Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          /pdjBzEacSPGgpxTqVGqOkXxw7UtDn6a2olRllZOJ2Q=
Subject key identifier:   0B:5B:FA:49:B8:7A:B2:EB:80:63:5B:DF:C9:2F:E5:B5:49:C5:57:A5
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       018F8891CB7A163963267CAC2C3EA0083260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          C2
Signing time:             Fri 17 May 2024 22:00:06 +0000
Manifest this update:     Fri 17 May 2024 22:00:06 +0000
Manifest next update:     Sat 18 May 2024 22:00:06 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: CpqwQOi+lnN39zlmxbfwO9EgnCo2vdwPZgCmESIUD4I=)
                          2: jflriOIWtJ0usNwQqKc8yv2Vqx4.roa (hash: EltEH73j2kV0bMzkQS5yzjkog7gFZCD+oK59vFnS15c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:cb:7a:16:39:63:26:7c:ac:2c:3e:a0:08:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: May 17 22:00:06 2024 GMT
            Not After : May 18 22:00:06 2024 GMT
        Subject: CN=0b5bfa49b87ab2eb80635bdfc92fe5b549c557a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:1b:ba:98:81:2a:0c:c0:d3:a4:69:8a:1b:
                    13:8b:ee:ef:83:11:d5:f4:1d:41:66:1b:82:67:7c:
                    d5:c2:be:a9:4b:85:1d:f5:3b:19:16:a0:49:c3:f6:
                    ae:32:c6:b9:09:6b:ad:dd:4f:ca:83:21:d2:79:4e:
                    6a:4e:69:84:8f:8e:bc:37:1a:77:e4:4d:1e:6d:d4:
                    45:dd:be:11:d5:3d:29:11:ab:a1:f7:1c:00:00:7b:
                    c0:4b:a1:83:c1:e5:9d:65:0b:ee:fa:39:d5:b3:04:
                    11:04:14:02:f1:97:37:a2:20:15:c2:8d:de:f6:0e:
                    74:61:4d:d2:85:f3:5e:7a:cc:6b:01:f1:aa:49:41:
                    2a:7b:04:aa:b7:dc:b7:ba:a4:d0:70:90:2c:1f:1f:
                    71:c8:5e:5d:27:ba:b1:a8:b0:53:a3:fc:79:1e:7a:
                    e3:4f:ac:35:21:d8:d3:e5:20:2d:36:7a:4d:14:f0:
                    3e:69:1b:f0:e6:68:ec:c7:bd:ba:9b:0c:4c:a1:d1:
                    13:a3:5b:8f:df:2d:2e:b5:38:c7:ca:3b:d7:bd:73:
                    13:a6:1c:6f:52:4e:f6:69:b9:32:31:dc:42:81:45:
                    b3:7c:4c:64:d3:e6:5a:b4:9c:33:ea:27:f2:e7:5c:
                    6f:45:af:17:5f:7a:3d:91:ba:64:74:f8:55:ca:32:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:FA:49:B8:7A:B2:EB:80:63:5B:DF:C9:2F:E5:B5:49:C5:57:A5
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:99:79:ff:fc:54:d5:a7:9c:9f:6d:05:57:e3:40:af:c4:
         2c:30:ab:e2:d7:db:e5:84:58:5b:71:01:2a:0f:70:3c:b9:73:
         9c:c3:0d:8a:0d:9e:05:8d:98:e8:b2:84:ad:54:ff:a2:01:7c:
         15:07:94:43:1a:86:c1:29:63:7a:6b:47:b6:b5:55:77:6a:28:
         49:77:35:8c:65:92:01:c9:7e:49:0a:a0:eb:2d:46:7d:fb:7a:
         ff:b6:95:f9:86:71:9a:8a:d3:83:91:fc:f2:e1:27:97:4b:30:
         a4:e2:7c:82:6e:1c:81:90:b6:b1:18:94:25:3e:c0:af:05:02:
         5e:27:3b:68:ed:0a:dd:ef:44:ea:bd:55:db:58:e8:6c:85:66:
         36:3c:2d:67:82:01:df:81:da:03:94:fc:2f:92:b7:c9:88:7d:
         f1:53:aa:7d:14:89:3c:9e:93:22:b9:d2:46:db:2e:d0:3e:6c:
         15:fd:34:ff:a8:b6:1a:49:02:4d:51:16:b3:e6:b5:9b:4e:3c:
         67:3f:ac:6d:21:1c:90:7a:c4:02:e0:fa:d3:f4:b4:75:14:cb:
         e7:18:aa:d3:13:c3:01:d8:7c:f2:0e:77:eb:e9:40:a5:f3:2a:
         58:62:30:2c:40:70:ae:2d:ff:ce:25:51:48:d4:98:6e:07:3d:
         45:3b:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:40 2024 by rpki-client on console-ams.rpki-client.org