Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
File:                     xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft (raw, json)
Hash identifier:          B5FsgFKMncuG38JQxz8Jui98OL/FUOZqpjNVri+DfA0=
Subject key identifier:   26:8B:79:7A:E0:B1:67:CB:7C:52:8F:47:7B:5C:1F:DB:7E:30:A0:3B
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Certificate issuer:       /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial:       018F88248F1FD750662F80473F692D7A0CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
Manifest number:          01D0
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: eg-HI8jaAy3BfHTfXnOXa5oscaw.roa (hash: z/XVp9coe5OjphBtucpYzX7BCWzwjTgoSzNRVkqmSv4=)
                          2: xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl (hash: 8dDV7EHdOKuX8Hl/cCOd302UPsIMcc1g7/tQh6Str2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8f:1f:d7:50:66:2f:80:47:3f:69:2d:7a:0c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=268b797ae0b167cb7c528f477b5c1fdb7e30a03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:ee:15:5c:1b:fd:c2:69:05:97:b6:36:bf:
                    01:e3:d8:b5:0c:3e:51:dc:fb:0c:ff:15:e4:37:ed:
                    0e:f1:ae:9f:d7:e5:85:6b:4b:76:73:0e:84:60:e0:
                    dd:31:68:55:f7:60:23:37:a1:30:3a:62:c0:7b:0f:
                    93:34:53:f5:44:92:c5:f2:c7:b9:e5:44:cf:61:a1:
                    c7:1d:21:52:b9:e5:9d:84:a6:d6:6c:87:b3:cf:ae:
                    16:ce:28:5e:80:22:53:fc:ee:d2:5d:91:7d:82:da:
                    3b:c3:12:e5:19:5c:20:84:a6:01:06:e7:6f:99:59:
                    33:b7:df:bc:76:0c:1c:5d:b3:f2:1d:31:45:36:74:
                    3c:61:03:2a:93:56:9b:29:25:34:1d:96:2d:b4:96:
                    70:93:ca:02:66:33:8e:e4:82:64:fe:5c:07:79:1e:
                    67:ea:25:d2:ed:00:af:79:28:17:a0:e4:40:b9:7f:
                    65:61:91:fd:fc:4e:93:46:c7:4d:bc:f0:06:00:8d:
                    42:72:aa:64:b2:ae:b1:e1:d7:93:2d:ab:09:98:14:
                    91:ee:10:35:9a:6f:b9:2a:15:cc:84:a1:0b:54:01:
                    5d:33:7e:8a:ed:4a:37:d2:d7:80:e6:02:bc:ad:3e:
                    b8:c1:97:f3:68:9f:bf:3e:21:78:c7:91:ec:ff:36:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:79:7A:E0:B1:67:CB:7C:52:8F:47:7B:5C:1F:DB:7E:30:A0:3B
            X509v3 Authority Key Identifier:
                keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:a4:6b:fd:d1:c0:4b:86:14:f5:a5:00:a8:9a:ca:42:7b:
         31:b5:0a:e6:d1:d4:70:4d:d8:1c:f9:55:55:3c:1e:b6:4f:f7:
         0e:b4:11:83:3e:60:8a:89:d0:42:4c:33:fa:03:d8:00:6c:f8:
         f4:5d:3d:97:76:31:12:70:34:ba:9e:7a:23:21:e1:ef:1e:e3:
         14:1b:3a:35:6d:1b:47:e3:17:c9:ed:cc:c6:18:bb:d0:8e:05:
         ff:ad:49:de:4f:0c:1a:9a:16:d9:d4:ae:92:71:2a:34:c9:00:
         22:10:ea:12:73:ce:30:0b:54:57:95:14:f7:fa:b0:62:ac:bd:
         f9:b6:d7:bd:9c:c6:41:c6:a5:b7:d2:7c:0a:7b:24:7c:6f:48:
         5d:26:c6:bc:ab:99:78:79:7a:d6:ed:b8:fb:89:58:82:ab:0b:
         65:a8:30:32:32:2b:b0:52:59:cc:60:ce:0a:00:97:eb:b8:e2:
         fa:4e:4d:bf:84:d1:7c:5d:03:bc:d2:05:ef:9e:4a:d8:fa:2c:
         05:5d:e0:e1:b6:56:9b:f5:73:64:09:bd:bf:85:48:0b:97:0b:
         9d:33:83:9c:bd:d8:f0:f7:ca:eb:dc:00:52:ba:ee:84:b7:c5:
         cb:11:4a:25:fc:e5:f3:96:1a:70:e9:6d:38:b3:82:d8:f6:f9:
         34:28:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:59 2024 by rpki-client on console-ams.rpki-client.org