Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
File:                     t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft (raw, json)
Hash identifier:          GXk+OSupcUAX3urpit3c+XOenwZvVkKkLyeVFIcu9b8=
Subject key identifier:   A6:BD:D6:54:58:9D:F1:72:6D:74:99:59:38:5B:01:CE:B4:6C:36:1D
Authority key identifier: B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
Certificate issuer:       /CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Certificate serial:       018F8749E6C88D4019530E45ED88319E57A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
Manifest number:          D9
Signing time:             Fri 17 May 2024 16:01:58 +0000
Manifest this update:     Fri 17 May 2024 16:01:58 +0000
Manifest next update:     Sat 18 May 2024 16:01:58 +0000
Files and hashes:         1: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl (hash: tQZe1W0SuOE1yUYG9SvN7K50M3WPaLV5mBk4qM/OBXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e6:c8:8d:40:19:53:0e:45:ed:88:31:9e:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
        Validity
            Not Before: May 17 16:01:58 2024 GMT
            Not After : May 18 16:01:58 2024 GMT
        Subject: CN=a6bdd654589df1726d749959385b01ceb46c361d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:9e:95:fe:27:24:b1:df:5b:c5:6d:4e:e3:
                    ff:2c:c1:c9:eb:8e:7b:75:89:18:55:38:3e:d4:0d:
                    ed:78:fb:b6:e1:94:5b:65:52:4c:73:b2:a2:65:65:
                    bf:9f:e1:fc:70:4a:43:70:27:ec:c1:48:d9:77:e9:
                    6a:60:d4:5a:27:98:fc:c9:7d:10:44:17:dd:ef:7d:
                    b6:dc:fa:46:ef:6f:ab:23:a2:d2:ba:f2:d5:74:95:
                    57:47:e0:8e:a8:a8:0f:77:c8:ff:d6:ce:5a:6a:3b:
                    a4:3f:ec:08:bd:a2:c5:6d:cd:f9:2d:15:0e:9f:00:
                    c0:68:2e:81:55:51:cf:ad:49:11:02:4b:4b:cc:44:
                    75:b3:c2:a6:17:06:4d:16:3b:3a:ea:b2:fc:40:11:
                    c5:17:b8:9a:d6:7f:1b:f6:47:4b:cc:ef:ca:2e:b7:
                    c2:92:e7:23:74:16:cb:e4:70:45:be:70:fa:75:dd:
                    7e:8c:16:a2:f6:9e:f0:03:9f:02:a3:fc:1e:7f:bc:
                    07:42:c9:e8:70:ac:e9:c5:74:be:87:29:bc:b5:f3:
                    57:94:4e:09:31:bd:12:2c:a6:d1:f6:93:bb:94:59:
                    89:5a:9b:3d:8a:d8:ad:d1:4d:e9:60:50:e3:65:c5:
                    f6:14:9e:34:5a:c0:0d:d8:9c:cf:4d:ec:09:ba:e5:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:D6:54:58:9D:F1:72:6D:74:99:59:38:5B:01:CE:B4:6C:36:1D
            X509v3 Authority Key Identifier:
                keyid:B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:5c:3c:c7:97:a6:f2:20:aa:f2:f4:76:6a:31:1e:89:d9:
         ea:2f:ff:85:1d:82:cc:e2:94:10:24:01:92:0f:00:65:d4:e7:
         c4:1e:40:2c:cb:cc:d7:30:41:86:25:07:f5:d6:ca:fe:3f:6f:
         84:15:10:2d:bb:b1:dd:c6:ac:d2:03:ba:59:df:75:da:b1:6e:
         65:a5:73:df:c0:7b:ef:7b:d2:ec:4e:6b:8d:7a:8b:12:4e:fd:
         28:d6:a3:17:84:c4:1c:b8:0f:90:19:79:5b:a7:46:cc:cb:aa:
         05:84:4c:b5:aa:73:4f:f0:f3:65:bb:d8:01:57:f8:2f:0a:06:
         bb:bc:cc:51:12:a3:db:fd:4f:d3:7e:55:34:53:22:e0:ef:fd:
         de:f9:c3:cf:c6:1e:85:ea:80:70:dd:ec:4e:fb:a8:4e:a4:db:
         49:3e:9a:70:b8:d3:51:1b:fa:f6:1b:88:f3:75:ce:8c:58:a6:
         1e:ed:d0:5a:0e:ba:fa:0d:4c:35:bd:a5:7d:08:ef:3f:f1:62:
         d4:18:8a:29:3f:58:80:d8:44:18:79:bf:63:b3:4b:17:29:08:
         b3:09:df:6c:d9:db:b3:77:4c:d4:2c:67:77:ca:48:8a:14:9b:
         4b:51:89:8d:a5:14:79:96:58:b5:96:2f:98:fd:14:6d:b4:06:
         9b:e4:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:14 2024 by rpki-client on console-fra.rpki-client.org