Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
File:                     6DE3LmvVKfTDFQDoXM_schGoyx8.mft (raw, json)
Hash identifier:          e+ZFpQXNkTEIj+AdsYoUTGCM9+0geJ7L+dKDPQwMoTY=
Subject key identifier:   8E:B0:7D:04:1E:1B:D1:BA:2D:60:8F:E3:48:9C:B3:B9:D0:86:87:D2
Authority key identifier: E8:31:37:2E:6B:D5:29:F4:C3:15:00:E8:5C:CF:EC:72:11:A8:CB:1F
Certificate issuer:       /CN=e831372e6bd529f4c31500e85ccfec7211a8cb1f
Certificate serial:       018F8749CD2AA9B245AC84B71DF6F33C40C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
Manifest number:          03AA
Signing time:             Fri 17 May 2024 16:01:51 +0000
Manifest this update:     Fri 17 May 2024 16:01:51 +0000
Manifest next update:     Sat 18 May 2024 16:01:51 +0000
Files and hashes:         1: 6DE3LmvVKfTDFQDoXM_schGoyx8.crl (hash: 6O6uzWKhZ3QXSqGHZpe9Qe9+UX0YhwrKV+qvyvxx9iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:cd:2a:a9:b2:45:ac:84:b7:1d:f6:f3:3c:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e831372e6bd529f4c31500e85ccfec7211a8cb1f
        Validity
            Not Before: May 17 16:01:51 2024 GMT
            Not After : May 18 16:01:51 2024 GMT
        Subject: CN=8eb07d041e1bd1ba2d608fe3489cb3b9d08687d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:03:13:7e:9f:53:12:ad:29:56:64:13:64:77:
                    a1:56:a2:ef:24:55:29:3e:76:b9:ae:ac:4b:ef:92:
                    d7:42:66:0f:d1:8f:79:c7:90:7e:8f:f1:e8:d5:ba:
                    20:a9:f0:95:b2:0c:3e:ea:42:b7:9b:03:82:3e:b7:
                    02:27:a4:86:f7:af:17:c8:4d:6c:2a:c7:68:f7:b9:
                    88:ab:a0:44:5d:fa:61:fc:7b:b1:16:93:9c:6a:f0:
                    a9:4d:e2:78:47:c4:56:fd:61:59:0c:fc:03:9c:60:
                    9e:b2:f7:a7:ea:75:94:72:c3:36:3d:f9:74:0c:ce:
                    37:da:b5:6a:38:75:aa:9d:ea:bb:b1:a9:36:a0:a2:
                    d7:b4:b4:57:8d:6c:5e:bd:22:40:c3:4b:3c:79:9b:
                    ee:90:f7:fa:b8:bf:6b:18:0c:71:5a:e2:b2:f5:2e:
                    8e:f1:6e:c9:29:4f:b5:0b:07:30:1c:f4:c9:c9:04:
                    a9:8b:8a:a3:20:ea:cc:23:fd:90:52:b8:ba:e5:4b:
                    de:08:51:c1:49:e5:ec:e7:3a:97:f4:9e:1c:79:d7:
                    a5:b8:2d:e4:91:40:11:87:f5:b4:69:0d:0a:50:fb:
                    53:e0:30:85:12:9e:79:35:f8:66:35:5e:66:1a:34:
                    02:4d:89:cb:41:10:b7:19:ac:01:cb:ae:98:97:1a:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B0:7D:04:1E:1B:D1:BA:2D:60:8F:E3:48:9C:B3:B9:D0:86:87:D2
            X509v3 Authority Key Identifier:
                keyid:E8:31:37:2E:6B:D5:29:F4:C3:15:00:E8:5C:CF:EC:72:11:A8:CB:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:d2:2d:92:34:d0:cf:c2:b4:33:42:29:0d:28:b4:c6:6c:
         06:89:8a:37:bd:36:6a:44:39:07:ef:13:0b:70:de:da:d0:b1:
         e3:8e:6d:10:67:2d:93:60:b9:45:99:df:77:89:d4:0c:48:9f:
         1f:6c:a7:85:0d:1c:41:46:16:44:a3:2d:70:c2:fa:c4:37:cf:
         66:ad:d7:d5:17:a9:fa:13:bf:81:64:01:c5:ba:c4:39:30:12:
         b1:79:75:a9:f1:be:b8:43:00:66:b3:10:af:eb:78:55:94:cf:
         fb:eb:42:4f:e2:8c:a3:2d:c3:67:e6:f5:cd:18:2a:da:0d:f3:
         52:83:45:41:78:93:8c:f6:53:3a:4e:8d:73:5e:43:de:97:3e:
         b3:88:69:aa:7e:e6:a7:da:da:7b:8b:4e:98:78:49:f6:0e:98:
         f8:cd:9a:d8:09:62:89:b1:3f:d6:82:02:bf:a3:9d:8c:b6:0a:
         ca:8b:89:f0:28:09:d0:d1:4d:84:ae:f8:c2:4a:aa:fd:76:07:
         d5:3b:82:b7:9d:8f:09:10:7d:b7:38:42:43:e6:a6:cb:45:54:
         3e:f4:ee:51:be:fc:e0:69:ea:cf:bd:d2:cc:8b:db:25:3f:7f:
         2d:f9:b0:0f:d9:9d:ff:bd:ff:88:2f:b7:cb:97:ee:77:2b:78:
         c5:73:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:29 2024 by rpki-client on console-ams.rpki-client.org