Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          lhTnEiNs0V+HWGYE7d4nLOgRTXi/b6C89mfINzaykaM=
Subject key identifier:   A7:5F:38:75:DA:38:8E:1A:DE:6E:E4:62:B6:44:D9:8B:ED:9A:24:A3
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       018FD8667FC7F999FF5757CE555938C9399B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0685
Signing time:             Sun 02 Jun 2024 10:02:27 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:27 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:27 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: XD9hAOkU577XJjDXP1euyQaLCiAfdX+CAkC4/fe1j9s=)
                          2: kwnFvChmyTSmLl2lQ-ry4exqTcQ.roa (hash: 9yd5t6OlZJVeNAzKIdELunWUrOsC17gV1LMcptq9FNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:7f:c7:f9:99:ff:57:57:ce:55:59:38:c9:39:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: Jun  2 10:02:27 2024 GMT
            Not After : Jun  3 10:02:27 2024 GMT
        Subject: CN=a75f3875da388e1ade6ee462b644d98bed9a24a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:1a:3c:cb:ae:78:37:5a:9f:7e:97:2b:c6:
                    a8:a3:94:53:a2:69:d0:d0:34:06:c4:89:1d:3a:53:
                    87:91:80:56:92:7b:d2:f1:ee:ef:02:cf:f6:b4:fb:
                    8f:be:65:57:64:1a:c7:97:8b:a3:e7:89:3f:6f:a6:
                    c3:b8:2e:75:00:a9:41:69:3d:1a:ff:fc:21:dc:1e:
                    bf:16:7d:dd:e1:57:96:06:fa:bc:9c:b2:32:3b:7b:
                    4d:65:4f:9a:82:49:91:14:d2:37:69:7e:ad:95:fa:
                    a3:5f:c5:ce:c0:64:d6:bf:8c:b0:7a:dc:6b:9b:e5:
                    e7:5c:34:d2:86:3a:30:78:84:d6:ec:54:71:e9:45:
                    08:56:a9:5f:ce:04:09:7b:02:7c:71:a1:db:7b:5f:
                    71:64:4b:98:58:a2:30:b9:eb:26:67:aa:c1:13:cd:
                    ed:f5:26:3b:26:48:f8:2b:e9:0f:38:87:b3:20:e9:
                    fb:6e:93:a3:98:d3:b5:b5:d9:4e:7b:c2:bf:f0:6b:
                    ef:5e:dd:8e:12:35:8f:b1:6a:69:0b:bc:3a:be:39:
                    79:17:79:b3:3c:ff:77:57:c1:47:db:b6:53:e7:24:
                    4d:4c:58:2a:15:09:07:78:f3:78:31:76:42:5d:fb:
                    1e:00:f3:fb:50:f8:6b:0f:3b:da:4f:84:34:da:88:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:38:75:DA:38:8E:1A:DE:6E:E4:62:B6:44:D9:8B:ED:9A:24:A3
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:01:3b:c3:1d:9f:c6:05:9b:31:e9:71:e9:75:0a:c4:22:d9:
         56:24:06:18:04:59:bf:bc:05:e0:67:84:be:00:03:7b:fd:81:
         6c:96:9b:a7:14:83:71:5a:f5:74:c5:b3:fc:59:72:84:81:0a:
         2e:94:b0:8c:36:1e:98:a9:cb:1d:fd:08:ef:b7:0e:5d:e0:83:
         84:cd:f2:dc:8b:f3:f6:64:d6:42:34:48:fc:d5:fe:68:6c:ba:
         67:dd:45:7e:76:cf:62:3d:ee:51:74:de:a0:97:74:99:15:c8:
         26:f9:82:8f:1a:eb:e9:b5:c1:cf:f2:26:11:8c:76:0f:e1:df:
         48:fb:fc:14:44:6e:32:f4:13:93:9e:35:68:7a:5c:93:66:af:
         53:3e:3b:2d:5e:fa:2a:c8:ab:00:89:5d:82:09:87:92:a7:9b:
         64:50:36:90:b3:1f:ba:c7:8e:da:7e:84:01:90:13:ea:f2:f5:
         05:44:05:d2:70:ec:2b:1e:f5:10:0b:1c:3e:e1:f5:a7:d9:97:
         74:f4:6e:66:3a:fb:06:64:7a:57:58:9a:48:a5:07:7a:28:79:
         cd:c6:43:71:0a:cf:06:46:13:18:3a:fb:76:b1:3e:18:c1:1f:
         ba:ee:4c:e1:d6:3d:e6:fd:a1:72:40:2e:1c:43:f5:40:67:cb:
         ce:69:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:07:46 2024 by rpki-client on console-fra.rpki-client.org