Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File:                     6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier:          leea2t12YGuwnMYgQlXXUyICFm76GamyhMO6YxeMlSQ=
Subject key identifier:   76:06:E7:C8:52:16:32:50:43:00:F2:D7:D4:03:3F:71:7A:43:90:5E
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer:       /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial:       01901EC69BD4C1B7B5DE821BE9C440D8ECB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number:          0837
Signing time:             Sun 16 Jun 2024 02:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:50 +0000
Files and hashes:         1: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: RdrPC0/w1JFhdn6Z229arK+HbNCiwyrpcYWwarastuc=)
                          2: KomAupEUTouLTNpFp_Xcp2v6Q94.roa (hash: CfOLa21BWT2MywXQRh6RsQhwQt4z4rp32IUSoUjAEFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:9b:d4:c1:b7:b5:de:82:1b:e9:c4:40:d8:ec:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
        Validity
            Not Before: Jun 16 02:00:50 2024 GMT
            Not After : Jun 17 02:00:50 2024 GMT
        Subject: CN=7606e7c8521632504300f2d7d4033f717a43905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:72:2b:9a:4e:2e:b1:d8:05:a0:d2:2b:2d:
                    72:4b:a6:77:5e:01:8a:d6:25:d7:e8:2a:e8:5f:f8:
                    e7:9b:33:42:e5:59:f7:58:26:b6:81:d7:5c:5d:52:
                    1e:a7:ce:9e:fe:9d:b3:33:65:8b:83:8b:b5:07:fc:
                    56:f3:1e:5a:b2:d8:c1:13:e7:2f:09:e7:8c:c0:0e:
                    9d:59:fe:1b:0f:8b:a2:65:52:a5:96:b0:d5:95:0a:
                    03:15:94:d0:c4:31:f2:e9:34:c3:ae:f7:2c:87:a7:
                    2e:27:5f:ed:23:11:1d:c2:59:62:71:77:15:40:68:
                    f6:e9:81:24:61:bc:83:d7:79:a9:14:51:d9:0b:7d:
                    fc:be:69:f5:56:75:15:1b:09:71:f6:eb:c6:dc:be:
                    85:d3:72:63:36:4a:85:07:af:de:99:65:10:59:b0:
                    6b:de:b9:56:6a:1a:ea:55:60:d9:59:d9:4e:0b:d7:
                    a0:c2:fd:05:8f:c2:fe:b9:eb:2e:b3:89:20:03:f4:
                    3f:a3:57:20:51:64:d4:b1:33:b4:ef:6e:0b:d9:33:
                    d7:c1:4c:7c:57:00:8d:dc:55:d6:88:98:e1:e1:fe:
                    60:bf:a2:cf:c2:91:f6:50:2f:4f:23:03:3d:d6:23:
                    19:55:76:25:3b:24:86:f2:bf:b8:af:3d:d7:11:50:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:06:E7:C8:52:16:32:50:43:00:F2:D7:D4:03:3F:71:7A:43:90:5E
            X509v3 Authority Key Identifier:
                keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:8c:d4:ba:06:da:83:7a:83:08:26:82:1f:2a:0f:27:ee:
         32:22:80:b1:a2:66:65:7b:e8:ad:01:18:b7:f9:e3:b9:ef:d7:
         1c:29:ed:29:4a:e7:85:4e:82:18:4b:1d:ce:c0:c0:63:60:d4:
         56:dd:2c:28:bf:92:41:65:d8:be:65:84:5e:a4:21:5f:67:9a:
         5f:14:bd:52:28:51:e6:b9:cb:5b:62:b2:02:28:98:ad:71:f3:
         68:91:b2:63:0f:01:a2:26:46:fa:fd:cc:2f:9d:dd:05:b6:94:
         b2:bc:94:01:b9:b4:a3:03:4e:c4:26:88:aa:21:66:ce:81:93:
         0f:8d:70:c8:d7:90:5b:fe:30:1d:cc:f8:54:f2:e3:dc:fe:a7:
         94:90:58:6a:13:f2:9f:8e:c6:5c:72:99:56:48:ea:46:bb:8c:
         fb:56:9e:57:6d:58:30:0a:3d:dc:d2:fa:c3:ae:04:9c:fa:6f:
         45:f0:22:8d:a0:99:26:dd:93:95:cb:3e:97:f9:eb:cc:56:4f:
         53:95:9a:2d:ec:1c:63:01:28:5f:44:1c:5b:2e:29:97:1d:60:
         a4:18:15:4b:9f:d3:e9:6a:ac:05:66:24:02:4e:da:43:f2:c3:
         34:61:62:36:0c:d5:f9:f4:15:ac:7f:4c:68:75:0c:a1:e9:f0:
         49:1e:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:57 2024 by rpki-client on console-fra.rpki-client.org