Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File:                     cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier:          wZxc3QShzkPQM+XjPv+dvbHT8CtAUmzZNgkEzLS47Wc=
Subject key identifier:   65:03:37:82:95:0B:A6:E0:AD:61:39:29:CD:3B:35:37:00:F8:71:AD
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer:       /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial:       0191FB22D8CF11958C05974F16F50FE88CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number:          C6
Signing time:             Mon 16 Sep 2024 14:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:50 +0000
Files and hashes:         1: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: Dw+tde9KXcc2tzk7uOIKmL+qlvb1hgZCc4MgcNYA+TE=)
                          2: x4wnEsKHYftOyiDhdcvz3wCqgOk.roa (hash: Ll5jOKkrYE+IoMqtvXxIwtg2/7+xp2hF1LciTvneJbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:d8:cf:11:95:8c:05:97:4f:16:f5:0f:e8:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
        Validity
            Not Before: Sep 16 14:00:50 2024 GMT
            Not After : Sep 17 14:00:50 2024 GMT
        Subject: CN=65033782950ba6e0ad613929cd3b353700f871ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:d4:47:f1:f8:8a:ea:71:56:85:f6:0c:24:
                    e3:94:51:c8:64:08:46:db:01:85:f2:d0:f7:42:a4:
                    7d:59:5e:00:dc:94:89:2f:7f:08:89:c5:3d:13:24:
                    70:5a:1a:85:2e:24:b5:a8:cf:e7:36:a0:3f:5d:15:
                    f6:90:ab:b5:c8:fa:23:30:32:6b:c2:38:85:97:aa:
                    be:15:d0:1b:cd:21:12:de:19:18:a4:ed:a0:86:1e:
                    f0:c1:7d:34:cc:e3:2a:27:f7:f2:1c:e4:87:a2:7e:
                    9e:e7:01:7e:cd:71:c8:8f:58:61:c7:fc:eb:6b:7f:
                    cd:f3:3c:8f:6f:7a:3f:f8:3e:25:28:81:e8:c8:e0:
                    59:22:f8:2e:4b:8b:23:91:d0:64:4b:94:f7:38:03:
                    db:11:a1:87:83:4e:08:0f:85:2f:62:68:fa:9e:8c:
                    2e:c9:0d:24:c8:17:77:a8:bd:ae:3d:6c:39:b5:36:
                    4d:9b:02:d1:a9:5f:db:e3:23:24:c5:87:ac:e3:61:
                    75:3f:72:37:f8:52:81:0d:c4:a8:93:3b:0a:0f:75:
                    20:c1:8e:9d:69:bc:69:91:c8:87:a6:8c:8c:52:bd:
                    c6:45:7c:cf:00:58:6b:9b:1a:dc:ad:72:3c:02:c2:
                    10:a4:ea:89:72:8c:c7:f0:fa:20:a2:f1:48:7f:ac:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:37:82:95:0B:A6:E0:AD:61:39:29:CD:3B:35:37:00:F8:71:AD
            X509v3 Authority Key Identifier:
                keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:08:ce:62:0d:69:04:a1:f5:16:c0:1d:dd:36:0b:17:81:
         04:cc:3d:d0:43:4b:b5:9a:29:a4:87:cc:86:e5:40:36:e0:71:
         3c:6b:5f:a6:8f:15:13:20:b6:e9:4d:bb:70:1c:74:a7:a3:48:
         d9:ca:0d:63:7b:44:ad:a7:e8:4b:98:2e:91:17:a0:62:25:f9:
         82:d6:11:c5:76:03:16:2d:31:ec:6b:74:78:fb:0b:32:05:da:
         e9:d6:80:e2:3a:2b:65:af:06:72:e7:41:f1:09:e8:01:2d:eb:
         00:db:2d:ca:12:f3:62:24:0b:93:b6:21:9b:33:e6:bd:49:67:
         82:7d:a9:3a:cd:37:ce:25:c5:66:39:2c:38:8b:2f:2c:6a:49:
         64:98:b2:43:0b:95:6d:ef:e7:44:e5:70:fd:b5:18:18:40:0f:
         df:2b:fb:59:f7:26:5d:87:dd:6d:01:11:c6:a4:86:1e:b0:8c:
         69:e1:4c:de:44:ea:a3:50:09:6d:3d:60:c1:45:eb:70:98:1c:
         4c:3a:c0:d8:aa:ac:31:9d:21:58:0e:00:de:56:6c:ef:05:91:
         d0:26:74:53:28:1e:2e:ce:68:09:75:23:db:86:9c:66:3c:30:
         af:6c:65:a4:f4:6d:f2:78:d3:30:2f:42:67:02:41:5b:f7:fa:
         05:ab:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:26 2024 by rpki-client on console-ams.rpki-client.org