Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          lQp1gW6eRSOfowSn3jNsNYIyaywn/hpiPel42uy9Boc=
Subject key identifier:   68:70:25:76:46:96:DA:2F:F3:BB:18:CE:71:C1:3B:88:E0:71:3A:F3
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       018F866D032076834B6110CB0126141D8046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 12:00:41 +0000
Manifest this update:     Fri 17 May 2024 12:00:41 +0000
Manifest next update:     Sat 18 May 2024 12:00:41 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: TU9ZKkF+19LBgrS7FSjkHE0Ct0KVPZ3GdYlUoHmkb7k=)
                          2: bGEtg8HRG22cZRcPvkPLCVyCzDk.roa (hash: TT7jtFQbtnPJLTUZEX6aUJw3aAnM2gbQm9Naj8EA+2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6d:03:20:76:83:4b:61:10:cb:01:26:14:1d:80:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: May 17 12:00:41 2024 GMT
            Not After : May 18 12:00:41 2024 GMT
        Subject: CN=687025764696da2ff3bb18ce71c13b88e0713af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:ba:18:a3:2d:de:da:34:23:ef:60:15:a2:
                    ce:b3:7c:3c:07:93:74:20:28:aa:b5:9a:48:3b:28:
                    f4:a6:19:e9:ff:60:c2:a2:f7:b4:f4:37:d6:b2:5f:
                    5c:a5:8f:ae:62:d3:64:5c:45:d6:9f:74:29:3b:be:
                    34:1f:06:6b:a2:5e:a8:21:1b:4e:c5:a8:30:6c:c0:
                    63:5e:c5:31:2b:dd:fc:c6:9e:9d:43:9d:1a:4c:62:
                    9b:c6:26:12:70:ed:b2:e2:e8:27:b3:fa:92:1c:90:
                    fa:e0:0b:8c:e3:31:f2:00:40:ea:74:dc:2b:27:bb:
                    92:ff:ca:32:f2:a1:15:5c:93:57:1f:c9:20:f0:9f:
                    60:37:7e:98:06:c0:37:ad:15:6a:15:1a:c6:d7:13:
                    1f:2a:cb:e7:85:5f:9d:96:97:c4:0d:40:8b:e1:45:
                    b7:36:4b:33:5e:92:a3:30:3e:5c:35:94:a8:2e:01:
                    6d:a4:88:78:d5:79:73:0a:67:53:ce:ce:58:0d:c7:
                    f3:ce:55:e0:e1:10:4d:87:2d:a3:09:b1:c0:0b:d1:
                    92:87:70:b7:51:39:ed:ec:fe:bd:8a:08:4d:0f:cd:
                    14:d5:e4:47:f2:8f:56:f6:55:de:88:09:f4:d8:9e:
                    f4:cf:5f:54:30:75:b3:b5:26:7c:50:84:8e:fa:59:
                    87:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:70:25:76:46:96:DA:2F:F3:BB:18:CE:71:C1:3B:88:E0:71:3A:F3
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:f9:04:5c:a1:ea:d4:ab:00:ba:80:5d:bc:8a:9b:69:6a:
         35:c1:64:12:43:d5:3d:01:de:b6:f0:d5:b3:63:2d:7e:be:38:
         ca:95:7d:90:92:39:5b:54:68:b6:0d:16:70:35:58:95:40:29:
         28:7d:f0:25:96:a5:ff:51:65:e1:d2:82:7a:5d:b9:05:b7:18:
         29:5c:e6:7f:a7:7d:dc:a6:f6:2d:26:21:a8:e8:32:33:2b:48:
         43:37:1c:93:4a:21:7a:ea:d3:7b:3e:88:16:82:f9:90:dc:0c:
         e6:df:e5:1f:45:38:23:a4:d6:fc:8e:dc:f4:79:41:36:55:83:
         eb:0a:7b:f3:8b:99:64:f6:c0:5c:61:31:1e:8e:f8:43:68:81:
         08:5e:04:1a:cc:9e:00:78:ca:aa:84:cf:34:f0:6a:f1:cf:b0:
         48:3e:88:5e:07:27:40:de:88:62:31:36:a9:3b:93:de:23:4a:
         28:00:27:b9:e9:c9:9e:f8:a0:af:8e:a7:85:c3:8f:ac:e4:92:
         ea:75:ed:dd:65:d5:e2:2d:42:20:2d:e1:a6:cd:31:1a:b2:a7:
         e1:52:22:80:7c:6a:5b:88:bb:9f:c0:48:ff:2e:ba:e0:cd:ee:
         a2:5e:2f:a0:f0:62:14:4b:56:33:65:68:1c:8b:0a:5a:14:f7:
         5d:8c:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:33 2024 by rpki-client on console-ams.rpki-client.org