Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          AoIpwFm4+n10vO5SkPn/CMkEblu7ehioP4oa/u6tODE=
Subject key identifier:   52:61:FF:77:92:D3:F7:3A:11:68:4F:EB:28:59:BA:56:20:18:A3:3A
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       018F441FC767B77E6328CAD65C66FDED1025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          0952
Signing time:             Sat 04 May 2024 15:01:24 +0000
Manifest this update:     Sat 04 May 2024 15:01:24 +0000
Manifest next update:     Sun 05 May 2024 15:01:24 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: m5V5HuUIPqLmdyiKN4bZ5CO6h4sV8KLK23BTcq3DNW8=)
                          2: trggNIZrjNlnjSfmiVu90bHo1YY.roa (hash: mPtNgzXOMagmtBWZykzH2CcCRByS1E6KtqGWmo8HH3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:c7:67:b7:7e:63:28:ca:d6:5c:66:fd:ed:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: May  4 15:01:24 2024 GMT
            Not After : May  5 15:01:24 2024 GMT
        Subject: CN=5261ff7792d3f73a11684feb2859ba562018a33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:a0:85:67:d1:89:b7:4f:d5:19:12:ef:77:
                    68:3a:d3:4b:7e:d2:37:b6:4f:5b:84:72:03:30:6e:
                    02:93:42:b9:35:df:2e:80:b4:55:9f:78:56:d7:58:
                    20:01:5a:68:b5:b3:50:dd:3d:60:f5:cd:f7:c5:68:
                    16:6c:10:a9:5f:c2:88:6f:3f:b5:c6:ab:fb:e6:3e:
                    e5:2b:aa:fe:c2:aa:4f:e0:e1:c5:94:d9:f3:d5:f5:
                    70:bb:c5:c2:fd:79:c1:9b:ca:e1:33:9a:e0:e4:1c:
                    5a:76:2d:1a:d7:8a:55:f3:0b:32:b7:da:dc:9f:11:
                    9a:0b:2c:88:86:2f:d9:89:b4:c0:e1:6f:40:06:f4:
                    cd:03:d5:2f:2d:42:68:ec:85:5f:02:bf:20:6d:12:
                    84:1a:ef:46:a6:62:38:6f:39:b7:46:4a:6d:c4:9b:
                    c0:fc:32:a5:5b:d3:be:82:63:74:c2:20:2c:cb:50:
                    64:59:0e:fb:cd:e4:98:24:9d:5b:e2:4f:6c:e3:11:
                    d6:17:d4:6f:ad:00:da:f7:01:8b:15:16:1c:30:66:
                    3d:08:de:cb:d5:d8:da:ee:fd:1d:30:da:af:52:14:
                    0a:fd:36:65:22:f8:da:ff:01:be:18:ad:bb:46:6c:
                    1f:2e:d5:81:7f:16:24:ec:13:ef:6e:9d:7f:46:13:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:FF:77:92:D3:F7:3A:11:68:4F:EB:28:59:BA:56:20:18:A3:3A
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:69:f1:a8:22:34:f8:eb:4c:ad:ca:25:cd:80:83:89:16:
         ac:bd:50:92:aa:51:94:b8:f0:be:c6:a8:5c:11:5b:07:dd:65:
         2b:75:9b:62:3a:7c:ac:7d:78:6e:2b:26:0f:82:38:a0:98:d6:
         be:61:86:c9:e2:b9:f1:4a:2e:be:cb:3c:22:c8:ce:9c:a3:95:
         11:c2:17:06:19:0c:a1:e3:e1:ce:2d:63:5c:26:ee:a2:d8:ec:
         a5:b8:73:59:ff:a4:72:99:88:d3:f5:ec:c0:fb:52:a1:ff:c7:
         d4:00:06:84:75:dd:22:bb:7a:3a:e1:28:8c:f0:fa:46:84:9e:
         08:b8:71:96:5a:e3:e2:8b:ae:d1:3c:d3:12:b0:38:13:e3:ad:
         f2:ff:f2:70:f5:dc:99:9e:71:50:c1:8c:58:c8:ad:46:73:93:
         91:98:84:9f:84:d9:68:8c:f1:56:25:06:7b:99:d4:a3:d5:95:
         ed:54:d1:5a:ce:70:28:4c:a8:c2:61:91:02:8a:37:61:b2:59:
         15:5d:53:58:2f:75:bc:0e:0f:ae:f1:24:db:aa:86:4f:09:74:
         d1:d3:b8:44:15:8d:0a:87:0e:63:40:28:c4:0e:ba:d1:21:dd:
         36:a9:b6:a5:32:7a:b5:c8:f7:43:71:31:ae:84:dd:bb:2b:fc:
         4f:2b:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:57:07 2024 by rpki-client on console-ams.rpki-client.org