Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File:                     xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier:          baDG7vFvNBcA+LJke7/AD02Hl+tAazIlyRk236uCYYw=
Subject key identifier:   6B:88:49:21:4E:E6:32:B4:07:FB:65:53:43:9C:07:E6:99:EA:C4:5B
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer:       /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial:       018F8748AD9BBF4B26B31940D5122DC7DA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:38 +0000
Manifest this update:     Fri 17 May 2024 16:00:38 +0000
Manifest next update:     Sat 18 May 2024 16:00:38 +0000
Files and hashes:         1: eD8u0RI4wW5cGGjc7bw5JmNxbgs.roa (hash: wbvuKXU7oikaaw1ONRwkWMsU6rPQCZREq2GLZP8zw04=)
                          2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: cBOGmC+t+FVqH6thn7WWiuYlETIu82ubRqwU6d8wM4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ad:9b:bf:4b:26:b3:19:40:d5:12:2d:c7:da:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
        Validity
            Not Before: May 17 16:00:38 2024 GMT
            Not After : May 18 16:00:38 2024 GMT
        Subject: CN=6b8849214ee632b407fb6553439c07e699eac45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:a9:71:4e:df:ac:f9:fd:88:4b:6d:d6:eb:
                    ae:cc:7d:6f:11:78:43:59:f9:a4:09:be:96:ee:d2:
                    a1:f1:8d:36:a6:bd:6f:4a:5c:da:92:b1:43:7d:0d:
                    80:67:1b:52:41:15:14:b4:12:13:2e:a3:1f:46:44:
                    57:4c:1a:d7:cf:5a:9d:7f:95:cd:71:49:6d:1e:d3:
                    38:ce:e6:7d:ee:1c:1e:27:fe:51:e4:f4:74:09:27:
                    21:a8:af:8b:14:bc:e3:a6:ef:07:e1:a3:3b:99:6d:
                    86:3c:3f:d5:5c:14:71:e8:38:45:d3:b2:b1:94:4a:
                    f9:83:e7:48:82:2f:2c:47:00:d0:75:20:9c:da:cd:
                    37:9b:41:14:42:fb:70:0c:ea:fa:cb:e5:a5:84:ba:
                    ff:17:db:1d:1d:50:af:08:ad:c8:9f:56:93:3c:02:
                    c5:9c:22:21:30:ad:82:f4:c4:b5:4d:0b:fd:47:04:
                    41:e5:a2:ea:17:f2:ec:15:f3:4c:0b:80:cb:68:42:
                    e3:46:5c:41:fd:9f:10:e6:29:3b:3f:ac:45:23:c3:
                    ca:6f:37:45:eb:0c:71:8d:d1:59:51:c6:10:81:ce:
                    1d:ab:7e:1f:0d:3a:1a:cd:c1:9d:79:93:9c:42:8c:
                    9c:e4:43:7a:ce:31:11:0c:4d:e9:bf:d7:b3:92:a1:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:49:21:4E:E6:32:B4:07:FB:65:53:43:9C:07:E6:99:EA:C4:5B
            X509v3 Authority Key Identifier:
                keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9a:1e:cc:6c:72:7f:a0:ac:01:e5:ca:20:ee:46:28:8b:f8:
         ab:a2:9b:92:92:d8:42:5c:2c:37:97:af:d7:db:c4:7f:5b:d8:
         f2:64:c0:46:09:1a:6e:ea:fd:50:bd:21:de:ae:8b:89:20:ef:
         55:50:20:86:bf:72:45:f7:bc:dc:3b:9f:a2:34:d4:9a:cf:96:
         aa:2d:e9:26:e4:a6:21:f3:69:6c:e5:18:61:0e:82:11:08:41:
         21:48:92:7f:93:d8:6f:2e:84:4a:24:6a:73:84:c1:87:7f:b0:
         a4:90:a8:b4:6d:2b:cf:a5:a9:c9:58:c0:6e:64:7d:08:9a:f8:
         68:24:35:15:bc:77:ba:fd:e5:3d:2a:5d:6b:1f:86:83:65:fd:
         86:46:45:47:ce:a4:78:29:87:27:8c:01:61:de:1d:bb:fb:fd:
         67:1e:8d:3d:b5:84:d6:72:a6:85:e8:88:ff:b5:32:1f:43:9f:
         40:29:81:ac:e6:aa:1b:fd:0a:ab:3a:25:36:7d:e9:e4:3d:07:
         e5:7b:55:2a:25:64:05:f7:e1:7d:cb:d4:4d:ee:06:5b:3f:13:
         39:f6:ae:53:62:f2:4e:1b:c9:82:de:43:b6:de:6d:46:22:0b:
         17:2c:d5:88:65:b0:85:9a:34:47:b3:36:f4:84:76:2e:c3:d7:
         a9:ad:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:55 2024 by rpki-client on console-fra.rpki-client.org