Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          NHNHCeOLFvZGsQHmqww0Dqp4aiMcNAAH3hFMm2cL5xo=
Subject key identifier:   A1:F5:9B:FE:61:A5:EA:03:A9:A6:30:DC:7F:CF:86:EE:C6:AA:37:36
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       018FF55D1761FBE3CFFB4725E2FCF814F114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          0CB7
Signing time:             Sat 08 Jun 2024 01:01:09 +0000
Manifest this update:     Sat 08 Jun 2024 01:01:09 +0000
Manifest next update:     Sun 09 Jun 2024 01:01:09 +0000
Files and hashes:         1: 4wYF0nJtcOM-MDac4yNSNU2lwPk.roa (hash: oZcHkfJY1isiF8xYx2BR54/M7ZCiyV9KhcltJsEhoZw=)
                          2: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: 6jtb5khOJyU6VEO+7XpIKmvz2div9aA4aLcLo35x13E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f5:5d:17:61:fb:e3:cf:fb:47:25:e2:fc:f8:14:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Jun  8 01:01:09 2024 GMT
            Not After : Jun  9 01:01:09 2024 GMT
        Subject: CN=a1f59bfe61a5ea03a9a630dc7fcf86eec6aa3736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:0e:68:f2:04:9a:a5:72:08:98:84:76:6e:
                    f3:a7:5e:44:94:44:f6:a5:5e:18:3b:37:2b:be:79:
                    61:93:22:44:6d:3f:11:c8:30:16:3d:41:d9:9c:45:
                    ad:ba:2b:da:a7:72:7b:d4:24:8d:ad:46:b9:59:cc:
                    88:64:d0:34:2d:ad:0c:40:eb:fd:a1:61:38:e4:5f:
                    d7:2b:0f:63:f2:9d:e8:85:28:9a:11:b4:d0:61:ef:
                    d5:b9:ce:f0:7d:7b:dc:23:e2:2f:a7:3a:63:70:f0:
                    e5:16:4a:ab:49:7c:44:eb:7f:68:06:7a:a3:bb:85:
                    b2:c8:af:44:ae:de:d5:07:59:b1:c9:d1:84:22:d7:
                    39:d3:f8:b7:3c:df:cf:b3:1c:7d:5b:a4:81:26:9b:
                    a2:de:ab:5a:d4:8f:4c:ba:63:48:bd:e3:06:51:28:
                    99:2d:6d:48:41:b3:35:04:ea:f9:52:74:f9:65:cc:
                    6f:b4:29:4a:e5:11:af:07:de:d8:19:32:d9:af:0d:
                    cb:5c:27:da:f7:ab:74:9d:30:9f:d3:8e:11:78:59:
                    c3:06:d7:6e:1d:75:16:8c:97:bd:69:3e:57:1f:25:
                    6e:47:93:64:56:69:d7:be:e0:8a:ec:df:5a:47:13:
                    ab:7c:b7:06:ab:9c:df:d9:70:8f:4b:52:00:9c:c8:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:9B:FE:61:A5:EA:03:A9:A6:30:DC:7F:CF:86:EE:C6:AA:37:36
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:be:8b:71:d8:9b:3b:e6:32:f8:7d:68:45:d2:96:c2:f3:0f:
         7d:aa:4f:0b:ba:cf:03:32:26:d2:74:84:50:69:d7:bb:38:fa:
         da:8c:6c:60:ae:93:29:67:55:7c:57:4b:6c:5e:75:70:30:a0:
         e7:3d:ea:0d:b1:99:ea:f1:06:d1:70:a9:db:9c:fc:ff:ab:c1:
         4f:a3:29:71:a2:ff:09:52:ba:9b:65:45:ad:3e:fe:4d:b1:ba:
         81:c2:0b:fb:65:aa:35:5a:5c:cf:99:e4:54:47:dd:b1:17:4d:
         a0:10:6f:e7:81:88:5e:c7:8c:02:40:7a:1c:c7:aa:f9:cc:35:
         e8:8c:34:7a:a2:af:ff:50:c3:68:fc:45:3f:ea:d4:6e:7a:10:
         17:e3:64:f7:72:86:6d:f9:5d:db:2e:a5:0a:2b:8c:5d:93:bb:
         c2:52:ed:17:8d:3b:93:9e:22:ad:e1:39:1a:46:fe:db:7a:9e:
         83:9e:36:f2:c4:12:ec:00:59:ba:58:f3:69:22:75:59:c7:71:
         e4:e9:97:41:b4:d6:ad:36:f9:40:ca:5a:67:db:b9:36:87:f8:
         e3:02:f0:e9:b5:4d:f3:c5:ca:cd:a3:49:94:e1:57:fc:02:8d:
         19:27:97:ab:1e:c4:79:74:86:f9:33:e8:54:4a:a2:fa:78:a4:
         2d:20:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:19:56 2024 by rpki-client on console-fra.rpki-client.org