Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          MZIYouNuZesRHnQynnb5OAj2xvR+2Y9Udtw9xd5bYA0=
Subject key identifier:   E7:98:DA:93:84:95:F3:84:45:29:DB:DB:1D:35:BA:0B:14:89:64:EF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       018F381BD7E17D708E36D2AC8A6E4F040734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:01:39 +0000
Manifest this update:     Thu 02 May 2024 07:01:39 +0000
Manifest next update:     Fri 03 May 2024 07:01:39 +0000
Files and hashes:         1: 1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa (hash: OPaN64NF/Pvgw6uIT2esv1cvd6xf/jmzeKQZQIELyCA=)
                          2: 2XLsgkYFF_At_R8CADoSTjOSGLw.roa (hash: kidiW8M3bybXJaTUyZgIMUELgEWmn23t2JlprMH7ukU=)
                          3: 6_9QDbVP5qrgT3MDHZPD-TgwyjM.roa (hash: KNEn6mkyDUlEo3s153xYwuOJJ3o0vlN9hiu6DDMs1j0=)
                          4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 5HRZf5ocdwnUM7zxEeF0oRDbrrYJhxEt6fxBge3lvlw=)
                          5: VP1WhwbBlOVusKe895eSrmMT59M.roa (hash: xtiYG6MINgcFzPCNh0uwAp/NIJexbXt5a97xvhNpYnM=)
                          6: l_PoOXMK2S_xlBDJFcCZU5JZSqM.roa (hash: nU5NLNQR8KUD3uCMiOKYb0TUFVHhYaH3xHbbsg8PEoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:d7:e1:7d:70:8e:36:d2:ac:8a:6e:4f:04:07:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: May  2 07:01:39 2024 GMT
            Not After : May  3 07:01:39 2024 GMT
        Subject: CN=e798da938495f3844529dbdb1d35ba0b148964ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:4b:17:fc:a5:80:36:2b:bb:b0:45:c8:51:
                    e2:31:1e:f3:57:44:ee:bf:1f:17:cb:16:3e:ac:8c:
                    dd:3e:87:25:0b:e6:3c:a0:bb:2b:8c:69:88:19:38:
                    c5:e0:71:2e:bb:e4:77:40:4e:62:4d:86:6a:79:de:
                    59:1a:62:a5:1f:d1:e0:72:1a:d9:53:d0:39:bf:b3:
                    c8:66:7f:60:be:cc:ac:24:b9:5b:d4:de:ed:b5:99:
                    47:51:ab:ef:d1:12:31:77:ee:62:b2:bc:e9:46:e8:
                    97:84:ba:eb:22:cc:d3:8b:33:7b:46:ec:ad:86:72:
                    b9:33:88:43:62:b5:02:f2:06:47:ec:1a:03:ce:01:
                    ee:02:d0:f2:a5:98:84:4a:81:75:4f:86:9e:59:77:
                    b8:d4:88:75:7d:19:dd:8e:18:a6:85:7f:be:ec:a0:
                    ac:0b:5d:be:43:d5:a6:d4:e0:dc:ca:d5:39:ed:94:
                    58:99:e7:52:8e:28:5f:73:34:f3:2b:82:bf:eb:6c:
                    40:58:ec:cd:37:09:22:01:f5:cd:ee:2f:f7:ce:33:
                    52:bc:f9:e7:b4:66:6c:64:eb:53:f8:c2:14:c3:66:
                    d1:37:d8:b3:08:10:21:0d:63:0a:80:0c:a1:ab:11:
                    c9:71:cd:fa:87:ac:f0:04:df:c9:a3:77:79:16:0a:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:98:DA:93:84:95:F3:84:45:29:DB:DB:1D:35:BA:0B:14:89:64:EF
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:57:dd:7d:d8:e3:51:c0:75:19:80:15:be:04:40:16:ce:
         1a:45:e8:c4:eb:49:f5:e2:83:81:74:be:b1:15:b1:28:d5:7e:
         80:53:10:61:0b:29:47:f3:29:5f:70:40:be:aa:27:c4:a9:a1:
         05:44:73:62:87:4f:56:9b:7a:a5:6a:9c:ff:41:52:ab:7c:7f:
         9d:86:6a:5e:a3:ce:bb:23:71:2f:62:cb:de:e3:83:44:6a:0a:
         f0:19:1e:2d:19:ad:72:ea:1b:07:bb:89:a0:d6:e5:52:07:db:
         dd:0e:c4:d4:d6:12:80:4c:cd:eb:e6:e6:79:64:37:f6:e7:80:
         9d:d1:ca:7b:d9:66:cc:b1:ad:5c:4c:22:7f:61:9a:04:cb:b8:
         b9:8f:45:01:28:31:32:58:16:4e:5a:21:4c:19:f7:b7:8d:04:
         ae:d4:4a:6c:ed:79:f6:0f:d9:7a:27:ff:54:c4:e4:a2:b4:01:
         38:d5:76:a0:dd:32:5b:44:07:4c:75:8c:64:6f:1e:6d:51:ee:
         99:87:54:1c:7f:68:18:20:4c:12:48:80:42:b4:80:ba:6a:a8:
         05:4e:a8:4d:8d:ab:f3:b8:ab:80:33:b9:17:de:cd:d9:03:ad:
         57:53:90:ef:40:36:a6:ed:6b:4b:15:22:31:99:70:7e:41:73:
         73:c8:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:28:41 2024 by rpki-client on console-fra.rpki-client.org