Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File:                     6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier:          GdMK6joSTEfk9aFu0mbcSEW6ylbFIIDllqCzFvyHo1E=
Subject key identifier:   D9:9B:13:7A:06:37:14:55:8D:50:E1:19:9B:D2:DB:77:34:5B:75:7B
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer:       /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial:       018F9383FAB930BADC41BAE6DE69A63467D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number:          05E1
Signing time:             Mon 20 May 2024 01:00:51 +0000
Manifest this update:     Mon 20 May 2024 01:00:51 +0000
Manifest next update:     Tue 21 May 2024 01:00:51 +0000
Files and hashes:         1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: IWhQpAdMaLjsmfTx37IEugm4ilxaK3LHXD+daAdvEUQ=)
                          2: jkYYpGbC0CihqCmkn4ADo5F6EZE.roa (hash: jy2MNnLiReO9xIBOvQ2jnWQITVA4H1hMFryzk9VkErg=)
                          3: q0Z7Dr56OVsdUQ0ISxD5WsjLNmQ.roa (hash: HA9zjPlCPFkr+JV7SL8d7xBBCp1MGXlzMLWDq4+SEkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:83:fa:b9:30:ba:dc:41:ba:e6:de:69:a6:34:67:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
        Validity
            Not Before: May 20 01:00:51 2024 GMT
            Not After : May 21 01:00:51 2024 GMT
        Subject: CN=d99b137a063714558d50e1199bd2db77345b757b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:8c:d3:59:be:85:03:0d:72:5b:6d:c8:a7:
                    f8:d2:fb:d8:90:31:c8:a4:54:fa:6e:5d:7c:57:0d:
                    ff:36:59:c5:13:e3:60:96:b6:de:73:6f:b5:e8:c9:
                    eb:d1:e8:03:40:a9:6b:aa:c9:a0:a4:08:23:04:fd:
                    04:00:88:66:a7:92:80:c2:4f:bb:b3:f5:cb:5b:65:
                    d8:f5:11:ee:d4:93:3a:13:87:c8:69:18:4f:21:ed:
                    db:72:9b:be:55:45:84:cc:cd:72:fb:01:ef:db:bc:
                    fa:f9:c8:4a:be:b1:4c:64:8e:5d:cd:b6:cc:79:a9:
                    b3:92:ad:ea:bf:5b:2d:bd:72:ac:20:3c:bf:ef:37:
                    54:90:eb:49:24:6a:6f:52:0c:a6:01:10:40:7b:a7:
                    52:fe:46:28:db:60:b6:f8:e5:cc:42:d5:a9:a7:9b:
                    ac:d3:f5:ba:02:13:a4:92:42:64:bf:a5:d3:7d:fd:
                    f5:fb:da:2b:a3:49:3a:42:0d:b0:1a:05:6e:70:3b:
                    09:e2:02:14:3a:5f:0f:90:2c:53:e7:19:d8:6b:74:
                    75:51:c3:e3:3b:7f:17:2b:43:bd:83:99:cb:80:cf:
                    ae:8a:15:cf:24:c7:4d:6e:af:f9:e7:19:73:c8:03:
                    94:0e:2f:c7:68:2f:79:32:61:14:d4:9e:b7:0f:d3:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:13:7A:06:37:14:55:8D:50:E1:19:9B:D2:DB:77:34:5B:75:7B
            X509v3 Authority Key Identifier:
                keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:54:3b:80:12:01:3a:27:e4:dd:22:a1:6b:e5:77:ad:47:
         8a:3a:a5:b6:b1:35:1c:c9:10:04:ca:93:71:c3:98:94:f7:df:
         bd:1f:98:a6:24:25:ad:1c:b3:7c:86:fc:48:ec:34:7a:50:af:
         9b:84:87:de:e8:e7:8d:12:6a:77:17:eb:93:36:fe:fd:c2:33:
         bf:26:98:d6:07:f1:97:06:7a:2d:1f:45:ba:25:b9:d1:72:12:
         a2:be:81:28:a3:5d:51:46:e3:4a:0b:b7:b5:9d:8f:65:8d:b8:
         5a:b3:0e:c8:39:95:67:f5:32:b8:ca:7f:f6:36:de:6e:72:e7:
         1d:50:75:ee:5b:92:ca:69:da:3c:71:a2:2c:0e:04:75:c8:10:
         6c:f3:71:0d:ee:67:b0:04:02:96:e5:a8:4e:8f:d2:91:02:17:
         37:cf:7d:06:9f:f5:1c:de:47:ad:e2:7e:bf:f8:4a:4f:a4:dd:
         37:b4:cc:61:32:ff:06:21:62:9b:fa:40:e7:b8:41:f8:8a:2a:
         e8:8c:6f:76:6c:e6:ae:58:a9:f7:1b:87:e3:95:c0:56:3e:d0:
         51:05:2f:3c:28:77:29:d2:d6:6d:bd:ad:a4:89:ff:dc:86:37:
         dd:9f:e6:3d:ec:69:29:6b:d2:78:d7:32:f8:e1:5b:cf:3d:db:
         e0:d1:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:53:22 2024 by rpki-client on console-fra.rpki-client.org