Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          BrVTcl4M/GUR9S74z281AESC67KogINV60jGWWGgJvA=
Subject key identifier:   14:28:68:80:6A:E5:3D:8D:3D:E0:31:6D:D3:1D:BB:40:60:4A:5F:8A
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       018F874A7999DDB401F73B0A6956BB14C374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          6A
Signing time:             Fri 17 May 2024 16:02:35 +0000
Manifest this update:     Fri 17 May 2024 16:02:35 +0000
Manifest next update:     Sat 18 May 2024 16:02:35 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: lyqPOec9XixHdOySoLcAqV4o77HwRx2kgyN3x4fn6tg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:79:99:dd:b4:01:f7:3b:0a:69:56:bb:14:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: May 17 16:02:35 2024 GMT
            Not After : May 18 16:02:35 2024 GMT
        Subject: CN=142868806ae53d8d3de0316dd31dbb40604a5f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:d0:b7:b0:17:6d:26:9b:18:97:8b:38:13:
                    ae:50:d7:99:c7:73:20:19:cf:85:a7:84:ec:56:da:
                    e8:dd:8c:0f:62:17:f3:0a:e3:b6:8e:b4:0f:ed:ff:
                    6d:42:6d:42:a0:1d:5d:99:87:a0:e7:bd:20:d0:ce:
                    15:c8:a2:35:c1:be:c8:00:b4:e4:05:83:0a:ce:dc:
                    74:31:b2:d5:bf:fa:0e:3f:58:42:e0:f8:3e:a5:f9:
                    ce:36:12:94:40:20:d3:cc:e2:2f:b8:31:0d:b6:fe:
                    a8:c5:e1:5d:c1:73:85:b2:c4:36:91:33:2a:75:30:
                    f7:73:bf:cd:ed:c8:3e:2f:f5:c8:34:b4:6e:62:db:
                    f6:41:8f:37:4f:64:74:eb:cf:b9:1c:ef:04:10:62:
                    23:84:e7:1b:4b:13:ad:04:e6:4e:9e:d8:45:b8:d8:
                    b3:dc:17:48:3d:cb:2a:b0:6b:53:0f:c3:ba:2e:72:
                    e3:c7:3c:16:2d:c2:40:8f:df:69:62:b4:93:a7:81:
                    b4:48:9e:dd:f2:42:e0:a9:da:44:77:83:22:3d:fa:
                    6f:28:5a:13:1d:14:83:5e:2a:7b:00:e4:82:04:e1:
                    79:dd:79:bf:ac:a5:33:ae:0b:25:50:73:49:8d:25:
                    a7:fd:22:99:fc:11:8f:6d:c9:83:76:67:00:28:45:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:68:80:6A:E5:3D:8D:3D:E0:31:6D:D3:1D:BB:40:60:4A:5F:8A
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:21:8c:f5:fa:77:64:d6:f7:ac:2b:87:8b:25:d8:e1:59:
         22:4f:bb:dc:30:b2:1d:65:e6:c9:3f:0f:e5:55:ca:5a:0f:4b:
         bc:1a:a8:45:3f:ed:32:e0:3a:bb:c1:96:fe:4d:c9:d3:71:da:
         31:5d:14:53:67:91:0f:c6:b0:f2:bf:43:6f:16:63:ea:cb:09:
         51:b3:6a:1d:c2:d1:21:9b:39:9a:bf:ec:aa:84:9c:3b:d0:b0:
         18:f1:14:d3:67:5e:9c:4c:6e:dc:e2:cd:e8:e1:ec:da:3f:e2:
         ef:7a:90:1d:d6:af:65:d6:0c:01:44:3c:09:f2:87:18:e4:f5:
         ce:3b:8e:d6:20:77:46:2f:05:13:2c:fb:60:65:e9:d1:59:b3:
         a1:11:72:fb:e1:12:fb:45:0b:ff:b7:00:91:cc:8e:1c:02:cf:
         65:db:51:80:53:54:71:6c:00:3f:b3:fc:4f:fb:b8:82:9c:0b:
         e1:14:2e:1a:02:0f:fb:f7:1d:ec:59:61:0e:92:b2:2e:e5:11:
         cb:18:b6:e6:26:a0:3f:d1:85:df:f0:f5:7a:b0:b0:5b:9b:d8:
         21:09:e5:f1:4d:a9:58:3a:bc:86:29:81:91:81:91:9c:2d:ea:
         fe:8b:bc:0f:00:dd:7a:14:01:63:8a:d8:4a:a5:d0:4d:50:a4:
         ad:08:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:57 2024 by rpki-client on console-ams.rpki-client.org