Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          hg3wDdGi4am4oyJQj8KXidalwpVx9Ovco8bM1c1cLRI=
Subject key identifier:   7F:0B:D8:39:0A:61:23:2A:3D:79:C8:34:D5:8B:60:BF:2D:38:95:F9
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       018F41C50CEE41F3C910BF9A50044F617E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 04:03:03 +0000
Manifest this update:     Sat 04 May 2024 04:03:03 +0000
Manifest next update:     Sun 05 May 2024 04:03:03 +0000
Files and hashes:         1: 4H0fyEuWerWSzlXNq07JkJiw5qA.roa (hash: OZ0H4XnFLpq2naTP+hDFTCWoPnUMjKiyZzgXftrXUF0=)
                          2: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: rHxKFjvlKOpi8z8Kee+IQ/TBtMoRf1VMfVSWMexeH1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:0c:ee:41:f3:c9:10:bf:9a:50:04:4f:61:7e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: May  4 04:03:03 2024 GMT
            Not After : May  5 04:03:03 2024 GMT
        Subject: CN=7f0bd8390a61232a3d79c834d58b60bf2d3895f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:07:d2:30:c1:07:ce:bc:a6:93:7b:aa:6a:
                    b7:b9:8e:c2:39:db:fa:fd:7c:1b:09:d1:e0:fb:99:
                    22:d1:11:05:18:f0:d5:56:36:79:9a:d9:53:27:8c:
                    bf:b4:a8:98:fc:ff:d7:23:a3:9e:a8:4b:0a:7a:23:
                    86:6a:5d:5f:d0:e0:7a:72:a8:59:c2:e7:82:10:9e:
                    c1:98:49:b7:30:13:c0:14:ed:c6:51:56:f8:41:00:
                    8f:5c:0d:3b:b3:68:e1:f7:05:e3:63:d9:19:66:8a:
                    79:65:5e:71:57:71:d3:86:c4:6a:a6:f3:89:94:52:
                    40:11:21:87:28:a6:98:11:83:c8:9e:61:e7:b4:43:
                    ac:bc:0a:9d:25:29:52:90:bf:8d:e6:ec:f6:b1:7c:
                    d6:86:3c:62:f6:4b:0f:7d:e4:32:6a:5e:9a:81:d2:
                    6e:4b:19:c3:52:b3:26:79:30:a1:84:33:fa:89:70:
                    7d:b7:e8:0d:79:22:c2:ba:33:9e:a4:ac:58:d9:94:
                    db:2f:d5:53:36:44:9a:30:a4:f3:0a:a0:41:66:5b:
                    03:76:04:33:95:7e:9d:b1:aa:8a:b5:90:37:df:23:
                    9e:b1:0d:9e:aa:6d:27:9b:1a:7c:6c:44:ab:22:80:
                    77:2a:35:35:31:5d:9e:df:17:c1:c7:ba:b0:8b:bf:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0B:D8:39:0A:61:23:2A:3D:79:C8:34:D5:8B:60:BF:2D:38:95:F9
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:02:43:38:28:c2:91:a2:14:70:7f:a1:11:4c:dc:3c:f5:
         4f:f4:5e:ef:7d:a7:3d:b4:49:7d:fa:7b:7c:62:99:4d:7c:a4:
         54:ab:bd:af:dc:6f:35:ff:94:3b:8d:38:7b:74:b4:9a:94:35:
         b3:71:94:e0:71:95:a2:85:31:02:69:66:8e:04:0b:f0:a8:4c:
         84:24:0b:74:ce:e1:21:28:f6:b3:51:8e:8f:18:b1:16:ad:a5:
         1d:c5:1a:a7:a3:3d:7f:84:51:24:77:16:4b:75:40:18:26:be:
         a5:89:c4:96:50:b2:20:3b:11:f4:19:22:da:a7:5c:a1:db:9f:
         d6:de:1a:7a:83:e1:42:fb:e3:5e:52:b6:70:a8:71:2d:b2:71:
         1b:fe:ba:d4:83:e4:9d:4e:d4:9b:b4:4b:d6:b1:0b:d3:97:da:
         a8:35:16:b5:b8:40:5f:ff:69:9f:19:7d:01:67:a9:5c:67:8b:
         c4:ee:3a:82:a8:cb:a0:87:4c:e6:69:c6:85:42:3d:8e:cc:67:
         2c:29:a4:6f:72:bb:0c:a9:f7:83:1f:06:f7:37:51:42:59:fe:
         db:83:9b:b7:c6:43:84:0f:7d:73:ca:c8:39:10:2b:76:b5:ed:
         14:b6:db:6a:9f:22:91:de:03:f8:ee:64:3d:81:1f:33:2e:99:
         ee:30:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:50:11 2024 by rpki-client on console-fra.rpki-client.org