Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
File:                     6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json)
Hash identifier:          IR8Q4Wz9Dt1IMdyBSwOIbJFm1QC2l0lcC+IcBTOXqKg=
Subject key identifier:   AF:FB:62:CA:17:A1:95:80:08:59:D7:89:49:E9:6D:CA:F3:B3:7F:61
Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
Certificate issuer:       /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Certificate serial:       018F576F796EF7B8D218E857A6BBB27A4290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
Manifest number:          115A
Signing time:             Wed 08 May 2024 09:01:14 +0000
Manifest this update:     Wed 08 May 2024 09:01:14 +0000
Manifest next update:     Thu 09 May 2024 09:01:14 +0000
Files and hashes:         1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: g3m8cpcgxDZ3EncBP4xxSpvg6GxnopIA96NZGN6jXWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:79:6e:f7:b8:d2:18:e8:57:a6:bb:b2:7a:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
        Validity
            Not Before: May  8 09:01:14 2024 GMT
            Not After : May  9 09:01:14 2024 GMT
        Subject: CN=affb62ca17a195800859d78949e96dcaf3b37f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:ed:cf:b6:24:09:58:34:18:4d:01:22:0a:
                    4e:db:0e:de:82:0a:48:43:c1:8a:75:c5:44:dd:e3:
                    13:bf:8b:34:cc:e1:e0:c0:86:5b:d3:fd:2c:7e:54:
                    b7:0a:bc:0f:b2:05:7e:0e:d0:bf:ee:3e:30:8b:01:
                    6b:58:a3:90:36:1c:94:b4:52:3c:e8:7c:e0:17:7e:
                    0e:01:9a:c1:02:9d:af:5b:2d:64:8e:ed:b0:4c:88:
                    91:21:91:fa:72:8a:09:4b:26:c7:0c:10:11:a2:46:
                    aa:99:7a:b8:af:d1:40:1f:5c:5c:fe:b0:ac:44:75:
                    f5:2a:32:15:1e:59:a2:0b:c9:e2:50:e3:65:25:c9:
                    52:cc:6c:ec:0a:ea:c0:1c:eb:75:3f:e6:38:3e:39:
                    6d:50:b4:6f:66:63:99:41:ee:c9:c7:a1:86:82:f5:
                    ee:7b:3b:b1:b4:a4:54:44:54:5f:00:59:bd:c1:40:
                    12:b5:8d:bc:51:ed:55:bb:0d:cd:bf:a4:e3:75:50:
                    e2:31:9f:59:58:91:85:a8:bb:d5:91:23:0a:4b:8c:
                    7f:f8:3a:69:72:e1:10:75:0c:16:0e:da:d0:14:08:
                    4d:38:16:b8:44:e1:61:cb:c4:20:53:8c:60:50:04:
                    ba:f8:88:c6:80:66:f3:0d:2c:fe:f1:05:e4:49:6f:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:62:CA:17:A1:95:80:08:59:D7:89:49:E9:6D:CA:F3:B3:7F:61
            X509v3 Authority Key Identifier:
                keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:95:d9:28:51:3a:23:b6:7c:8d:f9:ab:42:d8:76:1a:f6:b5:
         22:e0:62:aa:3e:6f:43:51:49:60:9b:c2:bf:74:f0:49:6a:89:
         a3:1b:03:30:1a:27:78:5b:3b:da:45:6b:0d:19:8b:a8:c4:57:
         06:91:36:03:be:0c:d4:bd:3e:95:90:52:1e:62:31:e2:2c:e0:
         53:59:04:47:a3:61:2d:2d:d7:00:8c:6b:22:0a:43:fe:e1:58:
         7b:25:02:52:cb:65:af:91:7f:58:06:c0:26:29:74:c0:5f:af:
         53:e8:02:3f:74:ac:2a:72:aa:de:63:fe:2e:88:a7:54:b5:99:
         a1:4b:fb:6b:4f:4b:4f:23:0d:63:ac:c3:92:ed:ee:d2:08:a9:
         aa:ee:90:8e:69:fa:35:01:71:3e:23:4f:d1:0f:5a:0a:e4:c1:
         21:a3:ba:ae:db:12:0b:d8:c4:3e:0c:3e:6d:62:54:5b:b8:10:
         a2:11:a6:07:8f:95:f3:4e:1d:e2:08:a2:03:3c:94:74:7c:54:
         f2:32:75:a3:a7:02:38:24:74:80:bc:0d:e5:8c:cd:b0:41:68:
         71:96:7d:f0:bb:29:d9:8b:10:9b:a6:f3:7b:db:79:fc:4f:65:
         a3:b3:e7:e9:9b:cf:d5:0a:a6:7b:2b:ec:ec:88:c2:39:fb:00:
         35:7a:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:51:03 2024 by rpki-client on console-fra.rpki-client.org