Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          iYwtSiWCMAyCk9YCIsTgGKGPZZfhPRmVduog7j1shOw=
Subject key identifier:   6F:BA:B2:B2:A3:F8:08:E3:5B:12:10:9B:BA:C0:1B:87:33:1A:F7:65
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       018F57047F0EBD466CB65DE6EEDD513407A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          08FC
Signing time:             Wed 08 May 2024 07:04:23 +0000
Manifest this update:     Wed 08 May 2024 07:04:23 +0000
Manifest next update:     Thu 09 May 2024 07:04:23 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: 015iouUFN48WHBR02j7e5mm9yhw1UuBNIC2TfGPH2JM=)
                          2: _7XF_J_mPDANHxsGvqVu8pSlUuQ.roa (hash: jsSSSAfb2OwW2QL8sSnKHPAEVs+qtfqpJezquD3e+f8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:04:7f:0e:bd:46:6c:b6:5d:e6:ee:dd:51:34:07:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: May  8 07:04:23 2024 GMT
            Not After : May  9 07:04:23 2024 GMT
        Subject: CN=6fbab2b2a3f808e35b12109bbac01b87331af765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:0b:f9:db:7d:97:6f:74:95:7e:b7:19:df:
                    ac:0d:2b:f8:2c:4f:37:4d:cd:42:e6:69:a0:aa:d8:
                    26:b3:5c:fe:93:92:69:92:e2:48:0c:c8:9b:0c:6f:
                    7c:72:53:87:21:32:9d:48:48:eb:dc:57:6c:2e:12:
                    54:68:79:41:05:50:01:ff:ba:0a:2d:43:da:32:bf:
                    9f:45:cd:58:6c:23:8d:eb:df:0f:c5:15:31:e7:31:
                    1f:f8:f5:92:d7:ce:3f:d9:29:67:0d:5b:4a:c1:fb:
                    ba:2c:61:a5:5c:56:e8:8f:e5:56:dc:9e:95:ca:de:
                    83:8c:2f:ab:d1:88:56:79:37:c7:7d:02:78:28:8c:
                    33:55:f9:f1:99:52:7c:0d:72:a6:09:bc:23:e1:8d:
                    a9:5c:cb:cb:0d:88:25:e8:f9:19:dc:03:54:95:a4:
                    95:10:45:ae:21:b3:56:63:26:fb:9a:dc:b9:ff:b4:
                    a5:4c:ac:58:2c:8d:38:51:2d:fa:82:b9:25:85:3f:
                    12:aa:a1:57:a0:83:6f:7c:15:6a:42:72:78:c5:8c:
                    32:b8:fa:19:6f:bf:2c:1c:e9:ac:2f:f6:8d:e0:77:
                    a9:e1:58:75:03:0f:39:8e:27:ae:c4:61:51:a9:d0:
                    94:f5:62:67:c9:4b:45:d6:32:a3:ab:0f:7c:3d:4e:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:B2:B2:A3:F8:08:E3:5B:12:10:9B:BA:C0:1B:87:33:1A:F7:65
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:b7:68:83:ca:d1:d8:fe:af:d6:55:1b:6a:1c:2c:25:cc:
         bd:e6:79:14:a0:36:57:7b:bb:e2:6c:b6:52:ac:61:db:01:cd:
         7e:66:3c:1f:af:b2:df:5f:f3:46:6a:2f:23:c9:e9:39:d8:c3:
         c3:78:8e:0c:0d:63:8b:8c:4d:79:f5:fe:c4:36:dd:39:5e:3f:
         59:54:95:05:e1:5f:09:a2:61:4f:70:1c:f7:d8:91:03:1c:80:
         31:99:d7:d3:49:fe:5c:a6:bb:7c:a0:57:e0:9b:b3:3c:95:df:
         1d:1e:ed:b3:de:19:c4:4c:ae:7f:b0:b9:2d:7f:0d:8e:80:3b:
         a1:01:11:51:bc:05:26:78:7a:a1:a3:73:51:e1:81:db:f8:78:
         01:ed:69:bf:85:ad:80:69:d1:5a:d1:c3:36:d1:b0:42:51:a0:
         02:05:4e:84:cc:cd:23:9a:28:15:8d:16:41:54:b3:36:9d:0a:
         c4:5c:19:d0:14:6d:1b:03:a7:80:da:d7:8c:75:2c:c3:d4:23:
         f3:b3:40:fb:f9:d5:30:6a:c2:ba:c7:eb:42:ed:48:be:7e:57:
         c4:df:c8:17:e6:49:e3:00:af:5e:9c:29:b0:c6:91:fa:9b:bc:
         6d:64:51:c7:06:ae:0c:f1:e8:56:0c:e6:ec:b0:9e:72:76:5a:
         ce:d5:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:13:32 2024 by rpki-client on console-fra.rpki-client.org