Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          bZS1zmC4CMPTh8rHm3bcyZqGDGnYXPwK2whO/kEbbOs=
Subject key identifier:   59:58:90:07:B5:06:0D:14:3C:EE:04:3F:39:D0:C1:78:75:C3:C4:0B
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       01901DEAC62481A28752AEF2D9001EE9271F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          024D
Signing time:             Sat 15 Jun 2024 22:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:43 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: cEsb5O2EFeNSQ0B4xiWp3gPEopJ885Wz2jbPntj7A3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:c6:24:81:a2:87:52:ae:f2:d9:00:1e:e9:27:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: Jun 15 22:00:43 2024 GMT
            Not After : Jun 16 22:00:43 2024 GMT
        Subject: CN=59589007b5060d143cee043f39d0c17875c3c40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:53:df:86:4e:24:f9:4c:41:cd:f9:6e:5d:
                    de:33:32:e9:8f:a7:33:44:b2:c3:41:32:3d:9a:24:
                    12:6d:bd:25:2b:f1:2e:d7:bf:af:14:93:0f:b5:0d:
                    f5:6a:24:61:28:42:2c:9f:d4:8b:b1:09:65:4c:c3:
                    e7:a3:33:7f:40:62:25:59:2e:a0:fa:7b:e0:6a:ad:
                    c7:58:90:ea:29:6b:7f:6e:23:c1:a1:c4:24:b6:30:
                    43:95:ca:2e:58:39:e0:1c:8e:42:38:42:d3:6c:3a:
                    27:fd:cd:6b:25:30:2c:cb:40:52:30:13:88:32:57:
                    3b:d3:e1:b2:8b:34:71:0a:09:85:9c:5a:46:e1:85:
                    c1:18:30:15:9d:8d:cb:87:3b:a5:b4:ff:53:dd:8b:
                    2f:b4:fd:fb:14:65:2d:83:22:db:4f:ec:b4:2f:1e:
                    58:ce:d5:50:11:98:dd:94:71:f0:b9:7d:8c:b0:3f:
                    bf:aa:37:53:10:36:0e:32:b1:b2:e7:e1:e4:4c:cb:
                    48:57:6d:ba:95:64:bf:b1:9e:f0:f4:46:31:4f:88:
                    88:99:33:20:e8:e1:ae:c3:bf:79:d5:e1:33:c3:f2:
                    14:88:64:c0:8f:6b:20:e9:f6:5a:ca:57:94:4e:7c:
                    32:5f:7d:2c:de:96:65:11:db:b2:b3:e2:44:bf:8b:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:90:07:B5:06:0D:14:3C:EE:04:3F:39:D0:C1:78:75:C3:C4:0B
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9b:26:cf:52:96:13:f9:f8:d7:9d:ad:31:60:09:29:31:c1:
         f6:93:e9:97:50:e3:2d:e0:9a:8e:31:c2:15:6f:c6:e2:a8:04:
         a1:57:5b:24:3c:07:22:75:69:c7:09:76:43:3c:c8:c4:a0:b3:
         f2:de:67:96:10:68:ea:f5:7c:73:84:b7:92:e2:8f:89:3c:57:
         05:5f:8b:24:52:08:93:48:17:83:78:eb:14:bf:8f:de:a6:9f:
         ca:35:4b:4f:83:ac:9c:fb:3b:65:66:df:5f:97:7f:93:8d:38:
         ca:42:c2:30:aa:ee:08:13:bb:e1:f6:64:27:77:6a:f9:7a:49:
         d2:06:b1:e6:7f:ff:43:fc:87:74:9a:2d:04:55:78:ab:88:55:
         b5:0e:89:6f:47:fc:1a:6a:46:df:0c:97:2f:82:c6:ea:e9:c5:
         e1:c3:3a:8f:f1:0a:d8:67:3e:a8:19:da:ae:7d:ff:4c:48:a1:
         da:02:26:b6:f3:06:22:64:91:87:82:6c:f8:e3:55:fb:4d:ef:
         05:ca:86:09:7b:03:3c:88:d8:92:69:71:5d:82:ee:88:6d:c3:
         9b:c4:4d:bc:1b:42:32:23:e4:bb:d2:60:2d:02:e1:9d:bd:83:
         ab:f2:44:f5:65:67:fe:21:71:c3:f0:0b:91:18:c0:db:41:5f:
         18:4b:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:46 2024 by rpki-client on console-fra.rpki-client.org