Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          dLOfmV+x7uoYALkphvG9hZl0hp0gbn6s+NGXavU0wXs=
Subject key identifier:   C4:B2:0F:C8:57:E1:2C:9D:3F:BD:53:42:47:65:96:E4:B8:C4:66:21
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       018F5701C624434B5C0311228234AEF8927D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          10F1
Signing time:             Wed 08 May 2024 07:01:25 +0000
Manifest this update:     Wed 08 May 2024 07:01:25 +0000
Manifest next update:     Thu 09 May 2024 07:01:25 +0000
Files and hashes:         1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: nPRI7uc4kftO+/+fTvcl21T/zrhcuIxg4wdVPL6aPSk=)
                          2: PTYEV-nQj_TirheSpkI-SkU7jnI.roa (hash: Pi2be4jAhKkdB3PDBv/+QJxZlTIJwkoaB2qFJbZ2dzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:01:c6:24:43:4b:5c:03:11:22:82:34:ae:f8:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: May  8 07:01:25 2024 GMT
            Not After : May  9 07:01:25 2024 GMT
        Subject: CN=c4b20fc857e12c9d3fbd5342476596e4b8c46621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:fa:71:f4:cc:fe:f3:8f:80:6a:2f:a5:ee:
                    2c:23:0c:47:be:c3:bb:cc:97:41:c5:b4:34:9e:8b:
                    05:be:44:e4:15:4e:99:32:dd:90:4b:dc:34:c8:1c:
                    a1:8c:17:cb:e8:91:28:22:f8:42:c6:03:c8:2e:3c:
                    02:16:da:1c:31:3d:6d:19:cf:2e:9e:e4:b6:e5:8f:
                    fb:2a:ed:91:3c:1d:77:66:f1:5d:00:75:ca:89:0b:
                    ac:83:3b:cd:2c:72:ef:3b:03:22:e0:c3:f6:73:94:
                    d0:1f:17:99:59:5c:b8:69:ab:03:0d:5e:55:b5:a5:
                    d7:b4:26:d7:6c:e8:6d:4b:ee:9b:77:a5:f1:dc:84:
                    87:b2:ee:93:c0:c5:14:c0:ea:43:c5:a8:2f:10:29:
                    7d:33:08:bb:87:ab:b8:87:bb:95:c2:c2:b9:7b:cf:
                    ca:e1:1e:1e:6e:2a:20:f8:6a:64:ef:d6:83:20:a5:
                    9b:61:19:d7:0e:bc:34:5c:a2:67:85:89:28:30:34:
                    2d:12:26:a5:32:6d:f5:fd:a2:44:60:47:32:6d:ce:
                    4a:e1:39:27:32:92:fd:18:ee:f5:f4:3b:3c:30:dc:
                    ee:b8:14:74:26:53:42:72:2d:8f:4e:6e:d8:d2:a3:
                    53:1d:aa:4d:db:8d:d0:82:0e:31:fb:1c:37:c7:a4:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:0F:C8:57:E1:2C:9D:3F:BD:53:42:47:65:96:E4:B8:C4:66:21
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:43:bd:0d:1d:06:bd:d9:ee:ee:6a:53:24:ce:08:19:8d:4b:
         53:f8:0f:de:71:63:56:6f:e9:d2:0d:57:76:61:8d:da:63:cf:
         4a:3b:ef:87:b5:a0:30:8d:56:ba:33:f6:5d:6c:fe:d1:ec:7a:
         71:50:a2:0c:d0:3c:a7:a3:f3:9f:5c:87:33:7f:7e:76:46:b8:
         6b:33:67:d7:04:97:a9:86:08:75:49:fb:db:f0:fb:11:b6:7b:
         e7:cb:7b:1d:21:d9:6d:36:04:6a:cd:33:00:9f:48:3b:4e:4f:
         5b:50:5b:79:8b:e6:95:e1:1b:a1:0d:44:9e:e6:78:ff:5e:e5:
         1b:6c:41:60:b4:fc:6c:2b:db:6d:b2:a1:b1:14:39:04:0b:6a:
         b9:65:03:73:4a:00:05:49:51:60:b0:72:f4:ea:db:62:e9:84:
         ef:67:01:c9:7a:55:4a:49:4b:5d:48:11:b8:4c:20:ad:57:19:
         20:72:4c:9f:d1:63:19:c6:2a:11:ee:70:21:c8:19:77:93:22:
         7b:13:3f:fb:08:eb:ad:a3:96:a7:2c:34:0d:f1:9c:90:d0:9c:
         cc:54:e6:bd:e6:d6:5d:e8:70:c2:d1:a9:2d:f4:f6:1a:a1:8b:
         c1:34:5d:26:98:a5:b3:29:c4:0b:aa:2f:2e:8d:0f:27:4a:aa:
         68:67:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:54:27 2024 by rpki-client on console-fra.rpki-client.org