Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          5Ve5v0FsDd1x3arq3YnxUBxK3W8De1W1gyl6M/bDFs4=
Subject key identifier:   E8:5D:B6:C3:F9:D9:EC:A6:B6:8A:07:F2:2D:47:1A:80:79:85:69:D6
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01901DECF6A79049E8BE018D7C69D7392F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          114D
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: cFGwBwAiLtJGTkWcxCkoHdbjB2tvWk3lHyFdvdoDIm4=)
                          2: HdjQUa57Z007bGgwM2AC07zC5OE.roa (hash: +k/8vcyG2cjFaNiheelNXyJzON4H5TK3SYgJ/4+UfY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f6:a7:90:49:e8:be:01:8d:7c:69:d7:39:2f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=e85db6c3f9d9eca6b68a07f22d471a80798569d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:4b:20:b1:9f:74:ad:e4:06:ee:22:25:e5:
                    1e:bf:c4:f8:89:5b:43:21:bb:57:c0:3c:6f:49:39:
                    9b:26:07:9c:0f:48:c8:d6:74:b7:d0:45:da:88:58:
                    3c:2b:32:77:ac:58:48:7a:66:5a:a9:68:df:2a:48:
                    bc:ea:d8:50:04:80:5a:bd:0e:66:3b:d3:f4:1e:a3:
                    39:02:ae:ad:13:ce:9e:b8:0d:a1:8a:7a:86:15:49:
                    c3:4d:2d:a1:c1:97:72:02:be:cb:5f:9e:5b:4f:42:
                    76:5c:1d:2f:6c:da:01:c5:12:33:0f:4c:ca:c1:6e:
                    b9:27:82:b4:45:e2:e6:22:03:af:34:f1:cd:72:22:
                    08:bc:59:93:52:61:42:45:fb:b0:79:fd:22:c5:11:
                    70:74:c8:23:b5:44:18:26:8b:a9:c7:b7:7d:57:bc:
                    42:ba:f2:3e:aa:0b:13:d8:9b:ae:2a:47:88:48:1f:
                    e3:23:e6:0f:98:d0:88:74:ea:db:66:9a:93:65:51:
                    b8:1e:65:ad:b5:95:bf:93:de:1a:8f:75:8c:ea:70:
                    8c:03:7c:93:46:a6:36:9f:d3:5c:f3:c6:f0:f0:6b:
                    7a:ae:bc:a0:21:66:d0:36:a8:b2:70:fd:8f:69:6a:
                    c4:99:a9:65:5b:63:26:42:68:5b:32:67:e7:52:da:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:B6:C3:F9:D9:EC:A6:B6:8A:07:F2:2D:47:1A:80:79:85:69:D6
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:39:eb:67:f8:59:22:0a:8b:62:aa:e5:80:2f:d6:0c:94:
         8b:2f:5b:22:65:27:58:df:6b:dc:a6:ff:15:99:87:84:3a:58:
         d2:86:69:b1:2b:ba:b2:85:b4:42:5d:6d:78:d1:bf:1c:a5:c1:
         e7:ac:10:97:fb:28:70:23:49:e3:ce:61:f2:85:ee:24:12:f9:
         8f:bc:e2:da:aa:cd:21:d6:0f:df:d1:b9:1f:c0:eb:84:8a:91:
         bf:c3:f0:a5:50:3d:f0:97:b2:eb:e8:68:c2:e3:49:82:4e:bc:
         5c:d8:a4:54:ae:3a:f6:cf:78:9c:22:e1:06:65:e0:6f:28:db:
         e8:86:d0:f3:34:c3:27:d8:4f:40:fa:2a:9f:06:62:3b:2e:e6:
         c6:67:af:8e:c3:b6:58:ee:ad:50:b0:cb:dd:a3:e2:28:c5:77:
         84:15:23:19:b1:5f:1d:13:82:c5:86:b9:3a:49:a1:07:05:70:
         da:cf:26:6e:60:e5:eb:de:f8:32:dd:f6:de:c7:a4:3c:6e:10:
         be:24:be:99:c6:a4:45:87:7a:e2:22:6a:27:7c:91:07:a6:25:
         d0:8e:91:20:6d:4f:ae:fe:17:83:9d:fd:55:08:02:d3:a5:8a:
         52:d2:72:27:bc:f4:87:43:a4:27:0c:cc:c4:a5:49:28:c2:8f:
         31:1c:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:48:48 2024 by rpki-client on console-ams.rpki-client.org