Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          dK26A1M+KKMvs8NJ9Id+R2v/yRfdr77H74wvq8LTplI=
Subject key identifier:   16:27:AC:EA:13:05:19:D9:A4:A3:58:DD:B1:AA:7D:D4:D5:A5:04:99
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       018F3BF95B99482815C29FE5E481169DEC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          0836
Signing time:             Fri 03 May 2024 01:02:28 +0000
Manifest this update:     Fri 03 May 2024 01:02:28 +0000
Manifest next update:     Sat 04 May 2024 01:02:28 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: yryrGzEomoEao6DqIxWiDx3ygHGh7Ec9ci4nqbk9OIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:5b:99:48:28:15:c2:9f:e5:e4:81:16:9d:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: May  3 01:02:28 2024 GMT
            Not After : May  4 01:02:28 2024 GMT
        Subject: CN=1627acea130519d9a4a358ddb1aa7dd4d5a50499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:cc:12:86:c7:d4:9a:31:79:3d:49:2c:90:
                    e3:b7:be:ea:58:1e:e0:0c:bf:b8:d2:6f:b2:a5:35:
                    f1:b7:cf:6c:39:a9:1a:1a:83:b3:06:5c:48:b1:3b:
                    a6:32:4e:c8:0b:e8:af:c5:8c:44:be:a1:0e:f6:dd:
                    b4:42:11:19:a7:93:58:fd:ab:44:3e:38:27:ce:93:
                    47:0e:7e:e7:43:20:cd:e1:b7:73:cd:9d:4c:73:2c:
                    98:b8:f3:fc:9d:a8:ab:ff:a9:69:8e:62:12:83:fd:
                    9b:5d:70:19:ab:89:a8:da:69:89:26:ff:9a:0e:91:
                    7c:18:81:40:85:9c:75:3b:11:63:7c:02:ad:c7:4b:
                    b3:fc:f6:cb:20:ae:f2:59:92:78:76:49:42:9d:42:
                    ef:36:a2:9c:d6:c0:83:1c:ee:7a:69:0c:a5:cd:66:
                    c2:11:f2:c9:cd:80:92:b6:9c:bf:4b:5a:1e:e9:23:
                    77:27:58:00:49:fe:f9:98:fc:94:b3:d8:c7:0a:4d:
                    81:e7:97:be:27:5e:78:a3:ee:8b:95:44:5d:91:98:
                    d5:5b:25:3e:f2:f5:f9:e8:e7:a2:23:86:0d:bc:87:
                    3f:43:fa:80:95:53:a7:70:fc:9d:13:cf:33:f9:f9:
                    cd:62:9b:c0:62:6e:18:3a:e6:f8:0f:d1:92:01:be:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:27:AC:EA:13:05:19:D9:A4:A3:58:DD:B1:AA:7D:D4:D5:A5:04:99
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:f3:16:ce:cd:fe:19:09:7e:f3:8a:90:58:f7:0f:71:bc:
         ca:60:21:9a:3d:00:62:09:a3:77:b4:ce:55:c5:d2:8f:c5:8f:
         6f:a0:7a:88:fc:52:9d:ca:77:cd:32:67:78:92:d1:59:d1:76:
         6b:42:25:0e:c4:21:fe:4f:90:fc:ea:11:1b:f0:19:2f:4f:4d:
         8c:78:d8:4d:16:5b:43:46:47:14:28:ea:d8:2a:9e:e1:e8:ba:
         e1:ab:ce:00:a3:39:1d:9e:30:33:22:7e:30:2c:24:38:5a:06:
         6f:b1:1e:04:72:f1:0c:7a:27:92:bd:bd:e5:73:64:23:d4:75:
         07:67:ba:27:82:85:10:08:ad:ce:a9:dc:f9:7b:01:e0:4d:95:
         14:68:24:f7:f5:18:9c:30:8d:fe:29:05:fc:1c:2c:c4:b4:88:
         19:9b:b9:7e:db:51:eb:0b:e1:cb:60:fb:a5:c1:93:06:4c:32:
         e9:fb:b0:58:61:ce:df:2f:a5:e0:01:ad:02:0d:6d:09:1c:6a:
         ce:19:57:92:8c:06:cf:2c:74:0b:b2:5a:90:d3:2c:8d:b8:4c:
         e0:b1:68:73:6f:d3:e2:fc:ac:94:56:3b:54:49:28:65:8e:62:
         ed:d9:cc:9e:59:2a:78:8c:5c:4d:b7:af:3b:fb:df:20:f3:37:
         be:dd:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:53:33 2024 by rpki-client on console-fra.rpki-client.org