Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
File:                     6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft (raw, json)
Hash identifier:          a0AF5bwjmGsWwWnLaWcUHvb38I4PqPhjsNN7yILVdqQ=
Subject key identifier:   3C:D4:C1:DB:62:69:B1:37:AE:AC:6D:D4:43:85:78:8A:B1:3D:F6:58
Authority key identifier: EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
Certificate issuer:       /CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Certificate serial:       018F362DE7E0BE9E6D8A489C783BFE9A4F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
Manifest number:          046A
Signing time:             Wed 01 May 2024 22:02:09 +0000
Manifest this update:     Wed 01 May 2024 22:02:09 +0000
Manifest next update:     Thu 02 May 2024 22:02:09 +0000
Files and hashes:         1: 6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl (hash: tUGpe2JXT3T0K/fEzoHGxzRlQSDmD06WAJJFOC6e22I=)
                          2: BW4fujh8TthXw36hISnmCH5ZdNw.roa (hash: yRAvBi+Vs/ZDM3cLc3ZMFv/tlZQkZrXYPKtccDItCPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:e7:e0:be:9e:6d:8a:48:9c:78:3b:fe:9a:4f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
        Validity
            Not Before: May  1 22:02:09 2024 GMT
            Not After : May  2 22:02:09 2024 GMT
        Subject: CN=3cd4c1db6269b137aeac6dd44385788ab13df658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:7f:f7:8d:5a:38:1e:31:ed:3f:0b:c5:fc:
                    9a:e3:7f:ab:52:99:95:48:ae:5b:38:f8:4f:60:d1:
                    eb:1f:90:d5:cd:0a:69:ec:c4:08:34:6d:f4:c4:7b:
                    46:96:0e:01:89:48:38:4c:a0:ea:ce:98:d6:65:22:
                    59:5a:9c:8d:72:f7:e4:0b:d2:5a:e4:80:5c:70:7e:
                    8e:0f:8d:77:48:89:20:25:f2:3b:97:15:ef:87:7d:
                    bd:de:0d:74:01:5f:4d:5e:05:86:b7:b0:7c:44:5c:
                    9b:94:13:94:4c:68:2b:7f:94:9a:2d:f3:ae:c4:46:
                    b2:f7:62:65:10:8f:ad:63:40:bb:b9:07:08:94:26:
                    e0:6b:98:14:50:d3:76:a4:33:3f:96:71:dd:93:d2:
                    95:b7:ce:41:f5:51:ca:73:a9:a7:80:e9:df:f8:42:
                    60:ca:91:3a:9f:c2:35:20:08:b0:09:42:b7:1a:b0:
                    84:68:1e:5e:46:3a:ad:af:26:cc:20:c0:d8:04:0f:
                    5c:fe:aa:ca:78:15:94:71:e8:6d:3b:db:ed:08:72:
                    51:73:f4:f8:9b:5f:ca:f2:af:89:7b:2d:69:f2:92:
                    bb:d0:1e:52:f4:69:12:40:87:5c:86:f5:80:bd:a4:
                    10:20:50:7f:81:e6:94:16:fc:5b:a8:85:b2:4a:7e:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D4:C1:DB:62:69:B1:37:AE:AC:6D:D4:43:85:78:8A:B1:3D:F6:58
            X509v3 Authority Key Identifier:
                keyid:EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:41:f2:7f:ac:9e:c7:5d:14:27:a9:30:b3:c9:3e:a1:70:
         1f:3f:8d:26:24:ce:de:5b:25:dc:3b:73:20:7a:cc:49:1d:8d:
         48:eb:a6:9e:fd:09:f8:6a:9c:83:0a:c2:7e:63:a7:cd:34:08:
         20:0d:d0:43:1f:06:22:1e:41:6c:3d:a2:04:b1:58:b4:d7:d5:
         75:73:b8:ce:44:d1:83:90:26:1f:7c:8e:37:ff:05:07:b5:7b:
         cf:30:92:65:10:a1:29:64:5f:3a:84:c9:21:3e:f6:1a:82:a2:
         5a:24:d2:79:c8:c3:26:fa:e5:94:75:8e:24:00:b3:38:54:39:
         73:f0:dc:4f:60:33:9f:4e:0a:5e:b9:a4:b2:c1:84:f3:58:dc:
         39:57:92:35:26:23:91:9a:c6:d7:b1:95:39:76:c6:6a:92:68:
         09:3a:fd:e7:48:c2:6f:10:41:50:45:8b:75:44:cf:62:4b:13:
         05:3d:c8:5c:30:1c:8f:ef:89:07:17:36:dd:49:12:ca:f1:d7:
         8a:16:1d:9b:df:b2:6d:7c:c7:e5:d0:dd:98:2a:1f:a0:45:0c:
         0e:1b:48:77:79:07:e3:c8:da:b2:16:61:e5:86:43:5f:16:de:
         bf:80:dc:17:ac:af:3b:97:8e:82:07:8e:b2:08:04:47:e9:ba:
         4a:56:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:32:52 2024 by rpki-client on console-fra.rpki-client.org