Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          F57GYLUj5QENOtTtFXe74RjKKRJ6D8sT538OSbGMkw8=
Subject key identifier:   54:58:F0:1C:DD:88:99:87:67:15:66:AF:12:23:44:16:63:07:26:C7
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       01901D0F58BAEABB27AE43A1CB19B9082668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          08FC
Signing time:             Sat 15 Jun 2024 18:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:03 +0000
Files and hashes:         1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: cRCA99M6qBhjWNS3VZJLxUA7jYslKzxbAMyQBp93+Ys=)
                          2: J2Vg7W797JEzbUaA-6FXcPLvnuA.roa (hash: 5TYvS1Q+j2G6yrp5hRTPPQZumYgERHqGXl7a/4sCwLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:58:ba:ea:bb:27:ae:43:a1:cb:19:b9:08:26:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Jun 15 18:01:03 2024 GMT
            Not After : Jun 16 18:01:03 2024 GMT
        Subject: CN=5458f01cdd889987671566af12234416630726c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:53:e6:90:c4:3c:7d:e0:2a:4f:b2:52:30:
                    1f:eb:f8:f6:01:8b:e4:21:84:fe:c0:7c:af:9b:82:
                    0d:de:79:a5:af:45:44:47:0d:9a:86:4e:ba:44:36:
                    dd:f4:d5:ad:0c:21:da:c1:fc:dc:78:d8:ae:db:cb:
                    9a:21:8e:7b:c0:f7:0f:f0:32:ef:98:5c:6f:ff:1c:
                    5f:f9:a5:b3:8d:c0:3c:e8:47:78:53:65:73:5b:79:
                    9f:5d:41:6f:10:f6:38:4d:76:df:60:6a:69:6b:36:
                    d2:d9:bd:30:97:98:cd:58:00:62:1b:45:a0:25:71:
                    c0:ba:31:ba:97:dd:99:2b:b0:7e:d3:8b:cc:81:96:
                    87:82:f4:20:50:f3:09:e5:cb:d3:62:16:48:dd:e8:
                    d2:2f:f4:1a:f3:5b:04:ae:a0:e3:32:96:35:21:d3:
                    e1:82:d3:47:67:2e:8c:ac:ed:69:fb:b6:f6:b8:57:
                    0d:4a:78:b9:24:e0:75:a9:1e:63:4a:a6:13:c2:e7:
                    2f:99:64:8a:ba:5c:e3:c9:fd:22:d3:11:21:7e:b3:
                    4c:53:cd:90:1f:1c:25:25:53:9e:80:2a:65:09:80:
                    54:c3:c8:a5:4a:65:0a:b9:9f:45:b8:d3:d2:df:46:
                    e8:cf:be:af:c3:2e:72:27:41:76:65:b6:d8:ca:79:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:F0:1C:DD:88:99:87:67:15:66:AF:12:23:44:16:63:07:26:C7
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:17:4b:5e:c8:2c:2c:b4:99:16:1f:75:5a:19:3d:86:d9:b0:
         0f:e3:d4:63:ef:fd:91:85:e4:32:69:a3:6f:ae:95:2d:f1:e7:
         06:8d:41:92:55:e2:c9:28:89:19:48:b8:a0:23:20:ba:70:ec:
         c7:1d:be:61:f6:88:78:bb:b0:c6:56:3a:38:b0:39:3a:7d:b4:
         22:e0:d0:67:9f:f5:80:06:3a:64:81:b2:27:04:b2:f1:fa:3e:
         22:b7:c0:43:bb:6f:c3:17:91:48:af:93:18:d5:45:35:ec:76:
         e4:3a:3a:9f:be:cf:15:63:5f:c7:45:f7:c6:9c:67:a2:aa:14:
         38:af:54:68:33:b8:fa:da:de:3a:a9:db:13:e3:8f:07:54:9b:
         b8:b2:0f:0a:97:42:14:01:77:32:de:0c:fa:68:cb:e5:f0:ca:
         5c:f1:27:fc:87:c7:dc:3c:e1:1c:b6:47:88:16:fb:22:39:ca:
         b4:ec:e0:86:89:96:93:dd:b9:20:eb:40:46:bc:cb:35:c8:54:
         9c:3f:15:28:bd:09:f8:2b:18:20:95:61:5d:ab:a2:89:60:12:
         37:ab:de:51:f9:90:8c:33:d9:70:95:66:fb:b5:51:63:c6:e3:
         e2:99:10:62:c5:e5:22:e5:06:d3:df:9d:77:44:72:6e:88:ea:
         f8:28:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:41:24 2024 by rpki-client on console-fra.rpki-client.org