Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          pmLA4waMn//wXfZgMaE24646+WIzRRMNkCQjkww8EAY=
Subject key identifier:   F7:BE:5C:72:57:8B:DA:B4:46:70:72:2A:FF:18:67:48:F7:49:15:93
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       018F5024352DDC294C3CE1213F8D8D616533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 23:01:41 +0000
Manifest this update:     Mon 06 May 2024 23:01:41 +0000
Manifest next update:     Tue 07 May 2024 23:01:41 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: 2Ca3lj1FzDnd4zYd1shFQoGJ3ZGQiocHKTz72uQy3wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 23:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:24:35:2d:dc:29:4c:3c:e1:21:3f:8d:8d:61:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: May  6 23:01:41 2024 GMT
            Not After : May  7 23:01:41 2024 GMT
        Subject: CN=f7be5c72578bdab44670722aff186748f7491593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:30:b1:66:e4:9d:f0:9d:51:87:18:ff:45:
                    c4:81:38:42:86:ce:b2:d3:16:8e:a9:de:8e:e0:0f:
                    7b:59:05:9b:87:a0:c8:7b:e5:0f:d7:f2:83:d9:91:
                    03:83:4c:72:a2:54:8b:c6:78:1e:2a:c1:75:a5:2e:
                    23:87:0e:35:f3:bd:7c:09:1a:2c:96:19:d3:0c:bb:
                    97:73:37:d3:68:67:8a:a3:16:a0:85:48:8a:a8:a6:
                    f1:b1:87:ee:66:02:db:34:f4:42:25:bd:db:72:0f:
                    eb:07:e5:e3:22:f5:42:83:60:77:54:ab:d9:bf:e4:
                    1a:dd:97:cd:28:d4:9b:2d:94:61:91:23:c9:bf:eb:
                    28:fe:b5:e3:b7:11:80:c0:0b:ab:5a:99:e0:a8:39:
                    b1:7f:e7:98:b6:d7:d8:3f:27:cc:a6:77:46:b7:f7:
                    51:03:66:95:b9:5c:23:01:23:72:42:ea:d8:ee:f4:
                    cc:58:8e:a7:91:65:c4:7a:9f:4b:7f:68:65:01:26:
                    ee:06:b4:ef:22:f6:a8:1e:b4:b8:40:ef:1c:26:be:
                    8c:92:24:39:e1:ac:05:27:a4:c9:a2:1b:dc:52:9c:
                    a0:75:62:76:df:80:34:f5:92:8d:f9:9f:8b:16:25:
                    51:d4:90:4a:50:7f:f7:07:b3:2e:4e:5a:44:bb:db:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:5C:72:57:8B:DA:B4:46:70:72:2A:FF:18:67:48:F7:49:15:93
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:91:ed:54:3b:dc:cf:d2:7c:3f:7e:1e:f2:47:f9:28:6d:
         c5:e2:b4:3c:16:63:65:b8:d0:8d:04:e7:83:b5:34:fc:68:32:
         a6:83:46:c8:92:8c:30:cd:cb:24:c7:6d:ff:cd:26:f8:ff:5c:
         14:6f:49:13:d4:e7:04:8b:16:b4:90:9b:89:fb:22:df:7b:d9:
         5e:88:1c:2c:1e:f9:92:7b:43:12:1c:56:d9:72:be:af:95:87:
         ca:5e:f1:e3:fa:c7:da:92:4c:a6:09:a6:2d:ff:a5:28:ae:49:
         0b:2a:4b:c9:6d:ed:87:56:d0:b1:b4:ca:36:40:33:70:ff:9e:
         f6:ed:f0:d4:8e:c9:b6:12:b0:0c:38:79:19:b1:b7:e7:a5:9b:
         6e:42:f6:8e:d1:1d:74:04:94:44:78:a2:3b:c7:61:73:ec:a2:
         03:48:38:ee:80:99:13:51:dc:d2:77:d2:22:bd:49:04:c7:a7:
         35:96:61:a7:4b:bc:c9:17:5e:f9:40:13:de:85:21:8b:e1:4e:
         e9:56:59:81:cb:34:f0:e8:c1:83:4b:60:a6:1b:92:8a:b2:ec:
         61:a9:53:13:0a:d2:f1:ec:d6:5c:da:1e:d1:56:da:33:86:26:
         1b:cb:dc:99:2d:6f:2d:00:5d:1e:1a:0d:1c:90:1c:02:69:d8:
         39:81:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:22:21 2024 by rpki-client on console-ams.rpki-client.org