Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
File:                     6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json)
Hash identifier:          HSug6MDL/Fy3S9k7R1etkZaKhHBN5F+BK1qhfvUR3K4=
Subject key identifier:   88:50:A9:93:5F:04:1D:60:D7:E8:08:F3:70:08:30:DA:3A:AA:8C:53
Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D
Certificate issuer:       /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
Certificate serial:       018F45A068438441D4CCC4F03F97736987B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
Manifest number:          0FA1
Signing time:             Sat 04 May 2024 22:01:31 +0000
Manifest this update:     Sat 04 May 2024 22:01:31 +0000
Manifest next update:     Sun 05 May 2024 22:01:31 +0000
Files and hashes:         1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: dPqarP5yuYws5Q7D1ws5SkxspT4WVTbbrrNyKuPkUx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:68:43:84:41:d4:cc:c4:f0:3f:97:73:69:87:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d
        Validity
            Not Before: May  4 22:01:31 2024 GMT
            Not After : May  5 22:01:31 2024 GMT
        Subject: CN=8850a9935f041d60d7e808f3700830da3aaa8c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:fc:43:a5:0f:28:86:90:90:30:93:28:82:
                    68:36:de:e7:eb:16:da:14:c8:40:f0:17:6b:7d:f6:
                    9e:95:e3:a8:c7:08:91:5c:83:8e:30:1c:5d:01:e8:
                    0a:1a:7c:4a:3c:50:08:ff:51:9a:de:57:58:13:32:
                    b7:a0:d4:4c:51:b9:76:af:1a:c4:c3:c5:fc:fd:50:
                    5b:0e:dd:5b:ca:e2:08:59:49:e6:10:96:ea:77:be:
                    a5:f8:1b:79:56:c0:e0:ff:28:bb:3d:81:1c:35:94:
                    82:fa:c5:10:1c:3c:a3:7d:76:8c:5a:29:b2:4e:d7:
                    d7:a4:92:8d:fb:3a:96:28:b4:e6:e5:bc:08:15:88:
                    63:78:27:31:e7:26:e0:a4:6d:92:06:23:7f:ed:8e:
                    cc:34:53:68:e7:5d:33:a1:36:1a:f1:70:30:2c:78:
                    ff:be:fd:95:a7:ec:70:83:58:34:4e:be:00:2b:67:
                    c1:54:85:ff:cb:f1:63:33:34:6b:31:e3:e3:53:cf:
                    4c:82:05:94:c5:03:95:ee:3f:d8:51:1d:ac:a1:a8:
                    8c:ca:64:3e:00:d4:b5:e1:81:c5:c8:05:f1:a3:06:
                    62:f9:98:35:31:f5:a9:35:85:c1:b1:9c:89:42:54:
                    8c:3a:00:d7:0e:f5:ed:0b:6a:3f:c9:b5:b7:36:dc:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:50:A9:93:5F:04:1D:60:D7:E8:08:F3:70:08:30:DA:3A:AA:8C:53
            X509v3 Authority Key Identifier:
                keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:09:a1:05:e9:73:0f:3e:da:5c:91:15:b7:5a:2c:06:97:3b:
         0c:a6:b1:13:24:99:5b:00:a5:22:2f:e4:76:aa:a3:20:a4:e1:
         93:b1:cb:69:6e:ed:cc:a1:b2:9b:9a:da:7b:f0:9c:ce:64:6f:
         3a:e1:f2:10:db:47:0b:06:bc:18:64:e6:f3:84:da:94:d0:36:
         41:09:2f:dc:9d:1a:d9:2c:10:c4:a2:a3:69:2c:d8:09:c7:1b:
         84:5e:72:85:41:7c:65:21:f9:38:67:fc:e3:f8:5d:30:e7:3b:
         76:d9:03:bf:49:8e:b8:a9:94:09:d6:a5:ae:19:8c:16:b6:56:
         52:de:72:6a:2f:8e:63:84:dc:bb:1f:3d:24:40:88:9e:d3:dc:
         2b:6d:39:a1:65:23:2d:8a:d9:02:b3:3e:86:51:71:71:e5:50:
         c6:03:8e:7e:7e:14:0f:6e:a0:e4:dc:cc:5f:0a:0b:3a:76:f9:
         56:2d:1d:bc:3d:8a:18:54:e5:cd:83:24:0c:ef:96:40:b9:2a:
         a1:f2:7d:d4:31:78:ff:e1:ac:c3:fe:09:22:f3:ca:42:1e:a2:
         f8:cd:34:8c:47:9e:f9:2b:ba:ef:e3:11:50:6c:22:6e:ad:3d:
         81:4f:09:77:6c:ec:d4:08:81:3b:56:63:cf:bf:aa:26:5d:f9:
         46:39:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:29 2024 by rpki-client on console-ams.rpki-client.org