Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          uUZ01b0x3IzhJQqBLWN3FOBnKROj+itp+lqfuVFlAnI=
Subject key identifier:   6A:12:52:68:64:D9:1F:AD:9F:83:EF:45:EA:1D:AF:79:56:74:34:A5
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       018F9CF4882C092705337FA00BE87DD32022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          04EF
Signing time:             Tue 21 May 2024 21:00:22 +0000
Manifest this update:     Tue 21 May 2024 21:00:22 +0000
Manifest next update:     Wed 22 May 2024 21:00:22 +0000
Files and hashes:         1: 6IG-kJgB3qdeIXEaT0_i2dETOjo.roa (hash: ziouFjR5QzkvWNzoHhdWPW84ucq+NkSgz0mffjAfxko=)
                          2: OWbHDFbMCD6ZeXcNjXkluO7PU3U.roa (hash: MHDlg2qZ6/oSsC7frksOfcnegX9JnOA9vpWmdA9dMGY=)
                          3: QCHxfq3XcC2M2BP51vTNHGRufe8.roa (hash: YyrJUEXKNIWNVRAb220SHtHBAUDmb1h8dh2KV9ruoto=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: bk2MW/Na+yunXno3g68LWQ9zqod+0St5zQPLK4sew8E=)
                          5: wJ6E61UUxko3OM9gLLXbhoW_uPM.roa (hash: IZ0xraEA4TdnarEtCEhYw+uralZRAwNvch1dsyrZ+Mw=)
                          6: wnvrSR-EzKEYcMxLqS_hCf1kImc.roa (hash: +k8mwu9QH6esiFWt5e3eAP87hCuKO5XG2qRfuiXQvK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:f4:88:2c:09:27:05:33:7f:a0:0b:e8:7d:d3:20:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: May 21 21:00:22 2024 GMT
            Not After : May 22 21:00:22 2024 GMT
        Subject: CN=6a12526864d91fad9f83ef45ea1daf79567434a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:08:42:fa:02:7e:e5:d5:1a:d2:ec:3d:0e:
                    20:cc:4d:32:75:a1:e7:52:64:e9:5f:be:e8:01:92:
                    2a:03:2c:95:8b:ac:5c:9f:8a:97:c3:15:ed:e7:ee:
                    6f:4d:a5:cb:38:eb:d9:3b:ab:54:33:49:e9:df:4c:
                    16:a9:e0:d6:db:55:6c:a6:d4:ce:e1:c0:9c:2a:75:
                    9b:68:d3:19:5a:d6:68:a2:4a:3a:8e:5a:55:90:c0:
                    2b:91:1e:0b:43:b2:e2:16:38:5a:d5:55:a7:f6:2f:
                    58:ec:ca:47:a3:9a:ce:60:db:31:61:95:52:e4:c0:
                    07:04:c9:4f:ef:71:5c:7b:d9:96:30:a3:78:6e:b7:
                    81:cc:ad:49:9a:8b:de:65:64:f6:36:e9:21:60:98:
                    e3:4c:be:88:45:02:13:49:9b:a9:e0:97:d9:96:73:
                    e4:67:df:a1:85:e1:23:1a:71:c4:5c:a0:82:86:6a:
                    bd:9e:c6:ab:0a:02:0f:ad:36:1c:a2:31:f7:d6:cd:
                    0c:96:22:70:16:fc:36:57:dc:f5:63:1e:9c:28:18:
                    67:1f:c4:f1:8c:45:97:49:52:88:ca:90:4b:fa:fa:
                    d0:c9:74:b5:26:97:6c:6c:c7:6a:10:c3:b1:a2:05:
                    f9:c9:9e:23:3d:e8:5a:9a:a0:5b:e8:45:0b:5e:cc:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:52:68:64:D9:1F:AD:9F:83:EF:45:EA:1D:AF:79:56:74:34:A5
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:01:60:71:3f:db:c2:94:29:87:8d:2e:8d:d9:79:a0:21:51:
         ff:c8:cc:ba:68:bd:fc:4c:2f:a7:5a:18:36:64:ef:c2:df:d0:
         3d:be:e2:d4:33:5a:93:75:3b:f2:07:2d:2a:f3:11:fa:99:7b:
         bf:70:3d:4d:d2:8c:3a:d6:da:c9:2f:9b:bf:89:9f:44:86:f8:
         5d:46:aa:62:30:e6:16:d4:2b:e3:ea:8c:2a:06:cc:e3:d1:25:
         26:c2:29:9a:2c:c7:b5:5c:62:91:60:d6:ff:38:31:54:80:ae:
         06:24:76:b1:1f:f2:22:d4:d4:c3:e7:ad:70:c0:a4:98:b8:48:
         b6:12:8f:30:3a:cc:2a:2a:74:11:8a:84:0d:72:51:a6:23:b0:
         da:92:3b:8b:d9:d5:5c:1e:1b:a0:24:1a:55:2b:51:97:d1:03:
         7f:b6:68:62:2b:ba:af:61:03:1a:54:24:48:a9:60:2d:89:e9:
         2a:79:73:7f:b5:66:6d:44:4c:98:64:a9:48:42:d4:1b:e8:b4:
         07:ea:88:83:ad:07:57:59:59:f0:9e:b9:ff:4b:09:19:f6:5b:
         7c:8b:08:a1:b2:2c:9e:44:6a:64:35:d3:0f:ce:9f:fe:6d:f5:
         b5:a8:60:61:48:54:5b:1b:4f:87:70:46:f4:07:25:1b:ec:f7:
         d6:76:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:53:54 2024 by rpki-client on console-fra.rpki-client.org