Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.mft
File:                     64Aca6RQycxP5u8_Bg4Po2C107A.mft (raw, json)
Hash identifier:          qDJ3OEbnWDiwwTc5OzJA6QayW/fVaeLtKh8bmNqffbY=
Subject key identifier:   30:F0:83:99:CE:ED:B9:10:F7:98:47:0C:49:4D:80:69:D9:8C:DF:F1
Authority key identifier: EB:80:1C:6B:A4:50:C9:CC:4F:E6:EF:3F:06:0E:0F:A3:60:B5:D3:B0
Certificate issuer:       /CN=eb801c6ba450c9cc4fe6ef3f060e0fa360b5d3b0
Certificate serial:       018F174712E824656AD94CA62D51309B5793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64Aca6RQycxP5u8_Bg4Po2C107A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.mft
Manifest number:          06A8
Signing time:             Thu 25 Apr 2024 22:01:24 +0000
Manifest this update:     Thu 25 Apr 2024 22:01:24 +0000
Manifest next update:     Fri 26 Apr 2024 22:01:24 +0000
Files and hashes:         1: 64Aca6RQycxP5u8_Bg4Po2C107A.crl (hash: 0kpMQhpnk6kjzfMVxCvhcdHoV11L0zkCOt55E2cwqYM=)
                          2: A7fwAMWgwoeceg3CsN6VIdZpuV0.roa (hash: mOCRVTYri43Ry7xm/Jgyn6dLJuZzXuc2DkKdnKtPowM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/64Aca6RQycxP5u8_Bg4Po2C107A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:47:12:e8:24:65:6a:d9:4c:a6:2d:51:30:9b:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb801c6ba450c9cc4fe6ef3f060e0fa360b5d3b0
        Validity
            Not Before: Apr 25 22:01:24 2024 GMT
            Not After : Apr 26 22:01:24 2024 GMT
        Subject: CN=30f08399ceedb910f798470c494d8069d98cdff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:fb:df:24:6c:c1:67:0a:33:16:fe:56:4d:
                    ca:e8:8f:c1:fa:b5:f1:b7:fe:ea:33:e7:c0:3e:f9:
                    e8:f8:c8:15:71:e1:49:2d:e9:0a:4b:25:8d:22:b8:
                    34:ba:81:d2:4a:f0:d1:ca:39:d4:97:2d:66:0f:6e:
                    c5:ae:c6:ba:d0:68:07:94:22:6f:3a:fc:20:48:b8:
                    06:a4:b8:91:22:d3:93:c0:0b:45:53:2a:6a:e1:5f:
                    c2:cb:ec:60:ad:73:a0:b9:0c:26:de:12:37:bf:c3:
                    ef:81:e4:cc:83:15:aa:85:4f:a2:6e:c7:7b:a4:7b:
                    9d:17:cc:bc:51:d2:e6:99:39:7a:e2:95:9a:5f:f5:
                    d6:a2:30:d1:7c:2b:1a:7e:6e:1f:34:16:80:7d:1a:
                    d8:28:da:a3:a7:e3:5c:4e:12:fe:42:ce:e3:84:26:
                    a7:d8:77:d1:13:40:02:d8:9b:bf:a8:3d:8a:b3:f4:
                    36:b1:bc:6a:ec:a3:53:05:76:00:c2:7e:d2:40:c4:
                    bc:38:10:2d:28:67:4c:60:12:d9:74:14:42:7f:6e:
                    90:4c:2d:e7:b9:2e:ff:c5:b2:3d:46:bd:bf:79:9b:
                    46:92:19:33:87:f4:f9:6c:a4:fd:bd:d9:0f:e8:97:
                    48:94:10:df:01:0f:dc:e4:d6:f0:13:8c:b7:d2:dc:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:83:99:CE:ED:B9:10:F7:98:47:0C:49:4D:80:69:D9:8C:DF:F1
            X509v3 Authority Key Identifier:
                keyid:EB:80:1C:6B:A4:50:C9:CC:4F:E6:EF:3F:06:0E:0F:A3:60:B5:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64Aca6RQycxP5u8_Bg4Po2C107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/920672-8559-4b08-b94e-14e76d58e08a/1/64Aca6RQycxP5u8_Bg4Po2C107A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:68:81:24:9d:79:07:fe:9b:49:5c:b2:fc:a1:bd:ec:d4:
         b9:66:fb:80:c6:7b:f8:89:41:7a:cb:85:c0:50:3e:ec:db:32:
         d8:e1:10:65:a3:c0:63:23:bc:ee:b8:74:77:7f:37:52:14:6f:
         b4:6a:cd:cd:10:04:03:9f:83:34:56:ce:bd:60:79:d4:68:24:
         4f:5a:9a:48:cb:a6:1f:cb:fd:0a:b1:a9:9d:69:68:82:7e:be:
         e6:d5:cb:4b:06:f0:91:bf:02:ff:65:6a:7a:5b:b4:bf:f1:34:
         c1:06:36:6d:64:3e:41:1c:52:0e:44:bf:31:71:ee:3c:30:9d:
         7d:ce:e3:80:c4:6c:16:69:71:e6:4e:d5:7d:94:b1:08:cc:60:
         3d:22:e0:f7:0c:3b:ad:77:af:6a:f8:d5:d7:e8:e1:b5:90:29:
         3f:d7:48:13:e6:78:cf:ef:36:f0:ee:bd:e0:a5:e1:b5:2f:14:
         ff:d9:3a:85:bc:59:1b:48:c4:e6:72:71:60:4f:5a:bb:4b:68:
         32:67:b5:7e:ae:4e:63:8d:76:7a:fb:e4:50:2e:8c:5d:09:a2:
         f4:a0:5e:f6:1f:16:fa:92:41:99:de:ad:c6:78:d3:ce:72:4d:
         c6:16:a6:a8:77:31:f1:1f:dd:04:54:38:0a:b6:f5:af:8b:6c:
         ad:5b:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:40:08 2024 by rpki-client on console-fra.rpki-client.org