Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          SzJ5glklWCpD91GA4f2OpW4mEojrl7BLlcU+i0yJBME=
Subject key identifier:   63:A6:88:13:8E:14:48:05:B4:C3:1F:F6:82:5B:FA:DE:97:07:AB:26
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       018F8DB8488E3EA96E0CA7444D4B24A584FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          117D
Signing time:             Sat 18 May 2024 22:00:15 +0000
Manifest this update:     Sat 18 May 2024 22:00:15 +0000
Manifest next update:     Sun 19 May 2024 22:00:15 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: A2oZI4gNHeDqmhkwAzhv6i2HsfLBHcYp7LXXE5pMvIo=)
                          2: Zzb_I_BoRFwFfUJmLb_uckTo8LQ.roa (hash: UkNe66awMWuyNnuDMbZCccZ+38j7XgxPHFdPh8lX/+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:48:8e:3e:a9:6e:0c:a7:44:4d:4b:24:a5:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: May 18 22:00:15 2024 GMT
            Not After : May 19 22:00:15 2024 GMT
        Subject: CN=63a688138e144805b4c31ff6825bfade9707ab26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:bf:87:8d:9e:1e:52:d7:6f:f9:98:90:c9:
                    79:36:da:6a:2b:0a:15:13:d1:fd:7a:78:ae:cc:1a:
                    56:36:5b:d1:c3:ab:5f:89:5c:e4:aa:4c:20:11:77:
                    82:1d:9a:1b:a6:b2:a6:94:2b:bb:20:1b:56:0f:2e:
                    73:47:e5:05:db:33:4c:66:66:63:dc:ac:d2:32:08:
                    df:57:f0:49:d6:32:f5:e5:63:ad:9d:18:5d:60:57:
                    5e:7a:8c:37:a0:26:30:64:4c:25:f4:9f:f4:96:c0:
                    51:24:08:0b:a4:1f:57:28:c7:11:0d:52:5f:14:25:
                    56:6c:1d:67:63:69:5b:58:5f:e7:93:62:db:dd:07:
                    c4:22:d2:4f:e6:3e:7c:fe:ee:9f:96:09:bf:58:dc:
                    e5:d4:4b:d1:55:91:6c:56:46:82:3d:c8:45:61:07:
                    0b:4f:6d:ad:0c:8f:76:21:7c:58:0d:b6:13:59:0f:
                    f9:8f:97:47:6d:36:a1:cc:30:3d:38:c2:9c:12:0b:
                    d2:99:d1:5b:aa:7c:f0:c0:53:85:ac:6e:a0:af:63:
                    a4:c6:9b:38:e5:dd:4d:a1:56:08:0a:10:77:18:0a:
                    31:03:e3:6d:80:e9:f6:0d:38:05:9f:f0:78:ce:20:
                    08:f7:e9:5b:10:78:07:0b:88:f1:bd:bc:89:50:b9:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:88:13:8E:14:48:05:B4:C3:1F:F6:82:5B:FA:DE:97:07:AB:26
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:46:3b:d3:cd:b4:a7:26:02:02:a6:97:5d:7d:a3:10:79:61:
         9e:b2:c0:a8:d7:f1:21:9d:74:8b:a4:6c:6c:68:65:2e:99:30:
         b3:a5:f9:2d:1e:7e:50:c9:33:cd:a4:a4:f3:af:a9:f1:9c:02:
         ac:21:3b:4d:6b:15:ff:63:57:e4:88:0a:55:10:3f:49:1d:df:
         1a:85:7f:8e:ab:17:c3:6a:b0:bd:c5:d0:be:96:fc:37:5d:b1:
         9e:f7:4b:12:20:71:ab:cc:ce:db:af:25:94:47:6b:21:ff:ad:
         0b:53:e2:da:76:f3:ec:a3:e9:82:67:1c:44:9d:cb:f1:3d:75:
         3b:34:cb:5e:cb:02:dc:3f:19:a0:9c:2e:8b:b1:af:11:cf:9b:
         0f:fe:8a:84:ce:9c:67:1f:e9:34:35:a5:1f:ed:0d:aa:d0:f3:
         0b:48:53:ec:14:ac:25:a1:c7:6a:50:f1:43:df:f6:ea:cc:7e:
         8c:0d:5f:ba:49:01:bd:58:02:3e:34:b7:f5:51:11:c0:48:29:
         87:c8:b2:33:fe:ad:7a:76:23:11:ac:6a:ba:78:d2:f8:87:9d:
         d5:3b:3f:85:90:75:2a:47:47:13:ea:35:8d:79:40:5f:c4:1b:
         db:f3:0c:0b:6c:78:7f:b9:63:25:9e:f5:b9:0c:22:c0:3d:e5:
         66:85:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:47:09 2024 by rpki-client on console-ams.rpki-client.org