Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          fFnK5ybFaGmE12iGLBJCd4OIJ7PwFp3htemydMtF1/U=
Subject key identifier:   B9:75:9B:77:B0:0F:F9:73:29:EF:BC:73:FB:D4:D0:E8:CF:0B:5C:34
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       018F4EA3C2D4C27C1E4891111BCE4DAB6B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 16:01:46 +0000
Manifest this update:     Mon 06 May 2024 16:01:46 +0000
Manifest next update:     Tue 07 May 2024 16:01:46 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: ORIGaN9HYDt5m3YUmBTkKlafHwC44mb14TA2+Nn/+AM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:a3:c2:d4:c2:7c:1e:48:91:11:1b:ce:4d:ab:6b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: May  6 16:01:46 2024 GMT
            Not After : May  7 16:01:46 2024 GMT
        Subject: CN=b9759b77b00ff97329efbc73fbd4d0e8cf0b5c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:29:0c:1a:ec:c1:07:61:8f:56:d4:51:49:
                    e0:ff:c6:37:79:b0:10:b5:43:51:62:b6:7e:df:9d:
                    36:cc:d2:be:01:ea:ca:a5:06:7b:d2:d7:21:37:d9:
                    8b:a8:6d:e3:cf:aa:7d:86:7b:67:1e:75:dc:6a:47:
                    43:21:68:38:7e:95:7f:cb:dd:84:df:0c:05:84:54:
                    70:40:80:6b:3d:90:0e:8c:28:0f:ac:06:8c:d7:bb:
                    aa:19:bb:5a:dd:3f:1a:af:91:80:71:d7:c9:df:fb:
                    c3:34:ee:a3:82:bc:ac:d0:60:4b:25:8b:2f:48:81:
                    db:8b:da:78:d2:0e:8a:a7:70:51:c6:db:cd:0f:02:
                    75:43:b3:15:a5:b9:69:d2:af:83:3c:7a:71:1a:01:
                    09:7b:f2:be:ad:4f:f5:f0:75:ce:6b:4d:de:13:c9:
                    3d:ec:b6:4e:ce:fb:2c:54:e7:d2:19:54:1d:22:29:
                    20:d6:75:af:67:4b:a7:8a:5b:17:3b:d9:b0:3e:0f:
                    95:e1:a9:e4:b3:7e:23:d0:76:75:a4:d5:b4:fa:5d:
                    fd:7a:c9:f1:77:dd:e3:d9:df:5a:01:57:27:93:db:
                    dc:ee:27:ef:9d:96:55:5b:14:39:bb:16:2a:f7:45:
                    ec:56:73:61:f3:66:a9:32:49:e9:aa:c7:04:f6:0a:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:75:9B:77:B0:0F:F9:73:29:EF:BC:73:FB:D4:D0:E8:CF:0B:5C:34
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:5d:b0:0b:02:0b:11:b0:a8:d5:cc:89:68:78:5c:d6:e9:
         4d:4c:cd:fc:4a:e5:e4:87:65:bc:a7:c4:69:a4:01:43:88:22:
         5a:f0:fb:e3:80:77:da:eb:ca:04:06:f1:2e:d0:30:49:fb:09:
         cb:94:da:9c:8d:10:41:89:3b:7f:44:8a:48:bf:5e:2c:2c:d0:
         6a:19:a8:34:ab:c6:cb:26:9d:06:c8:34:f6:05:ef:c5:ef:9e:
         8c:11:38:b7:74:a6:b1:70:ef:1f:80:91:87:6f:55:b9:86:e4:
         91:72:af:79:a6:ad:16:69:36:7d:15:4c:5d:05:2e:0d:8d:1e:
         13:d7:96:5f:1a:04:1a:65:43:b0:bf:fe:76:5d:f2:b8:83:1c:
         36:4f:3c:db:a2:e8:44:10:c2:28:2a:3e:c4:e3:6f:47:71:cd:
         18:98:92:ef:83:63:eb:53:90:d4:94:5b:91:eb:63:bc:81:25:
         a0:f2:af:b8:e5:fa:23:ef:3d:e4:e7:ce:49:57:61:05:9c:f3:
         89:f5:7f:9a:3b:06:61:16:48:69:a8:71:7d:3d:2e:21:26:ac:
         0c:b4:13:5c:4a:50:56:67:53:5d:f4:40:7c:bf:be:0e:98:ac:
         18:53:53:03:a3:e3:c3:17:5f:28:70:a4:6e:3b:97:27:b3:9d:
         58:97:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:20:29 2024 by rpki-client on console-fra.rpki-client.org