Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File:                     CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier:          bY/t5fFNtV9VRVtrwcokUoB1dOa5fBrXExvMWWMY23Q=
Subject key identifier:   6A:FB:BC:A5:85:F6:00:83:DC:A8:F7:BC:9B:51:55:AC:45:E5:95:68
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer:       /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial:       018F4DC7DD01D491934E26E03DBE70E9D314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number:          0CDC
Signing time:             Mon 06 May 2024 12:01:34 +0000
Manifest this update:     Mon 06 May 2024 12:01:34 +0000
Manifest next update:     Tue 07 May 2024 12:01:34 +0000
Files and hashes:         1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: daRVOTLHhWbkW3zG8qAP6cKeBAE8oX/3qDmPNjDU/tE=)
                          2: tlPSxJbaYaCdHjDPISJEayws_yc.roa (hash: TE6il5tB/r5wLI4gfgseRdom20XkwyfANtb9DGaUTdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:dd:01:d4:91:93:4e:26:e0:3d:be:70:e9:d3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
        Validity
            Not Before: May  6 12:01:34 2024 GMT
            Not After : May  7 12:01:34 2024 GMT
        Subject: CN=6afbbca585f60083dca8f7bc9b5155ac45e59568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:8a:78:44:61:53:41:4b:37:b1:f7:64:c3:
                    67:60:73:75:83:79:e6:71:72:3f:82:f2:3d:dd:f2:
                    b9:c3:49:2a:6a:4f:e7:6c:74:74:6c:e4:56:9f:08:
                    de:ef:e0:a9:44:a6:55:05:41:60:eb:e0:4c:36:d1:
                    b2:5f:c3:49:0f:97:96:28:5b:b0:8a:2e:32:ea:b7:
                    d3:bc:f2:fd:a5:ab:e6:5b:df:c7:78:06:5f:a5:0e:
                    21:2e:f2:7a:91:53:1b:b0:6a:4b:0c:b8:f9:15:1c:
                    59:2a:69:a3:b6:ca:47:a4:57:f9:35:60:7c:1f:ca:
                    f3:de:6d:90:c4:2f:b6:79:38:f4:35:c1:29:d7:90:
                    4b:27:5b:0d:be:7a:3e:c2:bd:24:be:5d:16:84:e0:
                    b5:cb:34:f7:6b:85:05:5a:9c:65:56:71:6f:1a:37:
                    8d:ce:b3:72:00:c2:50:fe:67:9c:32:00:22:1b:98:
                    b1:ed:35:fa:b2:cb:f7:72:10:bc:d5:3e:ce:aa:5f:
                    17:8e:be:ed:50:04:dd:6a:8f:dc:15:7d:6d:d1:ac:
                    3f:48:85:a0:ea:13:b7:e8:a9:e6:b7:e4:16:4a:2a:
                    57:29:8b:70:8a:ac:2b:53:5d:ea:97:d5:a5:53:fe:
                    ea:56:a1:7f:b6:a7:bc:ad:06:2d:08:55:1b:d6:29:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:BC:A5:85:F6:00:83:DC:A8:F7:BC:9B:51:55:AC:45:E5:95:68
            X509v3 Authority Key Identifier:
                keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:63:26:b4:e9:5c:0c:f1:6b:02:d4:c1:ac:78:0b:d2:2d:
         0f:31:10:98:bb:aa:ac:91:96:9b:7c:5e:ed:03:aa:77:34:62:
         e1:5a:55:6b:26:82:d7:18:55:72:13:ec:d5:fe:66:52:14:fa:
         02:d3:d0:2e:fd:3c:1a:3e:4e:39:d4:32:bb:24:3c:98:d3:55:
         27:89:44:54:12:45:6f:52:4a:6f:2e:3f:ce:51:d5:e9:77:83:
         6e:54:3e:64:a8:e7:9c:f0:8d:92:4c:02:ed:95:34:0e:24:90:
         48:d0:04:a9:8f:fa:13:cc:11:2c:98:0a:75:52:63:ec:7a:aa:
         91:d1:5c:42:8f:fb:0e:85:62:92:5d:d5:d2:f1:f1:c0:80:09:
         ff:45:5e:56:47:bd:b1:57:c0:cf:97:ee:bd:61:e9:7a:9e:e3:
         a8:6b:9f:09:d5:e4:7c:3a:2a:ad:ac:80:85:6d:c8:98:b7:45:
         02:c6:f9:e7:e1:77:58:41:4a:3a:2b:cd:8c:ec:04:4b:aa:e3:
         7c:6f:6e:a4:79:7d:a5:13:16:e1:4f:66:c0:75:d1:bb:01:06:
         0c:fb:0b:46:7e:94:fd:70:8b:ec:32:ba:f6:c6:98:56:a4:44:
         34:69:f7:cb:7a:e1:eb:d6:46:fa:d4:05:55:3f:51:da:02:60:
         72:83:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:47:22 2024 by rpki-client on console-ams.rpki-client.org