Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          dJV+LEEv4RXAKm62WxqRivx2xJ+QhFS3F+DvZkRunyo=
Subject key identifier:   30:16:25:14:43:47:25:2E:BC:CC:B2:8E:EB:E7:2E:DF:BB:7D:50:F0
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       0190520F4A6EFE928A3410F069FB39AAE0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          04FA
Signing time:             Wed 26 Jun 2024 01:00:52 +0000
Manifest this update:     Wed 26 Jun 2024 01:00:52 +0000
Manifest next update:     Thu 27 Jun 2024 01:00:52 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: WNXLznzZpIT5yQXgMoGpWOA83YB9FmYONmSfoIz51Fo=)
                          2: sLqNrzIFfqM0BQY_G2_ZW_0a_74.roa (hash: 7aQ1mpBTXDawUOL1RLjXxav4bwDr0uBYLikDTGK+Gcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:0f:4a:6e:fe:92:8a:34:10:f0:69:fb:39:aa:e0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Jun 26 01:00:52 2024 GMT
            Not After : Jun 27 01:00:52 2024 GMT
        Subject: CN=301625144347252ebcccb28eebe72edfbb7d50f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:e1:66:52:9f:7d:cf:29:a8:e4:ce:3a:4e:
                    0e:70:9d:30:a7:bb:86:f0:82:07:da:a1:44:cc:34:
                    2b:b9:0c:55:10:56:24:63:68:00:b3:80:b2:85:08:
                    19:13:3e:68:a3:7a:80:d4:c4:40:dc:ff:bd:71:9d:
                    7c:f3:81:b0:f2:3b:21:af:61:56:c4:36:59:02:a7:
                    da:10:ac:57:3c:0d:80:d1:fc:10:62:43:04:cc:cb:
                    04:a8:85:a3:13:f5:61:ae:f4:81:d2:9d:4a:40:0c:
                    30:25:22:b9:92:96:60:fa:49:dc:55:7c:36:5a:a7:
                    0f:5b:e4:83:b7:d0:55:54:ef:72:52:f4:d4:4f:0a:
                    3e:6c:5d:ce:ff:80:4c:a4:7e:f7:60:9b:95:6b:a9:
                    b1:ba:f0:cd:64:6c:39:83:17:5b:1f:87:c8:d7:2f:
                    cd:a6:23:12:21:6b:98:44:60:98:f2:4d:a2:87:67:
                    3e:21:c5:ad:4f:e0:7f:a5:1b:fd:60:5c:58:10:b6:
                    88:a9:b2:07:57:33:50:42:78:d3:5f:af:4f:24:e7:
                    62:3c:bd:c3:f9:44:5c:58:0b:bd:0c:3d:6d:9c:bc:
                    15:fb:0a:40:a6:71:60:0d:8e:d7:16:bb:08:63:56:
                    35:a9:5f:06:0d:c9:a8:1b:4c:35:9f:49:6f:ba:e5:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:25:14:43:47:25:2E:BC:CC:B2:8E:EB:E7:2E:DF:BB:7D:50:F0
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:78:27:9d:4a:4d:c2:b6:8e:47:6f:f9:f2:09:f6:f6:21:6e:
         28:42:57:b8:55:a6:0a:9d:30:8a:1e:10:15:52:bb:ed:be:bf:
         81:97:66:a8:f4:f5:af:a0:98:55:da:a2:9a:71:10:8e:20:79:
         f2:03:46:5e:a0:ac:c7:ea:b7:c5:91:f8:f6:de:70:a7:b8:0b:
         96:44:92:4f:0f:1c:0d:99:af:14:ca:97:02:01:f6:87:55:4d:
         2a:aa:04:81:b7:f2:a0:82:4c:a1:29:ff:21:58:1e:df:6c:55:
         44:13:d6:93:03:d2:6e:55:f3:4c:c4:66:23:68:7a:f3:25:a8:
         b7:6f:4e:60:41:d9:40:b0:83:48:cd:0b:87:41:56:45:bb:41:
         d3:db:23:f5:d1:83:14:a5:66:ac:46:9d:67:90:71:a4:4a:d8:
         ad:0d:c0:38:62:ed:5c:71:1d:00:86:05:9c:bc:05:a3:fb:53:
         ef:88:ea:ad:28:d1:72:5a:83:db:a4:e8:f5:f2:b1:8f:e4:25:
         3c:ec:8d:75:0f:51:dd:99:53:e0:8b:3e:8f:20:e9:90:95:7a:
         b6:e8:2c:2a:67:fd:f1:13:ec:38:df:b3:5c:e6:3c:28:4a:6a:
         bc:bd:27:dc:37:92:b6:19:f7:65:a9:5f:76:01:f3:31:bc:26:
         c9:7a:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:33:19 2024 by rpki-client on console-ams.rpki-client.org