Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          WqOMi+6ETO9za2D1wca4Uze1oJreP66oR+9jhnSJ5e4=
Subject key identifier:   36:5A:9F:CC:42:B2:51:29:F9:B4:16:0B:22:E8:C8:42:4E:96:DA:65
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       018F3A0BA74691FE1535BA47FB2AFD5D33F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          0836
Signing time:             Thu 02 May 2024 16:03:13 +0000
Manifest this update:     Thu 02 May 2024 16:03:13 +0000
Manifest next update:     Fri 03 May 2024 16:03:13 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 9vscMJhQuu1XjcVc2Qcu1OD7sS3IjwhdAIUZ9fw4GcY=)
                          2: T7hhLaTqcfw8xoH5jN9JSVspziE.roa (hash: XnsOBu9anDFbkYclUiP7MP69WoJ1zUHkxDGlWWa6B3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:a7:46:91:fe:15:35:ba:47:fb:2a:fd:5d:33:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: May  2 16:03:13 2024 GMT
            Not After : May  3 16:03:13 2024 GMT
        Subject: CN=365a9fcc42b25129f9b4160b22e8c8424e96da65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:a2:ff:b3:31:9b:2a:23:72:ed:5d:da:64:
                    39:d5:3e:e6:37:cc:b4:05:14:f9:b3:ce:74:f8:c5:
                    34:8d:63:ff:0a:66:99:17:b1:7f:63:18:e0:63:17:
                    95:9b:61:e1:fc:ee:cb:1a:3e:d1:41:9b:e8:66:11:
                    12:ed:de:13:8b:a7:e5:61:ba:79:5d:6a:23:39:de:
                    86:00:19:cc:be:a9:d6:3d:c6:34:70:5c:fa:38:b5:
                    a4:e5:1b:c7:ab:c9:d3:4f:b7:a1:ca:aa:24:78:2b:
                    3d:2d:f8:cb:cc:23:d8:79:0f:c3:2d:e1:e9:25:b5:
                    9b:81:dc:33:f0:b7:28:15:50:88:0f:23:03:24:9e:
                    8e:2f:7c:f1:75:11:50:bb:90:bb:22:cd:c4:bf:ac:
                    bb:10:dc:04:3a:f7:6e:3f:66:3f:53:ca:64:f9:6e:
                    70:b2:6c:23:63:4f:bd:ac:b2:59:b3:be:9c:99:f7:
                    6d:3c:59:ea:8d:76:c9:6a:3d:13:26:61:ca:4f:d3:
                    27:4b:41:a8:06:84:ab:5f:91:28:83:73:d0:6c:ca:
                    27:81:01:9f:35:1c:60:2b:67:a6:d7:54:f2:0c:0d:
                    c6:8b:96:3f:32:a5:7d:92:ca:64:50:7f:d3:29:29:
                    26:e5:04:80:af:9c:1e:96:75:89:dd:84:62:29:f9:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5A:9F:CC:42:B2:51:29:F9:B4:16:0B:22:E8:C8:42:4E:96:DA:65
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:95:03:89:5a:e2:ab:40:95:09:de:13:e9:55:33:a8:8d:dc:
         b7:78:21:e4:e7:c6:16:5b:64:ee:3e:79:4a:0a:c0:b3:b1:9a:
         02:a1:b2:3f:5c:cd:a3:af:5d:7f:8c:73:a0:0b:4e:04:38:96:
         9d:a8:db:5f:a6:d6:5f:59:7f:00:bf:6a:17:32:17:9b:7f:ab:
         c9:13:04:a7:0c:b1:ad:5d:59:2a:af:93:34:14:17:e3:38:98:
         a9:25:34:02:39:4f:f2:32:2f:8b:c1:66:bb:e5:40:fd:43:2e:
         b3:3d:06:19:a4:48:eb:01:f5:aa:c6:a4:37:0c:5e:9b:c5:0c:
         26:57:25:06:19:c1:4a:c2:be:7e:dd:56:78:68:14:a6:de:f4:
         f4:d8:ef:eb:9e:1b:13:10:8c:3d:10:5d:43:4f:31:a7:54:52:
         61:bc:45:84:21:4b:69:58:ff:a2:41:0f:b9:63:e7:2c:78:b8:
         95:1e:f5:9d:2c:5c:68:91:1c:70:45:c9:62:67:69:a7:8b:6a:
         36:99:a2:1a:09:74:b8:ba:87:75:ee:5a:01:2e:b5:d0:7a:d3:
         74:99:77:ee:fa:de:8b:e8:24:8c:59:77:00:43:1c:df:49:83:
         3a:b3:a4:1d:0c:b0:c7:e4:53:4f:73:84:05:54:e3:8f:4f:dc:
         48:a3:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:21:02 2024 by rpki-client on console-fra.rpki-client.org