Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File:                     6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier:          5mvzkcXP7NesxBks+qApC/Lv+S9EaKWwIZW9oL5iD3o=
Subject key identifier:   3C:10:18:DD:06:51:0D:18:36:4F:14:D8:35:0A:05:8A:6B:E8:6A:A9
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer:       /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial:       018F430CE52FC0048983F0CD36042A2C6063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number:          05A4
Signing time:             Sat 04 May 2024 10:01:09 +0000
Manifest this update:     Sat 04 May 2024 10:01:09 +0000
Manifest next update:     Sun 05 May 2024 10:01:09 +0000
Files and hashes:         1: 4PP6Ig7JR0BI6zoV04TcFhbOdLM.roa (hash: DuV/7LP0Xlz0SWvrYGIKxmdNIYUeQE3zqqUUi1s4fTc=)
                          2: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: uLYJgBaKNPLi2e5C+LzckiVRfBP4C9lClpqHoigVBzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0c:e5:2f:c0:04:89:83:f0:cd:36:04:2a:2c:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
        Validity
            Not Before: May  4 10:01:09 2024 GMT
            Not After : May  5 10:01:09 2024 GMT
        Subject: CN=3c1018dd06510d18364f14d8350a058a6be86aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:41:ec:44:0a:09:f7:e0:60:03:f5:69:5b:
                    c5:fc:48:c7:78:0d:56:a4:b8:2a:15:63:2f:87:71:
                    c2:a5:3d:14:62:6b:66:19:9e:e7:0c:1f:1f:db:cc:
                    48:88:6e:1e:4f:f0:4e:33:0b:d3:ae:3b:ca:01:c5:
                    ce:94:b8:e6:bb:94:1b:c7:c9:78:32:f9:8e:2b:60:
                    14:47:a0:45:3e:c9:22:b7:3c:a7:7e:1c:93:8d:af:
                    c1:61:1a:07:da:50:71:01:20:8a:9b:51:33:82:52:
                    c9:7a:30:c5:c6:d3:78:a3:ce:f9:02:cd:c7:17:79:
                    00:77:71:d1:3a:4f:48:38:45:b7:6c:1c:03:cd:d9:
                    a4:ff:7e:26:06:c2:0d:0f:2c:f6:c9:b6:3d:04:a8:
                    54:52:46:e0:4d:ed:35:8c:c5:3c:46:6c:a1:40:da:
                    3b:25:79:2b:05:2e:31:4b:72:09:27:e6:fa:c7:58:
                    34:46:a6:d0:e9:1d:b0:25:36:fc:72:95:dd:40:64:
                    0e:9f:7f:18:86:04:b4:07:b1:f8:7e:e9:a9:c8:20:
                    8e:cb:b4:53:28:bf:57:ac:b4:ff:dd:e3:95:3a:36:
                    c7:09:5e:fb:fd:10:e9:3a:ea:5e:b8:98:e2:f4:11:
                    69:7a:89:da:4d:39:91:e6:66:43:f3:3e:61:07:27:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:18:DD:06:51:0D:18:36:4F:14:D8:35:0A:05:8A:6B:E8:6A:A9
            X509v3 Authority Key Identifier:
                keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:8a:de:fc:27:1c:8a:25:f3:f0:c1:87:d6:d5:39:2e:0a:
         56:cf:6b:eb:8a:4f:32:78:59:62:a9:59:78:aa:db:71:79:13:
         70:68:82:10:b9:94:17:12:2f:70:7d:95:7f:87:22:8f:51:2c:
         21:97:f5:f6:69:99:c2:7b:3a:83:c0:3a:b3:85:e2:f8:31:73:
         9e:c6:e1:0c:39:6b:0a:ba:67:a9:78:94:cd:6e:ee:f5:b6:f7:
         7f:e7:c4:25:f2:ad:f2:db:60:a1:ac:58:7e:ad:27:b0:d1:33:
         35:07:69:fe:cf:f3:33:a2:e8:79:cf:be:16:72:a2:0a:97:c8:
         8a:07:26:19:8c:13:9b:b7:14:57:9f:fd:b5:e8:8b:90:a2:30:
         d0:f3:d3:9c:f8:35:20:f7:e0:d9:0e:9c:53:a1:9a:04:2f:c3:
         e1:2f:ed:90:a0:37:11:1e:04:33:34:e8:75:fa:ef:06:7d:1b:
         99:6c:e8:1f:af:95:fa:53:16:ef:ed:4b:a5:9d:75:f2:61:65:
         49:18:58:02:03:98:fc:5a:c1:34:de:3d:a0:19:1f:57:07:56:
         c0:b3:30:65:15:5d:81:5a:5c:30:41:5e:6c:6f:b4:5c:71:4a:
         f4:8f:e1:47:23:e8:7d:99:19:34:bb:19:57:6b:02:08:7b:bc:
         b2:11:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:22:53 2024 by rpki-client on console-ams.rpki-client.org