Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
File:                     6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft (raw, json)
Hash identifier:          KNp+EAhPVYlOSe3lf+faUdGdGEyqKlrTtjyCCxsf1I8=
Subject key identifier:   7E:D0:C9:12:1C:74:90:7B:5F:17:3E:A0:CD:F3:53:05:EC:B0:C1:BB
Authority key identifier: E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
Certificate issuer:       /CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Certificate serial:       018F32504A991EDD0B3FBA34C4E868A2F009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
Manifest number:          0690
Signing time:             Wed 01 May 2024 04:01:13 +0000
Manifest this update:     Wed 01 May 2024 04:01:13 +0000
Manifest next update:     Thu 02 May 2024 04:01:13 +0000
Files and hashes:         1: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl (hash: q7PnJYyhmRYkNNF9905lsh/CCOFYls3hPlK54SEcOQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:50:4a:99:1e:dd:0b:3f:ba:34:c4:e8:68:a2:f0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
        Validity
            Not Before: May  1 04:01:13 2024 GMT
            Not After : May  2 04:01:13 2024 GMT
        Subject: CN=7ed0c9121c74907b5f173ea0cdf35305ecb0c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:30:c7:5b:00:9c:45:c6:0c:a5:32:f1:c2:
                    4d:ec:b8:f0:09:08:b8:0b:46:ca:df:ed:49:f4:be:
                    0e:76:17:a7:00:2e:a4:e6:b4:22:83:ed:d4:bc:90:
                    01:8d:2b:ea:d8:64:a6:33:6a:ad:cc:4e:4a:52:26:
                    b6:63:98:0c:95:e9:ca:e1:28:ec:83:3e:7c:4d:17:
                    3c:0c:8f:79:50:c2:a4:bc:fe:10:e9:a1:f5:a8:31:
                    7e:1e:f5:68:b5:80:6e:e2:8c:86:df:fc:1e:c7:2d:
                    00:bc:7f:fb:62:11:1b:93:57:e3:7b:a0:df:71:42:
                    0f:33:8b:78:74:fb:cf:67:73:77:1c:7a:29:4c:ac:
                    f6:cd:cb:b9:bb:3f:be:d6:89:74:d5:10:35:3c:ae:
                    02:fa:97:ef:4d:9d:31:5a:99:60:0b:28:28:1a:cc:
                    37:81:7d:d6:a5:b8:bc:5b:2d:cf:83:e6:d4:21:de:
                    f2:e6:ab:bc:44:7d:8a:87:c0:fc:9b:99:a5:af:54:
                    76:dd:92:83:04:86:0c:5e:42:b1:16:bc:bf:96:6d:
                    95:71:9e:b0:39:ed:a1:9f:b1:73:58:27:d4:64:20:
                    94:6d:a8:f5:f2:69:89:d3:2e:23:17:85:3f:19:fc:
                    83:e5:fb:cc:d0:a2:b3:40:af:c4:a8:7a:97:6d:67:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:C9:12:1C:74:90:7B:5F:17:3E:A0:CD:F3:53:05:EC:B0:C1:BB
            X509v3 Authority Key Identifier:
                keyid:E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:af:3b:3f:ee:1c:89:ff:72:36:77:33:b2:9c:c0:29:7b:b1:
         94:22:fd:1f:18:64:79:2a:a7:49:e3:59:45:91:ce:2d:0c:d9:
         ff:5c:54:01:70:2f:54:29:a9:ef:16:7f:f5:2a:ef:b6:31:67:
         4c:33:87:f6:7a:9a:67:f6:8b:da:ac:ed:3d:21:80:af:76:d2:
         67:ec:7a:0e:38:95:b8:30:13:1a:a7:82:fe:b1:e9:b5:31:79:
         fe:bd:d0:a7:eb:31:b7:8b:bc:33:d2:76:e4:e0:7d:1d:93:be:
         14:10:a6:5c:31:38:d7:a5:84:80:34:38:12:fd:9a:c8:b8:6d:
         e8:67:2a:05:19:79:89:36:39:58:38:74:31:40:c2:3d:72:06:
         9c:01:03:66:ba:51:2e:6d:fe:a8:64:6f:0a:ea:f0:14:a6:87:
         d1:86:57:47:8f:8e:35:a1:10:fb:c3:e4:e7:77:73:90:c1:79:
         32:81:18:13:0f:b6:71:f0:b6:e3:3b:8b:f8:0c:54:bb:09:25:
         5a:bb:f8:18:1d:ba:10:33:5e:ee:fe:00:2d:db:55:f0:73:10:
         1a:0b:58:9c:26:56:43:ce:2a:b7:87:73:d5:7c:7d:8f:e3:3c:
         0e:f3:00:e4:fb:e8:94:64:b7:a7:c0:c1:63:e8:a1:87:d5:aa:
         61:22:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:37:13 2024 by rpki-client on console-ams.rpki-client.org