Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File:                     a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier:          9Xfzhqg9c9mW2g7LTpSSnKvH+RUYGDQBi14ZrIVs+zo=
Subject key identifier:   6A:E3:99:0D:3C:51:06:28:DA:3A:A1:E1:F6:F2:C6:6E:7E:E5:68:9D
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer:       /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial:       019035195FAFE2E7531406DC36EC0415A0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number:          0F0C
Signing time:             Thu 20 Jun 2024 10:02:53 +0000
Manifest this update:     Thu 20 Jun 2024 10:02:53 +0000
Manifest next update:     Fri 21 Jun 2024 10:02:53 +0000
Files and hashes:         1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: YQHPBR0ttmJt0tY0+giHdV/E7tKJdEemOuYNrGbKxXQ=)
                          2: z6ubru5bGG5whpZXK-VYpDSMhDE.roa (hash: w04zapq0dfj1nH9jTVXw9KMs1vadcTS5QmRvRP1XA4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:5f:af:e2:e7:53:14:06:dc:36:ec:04:15:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
        Validity
            Not Before: Jun 20 10:02:53 2024 GMT
            Not After : Jun 21 10:02:53 2024 GMT
        Subject: CN=6ae3990d3c510628da3aa1e1f6f2c66e7ee5689d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:70:59:f1:8d:7e:f1:9a:ac:48:00:e6:a5:
                    f7:d6:35:54:56:c3:60:8e:18:d4:65:61:f5:4a:d3:
                    ad:22:97:f8:11:b7:bd:f1:eb:c3:da:bc:18:ab:80:
                    5d:c6:19:c6:33:7c:2c:48:99:aa:5d:69:e5:2c:7a:
                    31:0c:84:3e:c0:4c:13:b0:bf:9c:75:f0:d5:bb:22:
                    a0:46:cc:5c:31:2f:c8:44:fe:da:62:7e:e4:35:9d:
                    d7:db:d3:ed:44:14:54:1b:27:1f:23:11:2e:30:44:
                    85:07:79:06:e3:4d:55:6b:29:3e:cd:66:9b:6c:e5:
                    b4:b1:0b:bd:49:25:cf:93:03:9d:46:2e:b9:7f:8a:
                    13:a7:61:b5:0d:ae:8c:cd:ff:3b:c0:f7:6d:0b:b1:
                    c1:eb:85:a2:77:1d:1b:15:03:c9:d9:db:3b:18:aa:
                    98:f8:84:bd:f0:aa:e6:f9:15:c4:8c:30:5a:17:54:
                    4a:ab:c3:85:dc:30:eb:74:b8:71:f2:2b:82:aa:97:
                    1d:9a:0b:41:40:91:98:a4:3c:19:a1:29:6b:bc:3b:
                    ed:99:56:22:29:cd:05:7e:c6:6c:49:14:25:ba:a4:
                    2f:7c:f4:52:a0:49:f3:b8:35:51:01:2c:2a:8b:4a:
                    82:ce:43:04:14:72:ea:f9:1c:35:e6:e1:34:df:3b:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:99:0D:3C:51:06:28:DA:3A:A1:E1:F6:F2:C6:6E:7E:E5:68:9D
            X509v3 Authority Key Identifier:
                keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a4:42:cf:e5:46:d7:00:91:08:b9:cd:43:ec:1e:d4:62:b7:
         44:9a:3e:04:9b:4f:8e:4e:5f:3e:db:75:8e:ef:a4:b6:c5:13:
         89:35:32:f7:e6:f1:01:70:96:d0:20:0d:4d:77:eb:7d:cf:6c:
         71:5c:ec:6b:1f:69:c8:d2:82:85:e4:ab:c7:60:c3:d3:90:e4:
         70:1f:8f:91:cb:b9:26:20:e4:7b:e3:f1:e9:d8:4e:b2:07:f1:
         7f:93:e1:8c:7d:75:87:8d:95:44:8b:14:62:67:15:1a:75:69:
         56:6f:4b:b6:f7:bb:0c:d0:70:8e:7d:34:59:02:52:53:1b:35:
         d1:65:6c:06:c4:da:ed:d8:20:da:87:2f:78:a6:00:5a:8f:c9:
         13:6d:a9:9a:71:9c:a1:f4:fe:fd:53:7a:d0:f2:f4:46:ea:a8:
         96:73:8f:e4:4c:3e:e8:f6:c1:39:fc:c0:79:7e:1b:a0:46:bd:
         11:69:fa:7c:e0:8b:aa:ef:bc:d3:14:a7:bc:ef:3d:18:0f:9b:
         50:36:8d:42:33:89:97:b9:12:19:c5:4f:36:b8:2d:dd:ba:0f:
         0c:79:c0:af:f0:08:7c:c0:9a:e3:43:ef:f3:2d:db:49:2d:98:
         2f:77:23:b5:2d:51:64:fd:d0:0b:cb:37:aa:b2:83:ab:77:fa:
         3c:aa:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:26:18 2024 by rpki-client on console-fra.rpki-client.org