Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          qjvOujuT8dU9BrF7l6tg2RdSUVkGAqIVIKsuuUYxnys=
Subject key identifier:   8E:03:78:1A:51:8B:41:3D:1B:59:BA:5D:FC:A0:81:A9:D6:9C:20:7F
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       018F23B877D6AA25117533880D5353B2B689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0691
Signing time:             Sun 28 Apr 2024 08:00:42 +0000
Manifest this update:     Sun 28 Apr 2024 08:00:42 +0000
Manifest next update:     Mon 29 Apr 2024 08:00:42 +0000
Files and hashes:         1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: WnDTFWkypHwIO8jTQy+KhUtpCZKLM5/x1j0aaIUozAA=)
                          2: blFYZkK5cZ-m8_pciAqWAGRzo8I.roa (hash: VYn1ansPjuq8UIrvl5g1NS7Bo+TOMklWJD1QWJpI6jE=)
                          3: d3pZdTQE7FO7qs5wMMIgAvshzqQ.roa (hash: 3+D7YP6tLMlOGg8UtgIViVfptm4jR2eZeifL2umvNIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:77:d6:aa:25:11:75:33:88:0d:53:53:b2:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Apr 28 08:00:42 2024 GMT
            Not After : Apr 29 08:00:42 2024 GMT
        Subject: CN=8e03781a518b413d1b59ba5dfca081a9d69c207f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:8b:8a:ce:a1:39:98:51:19:b5:81:61:4a:
                    5c:39:50:56:e5:40:fd:44:78:e5:28:eb:8b:39:61:
                    f0:26:ad:94:85:ec:51:54:f2:4d:4a:a1:27:ec:49:
                    8f:7c:5b:62:4b:a3:e5:f6:3a:6c:d6:cb:2e:a5:db:
                    34:f8:a9:b1:32:81:97:e4:16:71:60:db:57:1f:8d:
                    0b:f0:32:16:f1:8a:ca:ce:be:0e:04:8e:d1:f4:6f:
                    89:a7:c4:f4:8f:ec:a5:43:b5:e2:1b:08:bf:2d:21:
                    e1:c4:36:37:8d:e0:2e:f6:44:fc:3b:da:7b:e5:13:
                    b2:d0:c5:5a:10:07:61:0c:ea:bc:bf:4a:55:3d:47:
                    b9:b2:cd:36:bc:ce:5d:48:dd:91:dc:ac:31:cf:ea:
                    c9:ca:05:5c:14:d0:5f:a8:29:62:db:4c:55:2d:a7:
                    d0:51:0b:b2:c5:5f:bd:47:2d:fe:58:ed:07:6d:b3:
                    1e:c7:c2:25:8f:59:9a:1f:cb:4a:b7:47:ed:fb:6f:
                    26:68:6f:f0:e0:53:95:42:6d:3c:3d:56:a4:f8:d6:
                    83:0d:18:43:1d:21:8f:ed:56:8f:e5:63:48:b5:37:
                    75:e3:7c:ca:ea:bb:0b:c7:22:7b:5d:3f:6b:13:ad:
                    10:8d:b1:31:89:45:0a:b3:bd:5d:22:c4:a7:ba:89:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:03:78:1A:51:8B:41:3D:1B:59:BA:5D:FC:A0:81:A9:D6:9C:20:7F
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:c3:cc:a2:07:27:29:85:8c:06:4f:4e:2d:8d:93:4f:37:
         2b:d6:07:f6:75:4b:ad:87:a6:bd:e3:14:b4:b5:68:4a:10:51:
         40:d0:31:98:dc:64:f6:1c:f1:30:2f:d4:cb:ae:07:67:7d:ad:
         ab:25:09:79:a2:b8:35:16:51:9b:67:90:a2:d3:d4:35:cd:d2:
         ec:3f:44:31:ad:2c:cb:64:54:a7:8f:80:49:a8:ac:08:c0:f2:
         5a:3b:9f:a9:5c:02:3e:ad:36:e3:e5:40:8b:e2:49:cd:c4:d6:
         14:2a:cb:47:a0:c8:fc:de:d7:dc:79:7a:63:0a:8b:c2:a7:c9:
         be:c0:2b:69:af:b6:ac:ce:f2:cf:fe:75:42:c5:17:f0:83:66:
         4d:42:ed:bf:76:6f:77:6b:07:b3:e6:48:cd:c8:99:67:6d:e2:
         e3:3a:14:50:bb:f7:4d:66:b4:5a:d2:3d:ab:0c:1b:cf:e9:56:
         12:74:1d:df:52:2c:35:7e:46:b8:8e:40:16:5e:07:6a:2a:e6:
         a2:2c:e1:08:78:f7:29:28:5d:24:18:91:de:74:6b:78:54:a6:
         6c:a5:29:32:fb:84:a2:de:61:92:a8:a9:05:59:d3:1f:c8:5c:
         c0:96:64:3d:8b:98:b4:e7:30:9a:08:5e:0e:16:20:3b:b2:db:
         8c:d7:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:23:00 2024 by rpki-client on console-ams.rpki-client.org