Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File:                     7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier:          qfIneQnaCHBSG3/PkHDtKWf7YTzMlR2083TXZon3LMM=
Subject key identifier:   6E:6C:DD:91:A5:14:E1:9A:10:28:47:1C:24:B6:F0:3A:7C:55:67:C4
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer:       /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial:       018F430CBCC71D1F88233240DC6BDAC6AA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number:          10B2
Signing time:             Sat 04 May 2024 10:00:59 +0000
Manifest this update:     Sat 04 May 2024 10:00:59 +0000
Manifest next update:     Sun 05 May 2024 10:00:59 +0000
Files and hashes:         1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: oAQZptLDpMLRUle+zIuj5tzcDGuB3cv6ZZg7Df+lNr4=)
                          2: _gZvgrcbhT7pqUSAMvWDfM4TZkw.roa (hash: llqkjTfU8W83oQVdNP1ncT8aKzB/HDokFpSJJVJxjyg=)
                          3: vnXl8p70obgUhszNUIRYx77r7sw.roa (hash: QvF19VGz+Xt4CdvfnkaXdeSfDrtJ/SJXgjmQS/glUyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0c:bc:c7:1d:1f:88:23:32:40:dc:6b:da:c6:aa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
        Validity
            Not Before: May  4 10:00:59 2024 GMT
            Not After : May  5 10:00:59 2024 GMT
        Subject: CN=6e6cdd91a514e19a1028471c24b6f03a7c5567c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:54:f0:10:83:4c:d7:07:38:f1:ad:11:76:
                    88:33:57:3a:c4:b4:02:1f:de:a5:a4:ea:a6:8e:bf:
                    9c:ec:75:f1:af:ca:42:76:2e:b3:d4:f2:08:7b:bc:
                    a1:50:77:a0:3b:b3:40:a1:41:ea:c0:7f:8a:31:2f:
                    cc:fc:d9:82:dc:81:9a:0c:30:cd:0e:d6:9b:e3:29:
                    07:a9:6f:25:d0:87:59:63:0d:f3:6b:94:94:72:4c:
                    e9:44:60:55:a3:f5:1f:41:dd:99:80:4a:e9:2a:34:
                    bd:2d:49:bb:cb:1b:3a:40:68:1e:07:16:51:bb:c3:
                    d0:58:3e:c0:14:2a:5a:df:5d:27:62:cb:a6:25:c2:
                    80:20:85:27:ff:30:54:5d:98:9d:97:15:e2:2a:ad:
                    7f:35:be:b0:c1:6b:85:14:9d:4a:a0:5d:6d:1b:ce:
                    1e:47:4a:bd:81:df:4a:f0:5a:10:d9:ea:a4:4c:1d:
                    d1:d0:85:73:39:fe:f6:b0:a8:c1:e5:1d:18:87:48:
                    a8:93:29:11:fd:ac:f2:be:2b:ab:cf:b8:b1:a6:4b:
                    69:9a:5b:ca:fb:94:31:04:e7:20:7c:26:e2:c8:61:
                    1b:3b:1d:f2:49:30:6e:ad:16:04:cd:6f:51:30:95:
                    87:90:6a:c4:54:0d:4a:ad:c5:bb:dd:85:5a:6e:57:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:DD:91:A5:14:E1:9A:10:28:47:1C:24:B6:F0:3A:7C:55:67:C4
            X509v3 Authority Key Identifier:
                keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:9d:52:17:c3:d1:f5:4c:da:77:8c:44:dc:ef:95:76:30:
         8c:c9:1c:14:73:ce:ac:9a:b4:31:a2:ac:26:68:d1:11:c7:c7:
         a5:b5:26:ae:fe:84:90:10:09:e4:71:a6:3a:82:51:53:8b:e1:
         42:5a:39:00:c1:f6:ee:8e:21:5c:e3:3d:e7:81:4e:bf:f0:ba:
         e6:2d:3a:4c:80:aa:1e:0e:d5:6a:95:22:41:b2:38:9a:22:9a:
         60:6e:25:24:b0:fd:fc:49:6f:19:9d:5c:84:f2:4d:c8:07:d9:
         ba:d3:17:d7:ad:41:e2:80:b7:42:a6:e4:53:62:b4:84:a8:8d:
         f2:f5:f1:ca:50:61:86:0b:4e:32:37:8b:bb:67:8f:20:6d:ea:
         c4:88:c0:3b:f0:9f:93:4f:ac:05:6e:17:3c:26:dc:a4:8c:fd:
         74:1f:da:e7:51:01:aa:21:bc:92:d6:32:cf:80:ca:48:5e:59:
         83:4b:2d:b7:7a:d7:52:d0:3c:fa:89:10:f6:8e:60:b3:75:63:
         a5:fd:f4:fd:ee:8a:c0:b3:c1:0d:88:21:cd:f9:a1:f0:17:31:
         9b:28:c6:5c:24:a7:35:c1:b6:61:4e:77:02:9e:21:8f:82:e2:
         30:4b:e5:9b:35:6f:32:c9:a9:ed:c4:01:42:f5:bb:cb:ca:79:
         0d:64:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:31:33 2024 by rpki-client on console-fra.rpki-client.org