Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File:                     6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier:          afoZMBm2wcFDbpsREnQWlOKabVZK/0SHlt2yqtdYy0A=
Subject key identifier:   98:AB:A3:56:B1:D1:E3:61:83:E6:D9:47:30:F3:9D:31:9E:1C:03:83
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer:       /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial:       018F381DA0338C2F0B9FE0F6D3EEBCBAFB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 07:03:36 +0000
Manifest this update:     Thu 02 May 2024 07:03:36 +0000
Manifest next update:     Fri 03 May 2024 07:03:36 +0000
Files and hashes:         1: 44EVRtG6dghdl7XBVx84mQP51eQ.roa (hash: CYm7Nx6WYhUusymE5kduLJLg1OYqLb24QE+xTjFb2mY=)
                          2: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: /6wnnejHkQgoGzSkrc4e6wXh3wlL+DwkkyxxvjcONM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:a0:33:8c:2f:0b:9f:e0:f6:d3:ee:bc:ba:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
        Validity
            Not Before: May  2 07:03:36 2024 GMT
            Not After : May  3 07:03:36 2024 GMT
        Subject: CN=98aba356b1d1e36183e6d94730f39d319e1c0383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:ef:46:8a:e7:0c:b7:d3:eb:7a:82:56:3f:
                    56:1a:ad:a9:16:36:7c:2a:b1:8e:f8:a6:31:33:74:
                    51:22:0f:33:1e:9a:81:78:84:da:42:97:e1:ac:b3:
                    c4:c5:f6:a2:c6:bd:cb:ef:c0:32:f8:1f:dd:28:52:
                    2e:11:7d:b8:c6:38:c7:07:a3:2e:b9:99:77:95:12:
                    3a:ab:b4:6b:65:65:91:dc:e7:8e:3a:b1:fa:2f:ea:
                    48:19:9b:e8:b9:08:a5:ce:02:65:e4:cc:95:d2:ba:
                    9d:23:89:dd:17:d7:10:77:b3:ef:4c:d6:fe:4b:d0:
                    1c:17:2e:18:aa:e9:ec:7e:51:4a:0d:bf:a2:bb:77:
                    93:4a:a2:35:24:ce:6c:45:0f:f4:5c:72:59:77:5f:
                    a0:43:29:c1:3d:a8:10:dc:49:ae:d9:fb:c6:08:51:
                    58:88:c9:d4:71:38:29:c6:53:43:ba:a5:76:74:17:
                    c5:69:72:c6:6f:10:9e:81:70:8e:11:67:ec:36:00:
                    d7:34:60:b9:ac:f9:de:ab:5d:a1:61:b9:37:88:55:
                    f3:f0:86:d3:ed:ba:d2:ea:fc:93:2d:27:e1:8b:69:
                    bc:af:d3:c4:27:63:e1:5e:54:83:bf:9c:c7:d8:6d:
                    09:60:82:1d:5b:f6:35:c1:ad:2d:25:fb:95:3c:5c:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AB:A3:56:B1:D1:E3:61:83:E6:D9:47:30:F3:9D:31:9E:1C:03:83
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:68:88:1c:bf:58:5c:4f:25:63:2f:a0:89:28:0d:8d:cf:de:
         76:27:25:db:ee:14:90:b4:21:f8:3d:0d:7c:8a:be:71:0d:ad:
         13:31:c3:2e:73:aa:a7:84:08:ba:ca:60:8c:df:50:1e:b2:9e:
         5f:6f:d5:ff:1d:e5:59:ac:55:db:02:50:e0:dd:b4:f3:36:83:
         61:f2:b9:5e:d4:4c:f6:b3:75:87:76:5a:e8:ef:ce:d4:4d:a1:
         5e:71:0e:7f:65:67:c1:ab:a3:ad:0c:fc:62:2b:13:2c:64:9a:
         e4:1f:0e:7d:29:c0:43:9b:30:46:88:48:01:c4:b8:32:d2:37:
         7b:77:05:45:68:1c:48:93:71:92:11:23:ec:34:87:24:ac:9b:
         4a:06:5d:86:22:c5:20:0e:13:69:d3:39:eb:4c:b3:d1:5e:48:
         98:e9:8c:4f:72:33:d9:97:99:9d:8b:78:29:db:f9:5c:c7:65:
         97:52:67:9e:02:dc:86:b9:48:fc:a1:8f:4d:29:c6:05:5b:18:
         d6:f0:63:7e:98:6b:38:fc:6c:4e:d4:18:ac:08:72:47:ca:9a:
         f4:83:47:d5:36:a8:94:13:06:30:8e:36:de:98:42:e2:59:bc:
         09:d2:8e:2f:7e:6a:c0:8d:1e:6c:1b:4d:d9:86:d1:83:90:68:
         52:23:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:31:02 2024 by rpki-client on console-fra.rpki-client.org