Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File:                     6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier:          pN0DQLFl61E1qZoQm/rqBsHS2W13e32bpEHHfGrOyM4=
Subject key identifier:   B3:6E:C5:09:10:DB:AB:00:F7:16:EF:6D:DB:64:69:7A:DE:2E:F8:00
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer:       /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial:       018F497F84E99B86034A1B42F11E3039A337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number:          0875
Signing time:             Sun 05 May 2024 16:04:04 +0000
Manifest this update:     Sun 05 May 2024 16:04:04 +0000
Manifest next update:     Mon 06 May 2024 16:04:04 +0000
Files and hashes:         1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: 9YtRW7fRNjkSBN3NAo7p+aWSB/qiGmRLTYOHdiIljpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:84:e9:9b:86:03:4a:1b:42:f1:1e:30:39:a3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
        Validity
            Not Before: May  5 16:04:04 2024 GMT
            Not After : May  6 16:04:04 2024 GMT
        Subject: CN=b36ec50910dbab00f716ef6ddb64697ade2ef800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:0d:ac:60:1e:30:e4:3a:ac:5a:bf:85:a0:
                    b4:60:53:a9:15:2e:47:bb:17:72:d6:2d:f5:1b:5a:
                    2a:5c:c9:ee:3e:7a:8f:6d:a4:74:8a:d9:1b:da:c7:
                    96:e7:99:fd:97:71:db:fd:ea:ec:c1:34:56:59:cb:
                    64:5f:de:43:23:12:c4:ca:64:27:ec:ee:30:3a:56:
                    26:cd:be:78:3a:96:79:20:3b:07:71:a9:c7:76:ac:
                    98:22:a7:2e:52:75:ec:c3:3a:dc:1c:80:1d:78:1f:
                    a7:da:f3:3b:ef:a3:fd:e3:e9:6c:a9:94:d6:ce:d9:
                    5e:45:89:dc:39:2c:60:c7:9f:2c:60:63:08:d9:00:
                    b2:05:08:4a:86:8a:73:73:2d:46:30:34:52:fb:96:
                    95:70:09:c0:22:dd:33:d4:7b:4c:98:8b:96:15:7b:
                    d5:3e:b2:6a:85:15:95:8b:c5:dd:1d:ed:4e:6a:35:
                    4b:63:92:d8:f5:e2:83:20:7f:b7:e4:2d:9c:e2:af:
                    bf:91:38:b3:68:d8:64:f2:60:2a:46:59:da:6a:78:
                    e6:c3:87:f4:bf:67:a6:23:8b:f1:12:24:73:cd:8e:
                    0c:fa:5f:ff:17:7f:aa:47:c5:56:c4:24:4f:d2:84:
                    b7:d7:a1:a8:bf:8f:8d:59:0f:00:f8:ee:26:75:d3:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6E:C5:09:10:DB:AB:00:F7:16:EF:6D:DB:64:69:7A:DE:2E:F8:00
            X509v3 Authority Key Identifier:
                keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:94:83:22:f9:65:4a:57:60:b7:25:8f:e2:a6:ad:73:fb:b1:
         9b:26:63:51:85:93:c8:33:63:59:4f:e8:d0:85:5a:6a:34:14:
         c4:2d:86:1d:27:b8:1a:87:5e:01:cc:7f:d5:ba:4e:56:c5:88:
         11:28:7a:41:80:aa:3b:60:ce:7c:ea:66:18:0d:39:06:52:19:
         e2:eb:7b:79:9e:86:6c:ff:b6:56:6d:41:37:49:f2:55:51:73:
         f3:7e:16:8f:88:10:f8:82:6b:85:9d:62:fa:6e:f0:a2:96:85:
         9b:65:6a:2d:75:ae:35:17:ba:6c:0d:4d:6b:78:56:cd:0f:10:
         4c:87:81:3a:18:75:89:6c:5d:2f:7e:7e:93:0d:85:64:15:95:
         1a:f9:ee:d2:43:c0:90:1e:a5:08:40:d5:b7:6e:b7:70:b4:be:
         a6:9b:f1:e9:58:c6:c4:3c:2c:0e:67:f7:90:dc:d0:fd:3e:52:
         fd:7d:bf:39:5a:e6:ab:2b:b8:50:e1:c3:8d:92:f9:36:82:b2:
         52:8a:f6:03:c2:51:c2:cc:e2:27:1c:70:06:9b:79:fb:3d:5d:
         36:d1:2c:18:d9:8f:ea:ca:46:a4:33:08:79:af:68:06:93:c3:
         61:aa:21:38:b6:8d:4d:90:6b:10:86:29:34:ba:c5:61:07:a2:
         d2:2f:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:53:33 2024 by rpki-client on console-ams.rpki-client.org