Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          f16cwr3OuPaF61Wh6oWT5AGDc3gQSKhiNTo8jHK0dws=
Subject key identifier:   76:7C:65:6B:6F:2C:82:62:E4:0B:A9:DE:FF:57:B9:D1:13:86:34:38
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       01901E8FC1F8775A83E81B77126BAE6B1C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: wCJ86xN6jvur8A/2yz4xAYvxHEYsXWxMv/+XTf1jATA=)
                          2: Zzb_I_BoRFwFfUJmLb_uckTo8LQ.roa (hash: UkNe66awMWuyNnuDMbZCccZ+38j7XgxPHFdPh8lX/+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c1:f8:77:5a:83:e8:1b:77:12:6b:ae:6b:1c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=767c656b6f2c8262e40ba9deff57b9d113863438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:e7:a8:cc:82:8c:e5:67:a2:61:01:9c:49:
                    59:90:2e:c6:b7:f8:57:c2:2d:53:a6:6a:04:dc:03:
                    c1:73:1e:0f:53:56:d6:f5:60:ed:a9:12:35:b2:7d:
                    03:3d:0a:14:e1:13:f3:80:39:85:d2:da:57:9f:b4:
                    1d:bc:dc:19:18:d7:83:f8:e3:24:d3:eb:93:3b:5c:
                    31:bb:e7:6d:85:d5:46:22:88:40:ba:47:81:0f:91:
                    ad:56:5c:74:34:ab:f0:75:8c:cc:47:f5:84:ed:e1:
                    2c:74:b7:9f:c5:15:66:f1:d7:04:2d:0e:9f:87:33:
                    62:71:19:e9:3f:0b:6d:60:5b:86:35:c9:f2:9a:62:
                    53:de:5e:75:3a:f6:0f:59:85:20:e2:5a:b8:88:1c:
                    bc:0b:f7:75:13:53:91:44:8a:cc:44:22:c8:8e:74:
                    a7:31:98:71:57:df:84:8e:0f:33:a5:7d:2e:1b:5f:
                    27:93:6c:e6:60:d6:89:d6:75:40:a0:bd:57:cb:11:
                    09:ff:a7:59:6c:fd:11:0d:64:55:da:28:53:1c:ad:
                    f1:ce:43:8c:1d:40:6a:78:cd:61:30:35:7f:27:4b:
                    0f:92:7a:ea:fb:32:7d:5c:e5:f5:d2:76:83:da:b5:
                    11:07:e9:39:ff:c7:ee:2f:e1:23:06:91:1b:7b:07:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7C:65:6B:6F:2C:82:62:E4:0B:A9:DE:FF:57:B9:D1:13:86:34:38
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:67:9c:2c:e4:f4:af:03:b7:70:99:11:8a:34:a6:88:05:
         bb:52:83:09:0f:07:8a:c2:56:d5:36:db:94:c5:db:5d:be:8a:
         c8:88:48:c1:ce:f8:a4:07:47:e3:f2:6d:85:f3:ba:04:e1:d5:
         c3:f9:c5:02:57:41:d7:68:84:90:c9:20:94:7e:48:3b:75:6d:
         2f:f2:b4:c0:73:a2:c4:2b:b8:0c:ca:fa:a8:35:09:13:ce:90:
         2e:92:a1:26:f5:28:4e:ea:3f:33:3e:78:1f:5f:63:a4:da:37:
         de:85:a2:00:e0:67:89:65:cc:80:6b:58:cf:32:a1:6b:be:be:
         3b:8f:16:4a:75:6c:89:7a:aa:87:da:66:64:85:1f:98:fc:19:
         2f:25:f7:c8:92:a5:d5:38:7d:11:bc:65:e1:11:b8:6c:ee:31:
         ed:57:bf:7d:e4:1a:79:09:d2:1a:d9:d7:c3:38:ab:44:af:88:
         70:b9:99:c3:7c:e5:4f:2b:de:0b:f0:2f:61:c8:06:15:3b:9e:
         32:5b:76:cd:24:69:fb:cb:48:89:90:32:e3:70:dd:dc:6a:86:
         b1:c7:a2:6c:85:b2:b9:ac:0e:94:82:f4:17:f5:d7:84:40:d7:
         8a:40:02:e9:8e:bf:43:20:3e:01:b3:db:6b:79:2f:7c:26:05:
         6b:6b:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:55 2024 by rpki-client on console-fra.rpki-client.org