Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          AM6BCFMR6+y2n5jf2/hawtUUDxqdmu562oznoLSBKKY=
Subject key identifier:   AD:AA:8F:74:9F:55:37:74:46:B3:C9:3F:01:3D:7F:6E:57:10:6E:85
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       0E4BFEAF6AA1489E1D797061EE7375BEF1AAA0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          60
Signing time:             Mon 16 Sep 2024 11:25:45 +0000
Manifest this update:     Mon 16 Sep 2024 11:20:45 +0000
Manifest next update:     Tue 17 Sep 2024 13:18:45 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: WaAnLgC/jscfX4Fc+8ZIw8wx1rYnyvi3U3yooEnrifU=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4b:fe:af:6a:a1:48:9e:1d:79:70:61:ee:73:75:be:f1:aa:a0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: Sep 16 11:20:45 2024 GMT
            Not After : Sep 17 13:18:45 2024 GMT
        Subject: CN=ADAA8F749F55377446B3C93F013D7F6E57106E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:1d:6c:97:2d:84:b3:b3:9d:d4:0c:38:61:
                    fa:ff:a3:7b:c3:53:c5:e8:24:fa:a4:4f:29:0b:a2:
                    95:cd:ff:9e:ef:b3:05:d2:8f:05:db:24:6a:64:8e:
                    2c:8d:7b:e2:75:c9:cd:b2:ce:10:e7:12:8a:4c:cb:
                    03:fe:02:b0:12:44:36:03:83:28:9b:10:51:26:b7:
                    a1:03:64:51:a9:a5:7c:a7:a5:fd:7a:a1:d7:52:e5:
                    40:e2:85:f6:2e:41:fa:e2:5d:9b:0c:3a:05:16:f7:
                    31:9f:f4:40:12:07:5c:71:38:14:ba:e6:d0:89:96:
                    9f:7c:a9:8f:36:c8:cc:e0:4b:d5:45:4f:da:9e:c8:
                    b8:f4:5e:8a:87:c6:a4:b1:56:62:0c:ad:2f:06:53:
                    e2:cf:69:14:7d:53:95:6f:0a:06:ee:3c:3c:84:cc:
                    67:87:2d:fb:c4:22:84:8c:be:b7:8f:e3:d9:a2:fe:
                    64:8a:e2:a9:83:67:4c:7e:5d:b7:85:8f:0f:00:0e:
                    a5:2f:f5:07:64:b4:8f:d4:fe:66:eb:bf:87:2f:5a:
                    25:ef:37:b3:21:b7:1c:bb:b8:13:59:4a:5f:f8:5e:
                    a9:75:d0:22:c0:2a:db:75:15:32:9c:6d:3b:dd:5b:
                    c9:d3:5c:4e:f2:ba:e9:1d:ce:2d:0e:5a:0c:e4:5f:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AA:8F:74:9F:55:37:74:46:B3:C9:3F:01:3D:7F:6E:57:10:6E:85
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:82:a5:77:ad:95:c3:8f:80:7f:24:20:0a:5e:ce:7f:93:c4:
         fe:17:b6:93:e0:cf:92:84:11:38:d1:7e:2f:ad:0d:e1:78:4f:
         be:3a:ad:5f:39:31:c8:fb:52:c6:d6:c4:5e:68:03:5b:be:7c:
         08:a4:ef:4f:3f:7b:e9:1b:cc:18:a2:07:6d:6b:18:a5:ac:93:
         a1:e8:a5:67:49:a9:39:1e:36:2a:d7:80:5d:f3:d2:ee:54:ab:
         60:29:93:b2:0d:ee:c5:0a:89:cb:02:af:1c:c7:c9:53:a6:1a:
         33:3b:2a:92:64:cc:e6:c5:a6:8c:2f:5b:43:37:ae:06:03:c0:
         1e:16:c6:3a:f8:87:98:72:d0:02:0b:21:97:72:88:64:48:90:
         19:ae:8f:7a:e4:20:a6:7f:55:ad:8a:2c:5b:26:8c:64:c4:c5:
         e8:43:8c:2b:c1:10:84:b6:98:fc:07:04:10:42:f6:0d:23:f4:
         c9:46:42:8f:e3:d3:01:cb:94:90:0b:9b:9b:6d:99:e5:ce:87:
         3a:d8:a7:89:1c:ad:98:ab:8c:7e:f7:bf:f1:3c:9d:2e:60:82:
         94:9d:28:61:4d:eb:4f:3d:70:2d:ef:ae:14:34:0c:be:cf:17:
         5d:10:ce:5c:b2:75:10:03:68:da:be:7d:dd:18:35:2d:8f:62:
         97:85:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----