Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
File:                     p06ky4KkfFxzyC3klcOK86iET8k.mft (raw, json)
Hash identifier:          AW99Ilk5NVxm9d+9UX9eYb+l3RMzBS34g5P24mPt7bQ=
Subject key identifier:   6C:0E:FA:52:11:5F:22:59:A8:52:51:C0:43:7E:CD:DB:A6:E2:5A:91
Authority key identifier: A7:4E:A4:CB:82:A4:7C:5C:73:C8:2D:E4:95:C3:8A:F3:A8:84:4F:C9
Certificate issuer:       /CN=a74ea4cb82a47c5c73c82de495c38af3a8844fc9
Certificate serial:       018F5CCE8CA0CFDAA11D7B9572EF46F9A6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
Manifest number:          0163
Signing time:             Thu 09 May 2024 10:03:11 +0000
Manifest this update:     Thu 09 May 2024 10:03:11 +0000
Manifest next update:     Fri 10 May 2024 10:03:11 +0000
Files and hashes:         1: H04V42D0gQnGuVO6eFpb8NpWbos.roa (hash: +O1XF6voyzTlCc5Qk7VW9Vi5FUeaPAuWMdsVknxEjgY=)
                          2: p06ky4KkfFxzyC3klcOK86iET8k.crl (hash: xJNE1EyHpvZ4giAwvDuFGQ7QF9Fv8e6JmbtpscYSFlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:ce:8c:a0:cf:da:a1:1d:7b:95:72:ef:46:f9:a6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74ea4cb82a47c5c73c82de495c38af3a8844fc9
        Validity
            Not Before: May  9 10:03:11 2024 GMT
            Not After : May 10 10:03:11 2024 GMT
        Subject: CN=6c0efa52115f2259a85251c0437ecddba6e25a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:67:c6:e3:33:8f:b7:31:3f:91:bb:d3:0f:
                    5e:d4:44:2a:1f:40:d7:09:28:aa:6c:44:8e:30:4e:
                    ef:20:7d:c4:ab:d4:68:f9:23:82:2c:8f:58:34:59:
                    54:75:8e:ee:4c:b9:a7:f1:25:72:7b:af:35:79:1d:
                    ba:a0:cc:3f:38:ae:ac:76:2c:aa:ff:7a:f1:12:49:
                    60:eb:6a:5c:91:8a:99:7b:3f:e7:1b:e8:b3:46:76:
                    a0:cd:e2:73:04:a5:b6:e0:92:69:96:d4:83:9b:b2:
                    1d:78:93:01:ef:ec:24:64:7e:ac:06:d3:31:63:f2:
                    ea:8c:75:1a:6f:f5:eb:7c:3c:f3:0c:1f:c5:50:37:
                    7a:63:5e:e4:41:e7:ed:34:15:de:aa:c3:5c:f2:9c:
                    d8:9c:6e:fa:22:dc:bc:97:b6:4f:a2:b7:6d:80:6c:
                    0a:6a:f3:f0:fb:3d:60:f8:18:80:9e:20:3e:0a:4f:
                    a5:fb:0c:50:e1:4e:c8:66:eb:f9:46:a7:f9:33:61:
                    a7:2a:c5:ce:4d:17:3f:ef:79:a6:86:9d:fd:36:1e:
                    b8:d1:d0:be:3b:00:a1:15:e4:fb:af:d3:db:6f:22:
                    a3:f3:24:83:6d:4f:46:99:5c:46:43:67:5e:78:b1:
                    19:b8:37:47:b5:7c:bb:8e:20:35:9d:16:3b:70:17:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:FA:52:11:5F:22:59:A8:52:51:C0:43:7E:CD:DB:A6:E2:5A:91
            X509v3 Authority Key Identifier:
                keyid:A7:4E:A4:CB:82:A4:7C:5C:73:C8:2D:E4:95:C3:8A:F3:A8:84:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p06ky4KkfFxzyC3klcOK86iET8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9246ad-9638-47e6-8214-e98702f1bbb5/1/p06ky4KkfFxzyC3klcOK86iET8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:33:0f:2b:20:99:8c:65:45:30:11:8a:86:69:34:38:a8:db:
         99:93:6d:ab:c8:21:a2:ef:57:aa:e9:9d:3c:17:d4:dd:1c:d7:
         7d:34:f3:4e:0b:f3:06:42:e4:5e:8d:20:ac:1e:6b:5a:a2:0a:
         81:73:d7:f1:7a:55:3e:3c:3e:8b:0d:cd:3f:a8:23:dd:0c:e2:
         ae:35:e9:25:24:3f:b3:21:de:da:8f:5e:47:f1:02:d9:4e:a0:
         4c:18:b1:51:36:5c:9b:c2:65:0e:6e:7d:3a:b7:85:d2:dc:61:
         76:66:69:5c:bf:2d:ef:8c:1a:88:60:77:32:e3:87:f4:4d:4a:
         21:d9:3b:31:35:b7:68:b0:39:8a:a8:36:5d:87:d7:00:db:48:
         37:e4:5c:08:42:6d:14:eb:4f:90:d0:71:c0:11:e4:32:ba:aa:
         82:cc:31:c9:19:6e:bc:d7:28:c2:70:cc:8c:78:67:76:aa:15:
         f0:30:e7:32:73:ca:2f:9c:77:4e:65:a1:d3:4f:b3:86:72:b8:
         9a:04:88:cd:ee:ad:65:36:bc:96:36:1c:b9:23:14:95:3b:bb:
         42:48:b3:90:86:31:d9:08:ec:65:6a:24:06:f5:b0:bc:ca:53:
         46:02:5b:67:08:44:fc:6d:cd:9b:f0:9d:6d:c1:c8:c2:28:b7:
         b9:52:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:53 2024 by rpki-client on console-ams.rpki-client.org