:a7:5b:5d:08:
         f2:f7:e7:f3:0c:6e:a8:b9:a6:30:2b:24:4a:3d:5c:16:46:2c:
         75:6c:10:9b:6c:51:22:e4:ec:e5:b9:76:85:1b:27:4a:e0:a4:
         80:da:40:ef:06:1f:e3:2d:56:32:ad:56:ee:8f:73:b8:79:09:
         2a:3c:89:94:d5:27:55:f1:ac:b5:71:d7:10:94:24:3a:4d:76:
         2f:20:d9:fc:56:a3:a8:ec:55:74:91:17:0b:22:a5:b3:a1:63:
         61:8f:ad:38:bd:a9:29:13:e1:60:13:7d:85:9b:35:d5:70:47:
         54:30:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:03:35 2024 by rpki-client on console-fra.rpki-client.org