Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          pQ3MlSt+rGN/tKxwB7rEAaxHGByf8tpEmaCbBA6IzcA=
Subject key identifier:   06:AB:75:B2:B5:63:AB:1D:43:3A:A8:24:F2:51:E8:44:04:4F:D7:E4
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       018FB3B4D9BBD02B99A29AB9DF14B3D84A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          086F
Signing time:             Sun 26 May 2024 07:02:04 +0000
Manifest this update:     Sun 26 May 2024 07:02:04 +0000
Manifest next update:     Mon 27 May 2024 07:02:04 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: kaIH3U6c9ccTGxiNcCxPF6vT1ON60v6vov5DJSxDI9s=)
                          2: qqFZya-4Om8kTLI3LBVG600-yJw.roa (hash: xSZQRAd4mA02ZDM9cjXNhjDDtL+7HkcCMD3Lfg/bYKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b4:d9:bb:d0:2b:99:a2:9a:b9:df:14:b3:d8:4a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: May 26 07:02:04 2024 GMT
            Not After : May 27 07:02:04 2024 GMT
        Subject: CN=06ab75b2b563ab1d433aa824f251e844044fd7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:4e:68:61:e1:eb:52:b9:14:28:06:b4:4e:
                    32:fd:ad:2a:d2:48:ec:93:1f:5b:0e:02:36:a2:36:
                    8a:d4:30:50:3d:f8:e5:51:80:63:f4:ef:40:b6:52:
                    7e:7d:3f:fb:55:e0:b8:a4:bb:80:e3:54:5b:b2:8f:
                    77:8b:51:bf:ea:1e:b8:83:3e:02:bf:d0:95:51:20:
                    ab:a5:63:3e:58:bf:23:7d:aa:9c:e1:8d:5e:50:3d:
                    2a:04:75:93:9e:52:69:73:22:83:44:2b:90:80:5e:
                    e0:f7:70:a2:87:1a:db:c2:e2:f5:3d:88:5d:cd:c7:
                    75:28:c6:f9:fd:02:5a:21:52:f4:0c:dc:b9:37:ce:
                    ad:ba:76:a4:5d:89:04:f4:b9:c9:17:f5:f6:00:fd:
                    13:56:ab:94:42:55:a5:89:74:86:f3:40:3f:66:bc:
                    b9:ae:f8:5e:41:59:cf:44:95:fa:b9:8b:9c:bf:3f:
                    30:51:3e:74:3d:7f:0b:16:3e:73:aa:73:3a:9a:79:
                    98:5a:33:ed:09:95:96:2f:57:06:cd:73:b7:19:ea:
                    19:b0:a8:21:d2:75:fe:ab:d8:f6:a9:98:c9:33:82:
                    d2:05:3e:32:7f:e0:76:f7:b4:84:95:42:ab:f8:79:
                    a5:d7:a0:94:3a:56:21:d4:6e:dc:d4:be:d1:d9:fb:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:75:B2:B5:63:AB:1D:43:3A:A8:24:F2:51:E8:44:04:4F:D7:E4
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:3f:f2:e8:ac:43:1a:c5:e5:63:53:41:16:56:8b:8d:90:
         9c:c0:8a:8c:12:73:86:9b:6a:f4:0e:6b:2d:1d:b8:af:0d:0d:
         17:27:17:21:c3:f5:7c:37:9e:7a:4b:71:82:fa:7f:e9:a1:43:
         7a:44:fe:0a:e8:c7:01:e8:a6:31:56:5d:f4:b2:1e:e8:e2:51:
         a2:f7:5a:d1:0d:f7:f0:96:62:61:6d:7e:2a:2e:33:f0:d0:bd:
         72:80:c9:71:32:cb:e4:c3:da:55:62:b7:23:22:09:53:88:d8:
         a1:37:b9:d0:17:21:34:52:77:c7:81:03:1c:cf:db:69:c7:20:
         a3:e5:9f:a4:a4:2a:7b:94:85:55:c2:2b:45:76:51:83:e9:04:
         29:d5:ce:69:e7:f7:ec:9b:8d:d2:28:3f:6b:a4:16:57:fb:45:
         cd:e6:6a:99:bd:cf:62:22:b2:e8:cb:b6:df:e5:65:f7:a5:7f:
         70:e8:e5:ed:12:ae:2d:ef:b1:d4:cf:96:38:4e:a8:7e:9a:4c:
         92:4a:c3:a5:c4:44:16:94:c8:1f:20:ee:0a:56:15:d8:33:7f:
         e8:d5:e9:ac:c3:6e:02:6b:d3:42:d9:cc:f2:7e:d7:36:03:00:
         09:45:37:1e:0d:93:9f:c6:67:c9:6a:a8:1e:fa:3c:8b:0f:e1:
         43:9a:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:30:32 2024 by rpki-client on console-fra.rpki-client.org