Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          DVWOHyccAhIqlShM5PzrrJlsBOUpeqfiejazAX5QBlw=
Subject key identifier:   DA:AC:E7:C5:B5:2D:2C:EE:AB:E0:15:3D:F9:B0:D3:38:E9:17:F8:AF
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       018FD489B1D53957A6389179D4D0693B6881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          11A0
Signing time:             Sat 01 Jun 2024 16:02:24 +0000
Manifest this update:     Sat 01 Jun 2024 16:02:24 +0000
Manifest next update:     Sun 02 Jun 2024 16:02:24 +0000
Files and hashes:         1: 1-bT_1QOevnzmkb0t-7gOh_5nCfo.roa (hash: l3LOYsVCYvO8G9WEsUmJrsokAzFlZ7dNkFGL0YaOoiU=)
                          2: 6cRX37mnm-s0Fp769DOhOHSRAlM.roa (hash: LTuQ8o2gxEdz7uV79RfnryAT+C9wx80s/zKDpZlR93k=)
                          3: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: 9I2lqoNQmgzQ+vMv1LZqJ7Q+lx8Ju1Pbo6UtJycJQc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 16:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d4:89:b1:d5:39:57:a6:38:91:79:d4:d0:69:3b:68:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Jun  1 16:02:24 2024 GMT
            Not After : Jun  2 16:02:24 2024 GMT
        Subject: CN=daace7c5b52d2ceeabe0153df9b0d338e917f8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:71:96:47:b8:ed:23:a9:82:8e:b2:eb:40:
                    f4:8f:0f:58:c8:ff:dc:ff:d1:1d:9d:51:73:b9:36:
                    7d:84:e8:2d:c7:5d:63:e0:07:19:d3:59:20:60:13:
                    73:b8:75:d4:5e:2a:ac:6f:04:1a:ca:0f:40:32:30:
                    50:54:f6:0f:b1:b8:23:50:91:88:80:de:33:d4:a8:
                    a5:25:23:ee:2e:8e:8c:ad:fb:8b:59:06:b9:b5:06:
                    96:68:4a:e2:21:6e:42:36:c0:cd:09:d0:03:b6:d7:
                    cb:c6:72:3c:80:08:32:87:23:82:c9:61:da:21:c2:
                    9f:9b:c4:70:21:e2:05:f0:fd:bb:0f:c3:28:b6:7a:
                    35:c0:54:e7:fc:5b:a0:dc:44:e8:42:cc:fb:90:48:
                    51:5d:51:69:1f:bf:ae:e2:08:47:43:bf:ac:82:92:
                    67:75:b4:aa:c0:43:39:fd:ac:b8:4c:4f:3c:a3:00:
                    6b:0f:24:a5:f0:8c:3e:99:74:47:83:a7:12:9a:95:
                    a1:a2:92:2e:d0:bb:f7:a8:bd:3c:d6:84:3f:49:85:
                    46:74:a8:12:54:58:d7:ea:b8:4d:f4:85:58:3d:37:
                    3e:ce:4e:65:60:cf:20:de:f0:d5:7b:13:41:ee:fc:
                    ff:46:c0:75:2e:a4:bf:a1:7a:06:29:9a:11:cb:1c:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:E7:C5:B5:2D:2C:EE:AB:E0:15:3D:F9:B0:D3:38:E9:17:F8:AF
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:b5:29:f3:96:a4:e2:f2:5f:3c:8f:92:65:5f:13:db:4a:
         4f:21:d0:cc:e2:41:15:69:81:82:e3:f1:92:0d:6b:87:99:7e:
         d6:ac:5d:aa:d1:dd:25:91:96:2c:f5:39:9a:7a:72:e5:a8:a6:
         0e:85:e9:3a:86:ce:97:53:64:d2:a4:65:87:ee:66:a6:dd:ad:
         8f:d1:86:51:72:19:08:49:a0:d7:68:17:14:24:7b:43:3f:8e:
         f8:3a:d3:d3:91:ee:f1:0c:f3:be:96:2f:5b:6f:e3:b6:f9:49:
         04:c1:16:41:80:0b:14:ca:dd:23:41:59:92:cf:8d:0b:a0:b9:
         5e:41:e9:85:ec:43:32:40:3e:4f:ad:28:d5:91:29:75:97:8b:
         47:2d:6f:63:76:2e:6a:40:7f:bf:1c:0c:c6:2a:c5:d4:b3:0a:
         3a:c9:29:12:3c:4c:45:4a:57:6e:fa:e7:4f:ea:6a:9c:fa:e1:
         18:fd:c8:da:27:42:3d:06:05:ed:ed:ce:f1:e9:63:f3:e9:c3:
         56:a7:3d:df:d5:25:a1:b0:97:7e:82:a3:12:5d:8a:1f:16:b7:
         9c:71:f2:7a:9c:f1:27:72:69:65:0e:c5:ad:4a:ed:74:4f:91:
         a4:8a:f4:f0:ff:89:85:ee:6f:3e:35:2a:0a:7d:9d:8f:d5:15:
         fb:56:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:08:41 2024 by rpki-client on console-fra.rpki-client.org