Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          RLs8gIvh0xpR6Lvkc7WtyVUX13B2RHDeUzZYgWXqEl0=
Subject key identifier:   FB:30:29:73:82:86:46:57:86:AC:D2:37:6A:95:36:C4:C1:CE:E1:77
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       018FC95F7DD902BF0755855DAF2B8F0E7C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          1198
Signing time:             Thu 30 May 2024 12:00:29 +0000
Manifest this update:     Thu 30 May 2024 12:00:29 +0000
Manifest next update:     Fri 31 May 2024 12:00:29 +0000
Files and hashes:         1: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: ol+qqbbuuyD1rKlO5kDDraAB98kykqUBlrjT8JxGRmY=)
                          2: e96Ds7XMC_eWB9UfYTA_eny_fDA.roa (hash: 0s91dNOsw6HG27FySWIyXu1++ulPV7M7QzAStUVIFbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 May 2024 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:5f:7d:d9:02:bf:07:55:85:5d:af:2b:8f:0e:7c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: May 30 12:00:29 2024 GMT
            Not After : May 31 12:00:29 2024 GMT
        Subject: CN=fb3029738286465786acd2376a9536c4c1cee177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:42:a7:39:22:ea:e8:d3:c9:db:38:f0:29:
                    10:bb:04:36:c3:25:9e:50:73:74:c4:e3:fd:e3:37:
                    c6:1a:1e:58:68:23:2a:27:b9:e8:76:4c:90:4f:23:
                    dc:5b:a0:4d:e0:a5:57:79:0a:92:50:d5:e5:1b:eb:
                    1e:2a:bb:26:54:3d:aa:1d:a7:14:04:23:fa:9a:c2:
                    92:4c:f1:3c:30:ee:d4:8b:88:1a:f7:52:d9:49:1f:
                    ff:90:9a:f9:ab:26:35:bd:5e:91:6b:94:eb:f9:d0:
                    f5:51:57:6e:83:1a:84:92:f4:26:d7:ec:9a:78:e8:
                    37:29:e4:c5:80:e8:62:70:51:95:3b:05:01:63:fc:
                    f5:ce:7b:4b:fa:36:ba:5c:ad:c6:a2:79:71:15:aa:
                    32:46:a1:04:a6:92:96:9d:dc:c1:03:4d:ca:a4:13:
                    e2:cc:92:66:73:19:36:98:9d:29:a8:16:e5:8c:61:
                    ec:f1:96:db:7f:88:ad:f3:59:bd:b3:c4:9c:9e:76:
                    84:47:18:18:f7:4c:b4:f6:37:54:5b:d0:d9:95:da:
                    bd:7a:69:55:98:76:b0:48:5d:c1:32:b4:ea:79:4d:
                    92:f3:f7:42:6d:d0:5b:67:ca:a4:3c:09:25:e3:0e:
                    e7:a9:9c:ec:c0:92:e7:14:39:c7:8a:7b:02:21:c4:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:30:29:73:82:86:46:57:86:AC:D2:37:6A:95:36:C4:C1:CE:E1:77
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:c3:fc:0f:7e:6e:3e:84:c9:68:c3:cd:82:49:a8:93:09:
         65:35:73:a0:96:fb:7e:52:12:ee:8f:8f:ec:84:cc:4a:e6:a5:
         aa:7f:9a:de:8a:43:76:42:8b:f4:64:66:1b:c1:b2:f1:14:9c:
         fa:54:67:99:f7:59:06:f6:f2:d2:76:9e:f3:37:e1:99:4b:c2:
         a4:cd:60:28:08:9a:86:90:91:e6:f4:0a:1b:f6:6b:24:a0:f6:
         8a:15:55:88:16:18:47:6b:7c:a8:66:a4:cd:1d:a1:83:d4:70:
         ab:13:85:fe:78:53:99:b9:bb:e1:8d:07:dd:6d:08:41:93:80:
         e7:20:02:2d:a0:5e:57:1c:3a:cd:b3:7f:ce:a6:00:a8:c8:c5:
         3a:8f:c4:81:9c:8f:6e:61:77:e8:9a:9b:4e:87:e7:87:0e:c5:
         6d:ec:eb:e2:c0:0d:82:c8:ed:88:b1:bc:12:49:b9:56:2c:41:
         4d:91:a6:47:99:69:1f:19:a3:85:b6:34:c9:47:42:ba:64:fd:
         f2:74:81:84:f6:b5:b3:4c:be:5c:ce:80:6a:a8:47:77:8f:43:
         77:d7:89:4d:cc:c4:8b:78:fe:68:ed:34:15:44:c3:cd:87:a4:
         fa:9d:73:35:df:78:fa:b4:6e:21:ca:03:73:9b:6b:0d:d1:5c:
         ea:c2:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 14:54:23 2024 by rpki-client on console-fra.rpki-client.org