Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          Tq5CSZFHSmipEt4JYP+415qRIOMGQRW4RlsRMtJDu1g=
Subject key identifier:   60:90:C4:A4:EC:70:55:D5:BF:4A:5A:A4:BF:F0:10:9C:86:37:84:3B
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       018F4CB4C02FBAE42C76A3B05EE5A40DFC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          0A70
Signing time:             Mon 06 May 2024 07:01:05 +0000
Manifest this update:     Mon 06 May 2024 07:01:05 +0000
Manifest next update:     Tue 07 May 2024 07:01:05 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: SYAhpnSaxUSotfp+yP8OU9l/d+lmo/2W4PxA5hGoQpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:c0:2f:ba:e4:2c:76:a3:b0:5e:e5:a4:0d:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: May  6 07:01:05 2024 GMT
            Not After : May  7 07:01:05 2024 GMT
        Subject: CN=6090c4a4ec7055d5bf4a5aa4bff0109c8637843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:7f:39:2a:db:1f:dc:47:97:8f:d1:18:98:
                    74:a7:2e:b2:9f:8e:92:a1:b5:b6:0b:d3:53:35:6d:
                    e4:1e:a4:e2:b7:09:20:60:52:70:13:d9:6f:1b:b0:
                    da:c8:c0:0f:6b:6d:e3:6b:a5:e5:e3:e4:8a:31:5a:
                    eb:d4:68:94:ec:dd:54:ea:59:8c:4a:4c:3d:71:91:
                    42:03:a5:46:a3:bd:c3:6a:96:6c:58:b5:37:fe:bb:
                    ce:34:6b:07:f2:ce:3e:76:a1:ff:fa:53:fb:41:98:
                    d3:f0:03:d6:8a:d7:fd:50:84:6e:64:72:1e:7c:6f:
                    f2:1f:b6:56:41:7e:4c:fb:7e:5f:10:c7:cf:4d:55:
                    c1:0c:4b:fb:5e:21:5e:43:9d:9b:fc:d1:24:51:4f:
                    20:15:17:fd:cb:f9:86:b2:1d:e0:33:23:d5:f0:5c:
                    36:b6:34:48:43:47:79:df:a5:2d:c0:05:da:8e:d9:
                    46:be:eb:1a:52:e3:90:2d:4a:5e:c7:0e:d8:6a:5d:
                    10:dd:c2:a2:14:9a:9f:cf:f6:58:fc:f1:e9:0e:de:
                    41:a9:b1:bb:8a:f7:f2:ce:b2:85:23:a3:53:2e:fb:
                    1d:c6:a3:c2:f0:98:0d:88:bf:af:ed:9e:5c:85:74:
                    cf:6a:c2:05:f9:be:59:45:66:a6:9c:7e:bc:65:cc:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:90:C4:A4:EC:70:55:D5:BF:4A:5A:A4:BF:F0:10:9C:86:37:84:3B
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:2a:56:10:bf:04:88:6f:8d:58:31:e2:c6:7a:04:da:0c:
         0c:48:dc:3e:db:cb:0f:65:cd:8d:e4:4d:93:5b:48:68:36:4c:
         ef:f0:ed:48:5a:34:3f:e9:8a:3d:79:b0:59:86:ef:00:8e:57:
         d8:69:38:e7:79:3c:d6:07:ba:62:17:b1:8a:73:3d:85:0f:ea:
         d1:91:bf:e8:ab:b5:6f:f3:f6:09:f9:90:ca:8e:b0:07:fe:95:
         e5:95:23:2e:12:20:b8:3c:44:be:1c:f1:b7:c9:3b:20:cb:9b:
         3d:e0:03:0b:95:44:ee:a2:1a:68:44:d2:85:c0:7b:10:05:0b:
         21:e3:42:d3:66:87:57:2e:c5:47:ce:3e:38:fb:49:36:94:3f:
         14:00:02:15:6e:f4:5e:89:19:49:00:d8:6b:dc:d2:3e:23:a7:
         74:1f:61:48:81:35:7a:88:d9:03:a8:c2:f6:0f:a9:45:78:ed:
         b7:a9:5c:62:b7:9e:16:8e:98:51:f1:76:a3:db:f4:00:24:10:
         87:c5:99:2d:b5:46:00:eb:ac:64:58:6b:48:25:a2:e8:01:ff:
         bf:9e:3f:28:88:2d:ba:a5:c9:aa:b3:6b:e0:e6:33:b7:9b:72:
         d7:a8:47:04:d3:34:12:08:63:d2:70:c4:99:ad:b1:30:f8:7e:
         ca:cb:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:39:55 2024 by rpki-client on console-fra.rpki-client.org