Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          sgHe1iVEhGlbBdWntNSU5Wjl9mCLQI5ISKh2GNDE0BE=
Subject key identifier:   5D:F3:72:2D:08:C9:1F:80:89:FC:42:2A:51:32:64:D6:A8:24:CA:9B
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       018F8824074678D0DE0AD26448F0DBCE0B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          010C
Signing time:             Fri 17 May 2024 20:00:13 +0000
Manifest this update:     Fri 17 May 2024 20:00:13 +0000
Manifest next update:     Sat 18 May 2024 20:00:13 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: cEpWWKZzGg0aWqsOf9KWORI6k0D7s2f6n1X0DyIRlGM=)
                          2: VxVb4J3bu8oOJ0VLy9-RvTvgJQQ.roa (hash: HUYrdKlU8D10XrUOAwv+xK3k9UaCvV6zD11NLNX8puQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:07:46:78:d0:de:0a:d2:64:48:f0:db:ce:0b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: May 17 20:00:13 2024 GMT
            Not After : May 18 20:00:13 2024 GMT
        Subject: CN=5df3722d08c91f8089fc422a513264d6a824ca9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:a0:22:7f:c7:cb:43:80:9b:c1:22:c9:28:
                    40:82:fd:c6:6c:13:e6:19:64:b6:8b:6a:7c:8a:06:
                    1a:f8:e3:88:da:a1:87:6b:33:97:59:23:71:38:1c:
                    d0:c9:83:95:c0:60:6b:65:26:1d:1e:7b:04:53:ab:
                    c2:a9:4d:16:14:00:3f:54:38:55:4d:88:da:f3:87:
                    c8:39:82:75:48:41:79:21:44:b9:ba:d2:8b:6d:57:
                    5a:86:59:e2:2a:51:75:36:3a:1b:cb:97:04:42:29:
                    4b:84:9f:ad:0f:0a:5b:b7:61:14:53:83:e3:ca:f4:
                    d1:45:cf:7c:29:3a:11:24:d3:cf:8c:33:6f:2e:26:
                    12:7b:dd:e2:05:f8:13:3c:2a:f3:cc:39:69:d5:32:
                    01:a9:c4:d9:13:64:36:9b:1c:dd:f6:9e:fc:1b:33:
                    39:9a:e8:cf:fe:38:6b:a7:86:01:9f:76:fe:4e:ae:
                    f0:ed:9f:72:42:f5:8f:4b:ad:52:0a:43:f2:5f:a3:
                    3b:7d:ed:35:c4:1f:6a:e7:ca:01:5e:9d:6e:f3:a1:
                    e7:eb:2c:05:59:ef:f5:8c:50:2f:16:db:b0:4c:6f:
                    39:c3:9f:d3:83:f6:5d:cc:2b:5d:97:54:c0:7b:07:
                    5a:40:d1:d3:8d:74:75:01:5e:bc:12:ce:d6:02:09:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:72:2D:08:C9:1F:80:89:FC:42:2A:51:32:64:D6:A8:24:CA:9B
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:39:4b:e6:7b:da:77:42:bf:34:8e:58:97:d1:16:6d:0c:
         92:e0:e9:bc:82:59:fc:cf:59:a7:08:bb:78:9a:66:c5:96:9d:
         83:93:7b:d7:4d:4c:d9:bb:3d:fe:77:c4:a2:13:b2:9f:af:6f:
         f0:6d:42:47:a7:db:1a:cc:34:36:89:1f:0f:b9:00:36:70:00:
         fd:46:4a:52:9c:74:8b:a5:df:26:e5:bd:f0:b0:40:85:e4:4f:
         a5:54:b1:ee:b9:4b:6c:f8:91:b3:d8:87:3b:c7:7b:52:3e:2f:
         f9:db:ed:bd:32:b3:9b:dc:87:1e:e2:67:fb:81:ac:b3:7a:b1:
         49:57:12:05:4e:f3:bc:43:e9:96:5d:e0:82:f0:1c:d4:47:43:
         fa:6d:64:95:7f:e0:57:23:a5:60:66:5e:cf:65:00:50:86:33:
         89:87:fa:8e:44:cc:0c:54:86:2a:8d:d4:27:01:30:6b:cb:26:
         7a:34:62:31:aa:fd:22:f2:59:2c:4a:a4:5f:9a:d7:55:a2:54:
         2f:96:ec:4d:42:5d:12:5e:dd:8b:c6:bc:b2:2a:6d:5a:97:d9:
         5e:4d:b0:1e:72:4f:38:16:b4:51:ab:1c:49:83:46:14:dc:99:
         9a:29:43:75:be:16:5c:d1:00:2f:13:ab:11:40:31:7b:d5:aa:
         60:5d:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:09:55 2024 by rpki-client on console-ams.rpki-client.org