Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          TgJn9pDPUtG3KN4OynXTXz8Ai8NMt3X4i4temCkny2k=
Subject key identifier:   68:84:22:FF:58:80:2B:67:A3:30:E0:F2:0B:27:9E:BA:EB:18:CC:1D
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       018F43B4736A96CC250E4EA1F5B281F94AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          08A4
Signing time:             Sat 04 May 2024 13:04:10 +0000
Manifest this update:     Sat 04 May 2024 13:04:10 +0000
Manifest next update:     Sun 05 May 2024 13:04:10 +0000
Files and hashes:         1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: buoQV7BmGYKq5C5rbdwVhL/cKAFeh+0K1oUfethCiRM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:73:6a:96:cc:25:0e:4e:a1:f5:b2:81:f9:4a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: May  4 13:04:10 2024 GMT
            Not After : May  5 13:04:10 2024 GMT
        Subject: CN=688422ff58802b67a330e0f20b279ebaeb18cc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:d2:1f:fb:db:ec:ea:26:79:5b:94:eb:71:
                    b1:29:7d:1a:0b:a3:fa:eb:80:95:fb:30:ab:eb:d8:
                    28:46:7f:c1:c1:69:e5:92:c8:ef:90:c8:55:f7:6b:
                    9b:a1:11:0d:ed:4e:e3:cf:12:71:3b:19:2b:bd:8f:
                    7e:c6:83:23:00:1c:34:53:52:6b:f2:5b:ef:d9:91:
                    a6:98:11:6f:67:7f:98:7a:32:0b:a1:6c:07:3a:d3:
                    aa:8c:21:85:2a:76:4e:a4:b2:61:43:bb:80:ce:bc:
                    43:73:1d:18:e5:97:82:86:4f:bd:66:d1:ea:4e:52:
                    06:cd:05:77:a5:57:9f:9b:dd:af:13:e6:0a:5d:fa:
                    5b:a0:24:b4:da:a8:94:40:d4:a7:44:07:79:d2:c4:
                    7f:88:48:83:02:db:7d:0b:07:6f:ae:0c:ba:5b:6d:
                    74:de:e9:0a:84:d5:fb:81:bd:1f:10:f6:79:6e:4c:
                    90:1e:60:c4:16:9d:24:49:5a:a6:ed:cb:85:8e:96:
                    b3:74:bd:21:c0:72:55:f5:b6:c2:b9:51:a2:bc:19:
                    c3:82:08:cc:ab:5b:21:24:fb:ec:93:fa:19:fe:6b:
                    d1:fa:cc:f4:52:1e:fe:8d:4b:7b:3b:5f:39:13:cd:
                    a1:68:f1:00:8e:dc:ed:bd:73:ce:56:94:b7:29:9a:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:84:22:FF:58:80:2B:67:A3:30:E0:F2:0B:27:9E:BA:EB:18:CC:1D
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:19:8f:37:20:ae:25:a3:1b:8a:22:9d:93:27:57:48:a5:
         c9:bc:48:78:b5:ab:9b:30:d7:a4:4f:99:42:38:7f:d1:9a:f5:
         4f:ef:1e:2a:a8:89:76:36:7a:58:42:0f:b1:7d:1c:17:96:da:
         a0:73:f6:98:4e:79:19:f4:0e:aa:3b:10:89:d9:25:f4:ab:d1:
         2e:a1:be:ab:ac:c2:88:df:71:2d:e0:55:bd:74:f2:fa:dd:06:
         8b:66:7e:8d:10:77:6d:ba:60:e5:93:28:53:ce:cd:72:b7:ab:
         60:01:88:8a:e2:6b:a2:80:14:29:70:e4:de:4f:11:47:d5:a7:
         da:32:5f:1c:2b:83:18:ff:13:5b:82:46:06:9e:ac:0b:a4:6b:
         69:19:3d:b0:a5:df:1f:3d:d0:40:c7:f0:7e:28:aa:57:a5:84:
         e4:4c:56:46:85:a2:5c:bc:d5:33:6c:d1:aa:af:ff:48:7e:8c:
         65:99:86:e2:c6:88:c7:d0:82:4e:07:1d:03:92:7f:d9:c3:6c:
         02:b2:7f:44:b0:9b:d6:d7:b4:8f:17:6c:92:44:a6:e5:4f:44:
         ce:6b:79:01:60:1d:22:3a:1e:9b:2a:a4:55:58:a2:6e:9b:e8:
         b6:b2:a1:99:f9:57:b1:b8:dd:5e:84:a4:60:c7:a1:d5:cd:59:
         ab:92:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:44:25 2024 by rpki-client on console-fra.rpki-client.org