Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          OC7tm+uWxTN/Q/rPMwZeQMVtpjwDQkJdSACyIDeleLQ=
Subject key identifier:   77:EE:71:DE:5E:45:22:97:AA:CB:FA:FA:C4:21:DE:EF:4D:41:84:CD
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       018F5137DC9B3DC17BD591B187E3866ACDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 04:02:46 +0000
Manifest this update:     Tue 07 May 2024 04:02:46 +0000
Manifest next update:     Wed 08 May 2024 04:02:46 +0000
Files and hashes:         1: 3NHWvHja0NEuyqQYXFwPMGs1aOg.roa (hash: kCd8gS39mdf4a7oV3keW+bGE/K8enxTOD10PXLimxKs=)
                          2: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: Sph4MEpPXnUnowxskTzuuUKXBErUcFYYoUarwZUBELQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:dc:9b:3d:c1:7b:d5:91:b1:87:e3:86:6a:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: May  7 04:02:46 2024 GMT
            Not After : May  8 04:02:46 2024 GMT
        Subject: CN=77ee71de5e452297aacbfafac421deef4d4184cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:2f:4f:ad:c4:62:e8:f4:31:d6:99:00:1f:
                    22:93:d7:c1:a8:aa:97:0a:a3:e7:65:e5:f0:a4:f0:
                    e8:4b:da:25:92:37:f3:b0:b0:c7:fd:a9:c4:83:1b:
                    e9:15:3a:f7:5a:b1:c3:9d:f4:f9:46:76:4e:27:f5:
                    61:88:e9:8d:a7:7f:ec:45:1a:11:89:5a:f7:93:53:
                    ff:99:58:84:8c:0c:9c:87:85:9b:d8:6c:83:81:d4:
                    6b:ef:7b:03:44:cf:13:c9:13:c4:c3:32:f9:06:ba:
                    0e:20:1f:f9:43:06:4a:9a:5d:b9:80:d3:82:41:00:
                    ac:00:f6:99:13:12:58:bb:2e:87:d3:72:47:4d:ce:
                    7d:7c:ae:0a:13:fb:0d:6b:d6:5f:9a:89:58:37:6d:
                    e7:21:3c:89:12:1b:a1:66:14:5a:4e:0c:a4:c2:7b:
                    07:76:25:8d:23:3d:d7:81:15:8d:86:4d:ca:fc:9e:
                    56:ce:49:86:79:d6:53:34:1f:af:3b:77:0c:ff:07:
                    d1:75:f0:9c:df:dd:5b:7e:0b:6e:05:95:5b:0d:88:
                    7c:08:82:74:c9:2a:1a:60:aa:3f:da:8a:58:9e:99:
                    d1:80:91:6e:a4:03:3f:69:f2:6f:20:ee:49:e0:c0:
                    9f:4d:6f:b5:fe:f5:b2:2f:f0:ed:d1:98:2a:7e:8e:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:71:DE:5E:45:22:97:AA:CB:FA:FA:C4:21:DE:EF:4D:41:84:CD
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:a8:89:1c:64:48:9a:72:d6:02:cf:28:0f:1b:07:8d:38:
         e7:30:d5:a7:db:4a:74:b4:e2:7a:9b:19:13:f4:9d:23:a1:2e:
         93:7b:ee:43:c6:ff:0f:1d:a0:7a:c8:0e:cd:0a:a5:81:a8:97:
         4b:78:40:bd:8e:3f:61:2c:80:1b:4c:1e:0f:6f:2c:2b:30:a1:
         41:33:da:19:a6:d1:83:56:55:d1:c3:2a:47:75:f0:9f:6d:2e:
         23:37:29:95:1f:53:fe:cd:d5:b4:00:dd:24:e6:1a:3c:5c:d9:
         48:ea:17:f3:e6:6d:6b:0a:a7:ea:8f:b1:4a:f9:6a:3a:c6:d6:
         9f:2b:76:80:0b:d1:5c:5b:34:44:f2:4e:41:a2:a7:d4:94:60:
         24:99:69:dd:61:e8:af:34:3f:a2:b8:db:6f:cf:39:75:07:16:
         e6:5f:5f:f4:d7:d1:75:17:56:22:88:af:9b:f1:69:ef:b4:50:
         19:7b:66:92:ce:de:74:72:70:58:b9:e8:7e:65:a1:5c:b4:3e:
         ce:47:b9:8e:03:7e:9f:e1:14:6d:21:b7:b8:42:e4:48:80:e8:
         75:44:12:d2:0d:83:75:e7:a2:31:bb:fd:f5:f4:f0:6b:37:81:
         5b:31:a4:0b:72:79:84:aa:15:76:e4:aa:c2:5b:a3:3d:41:f7:
         eb:3d:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:44:12 2024 by rpki-client on console-ams.rpki-client.org