Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          FXGBCXcsa+xkIUSwcDxCx+2d0JHVS20EH2qqfq+kOZI=
Subject key identifier:   37:9F:52:27:0A:1E:C5:C9:61:A0:67:F5:0F:9C:69:66:4D:4D:62:B1
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       018F2E74EA6EDF04FDB93C243BBF0F46359C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          1147
Signing time:             Tue 30 Apr 2024 10:02:45 +0000
Manifest this update:     Tue 30 Apr 2024 10:02:45 +0000
Manifest next update:     Wed 01 May 2024 10:02:45 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: uoV09CbiKwkRKXu10FKtGcC78hAudPfzcbCHDldvoik=)
                          2: KjnQlCcdJhz06sy0Po6XV6X4Dxs.roa (hash: 7iYFRHNGF/wVVpMowkckxg8ZXNPJvk/0QIk/gscq6GM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:74:ea:6e:df:04:fd:b9:3c:24:3b:bf:0f:46:35:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Apr 30 10:02:45 2024 GMT
            Not After : May  1 10:02:45 2024 GMT
        Subject: CN=379f52270a1ec5c961a067f50f9c69664d4d62b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:a2:37:69:d3:f1:b1:66:ff:71:d0:3f:3a:
                    68:ca:44:86:af:bb:f8:75:bd:af:58:0b:82:a8:ff:
                    15:39:de:5e:ac:77:71:2e:21:2a:b0:3b:3d:9d:f4:
                    fe:d4:ba:90:96:73:52:a7:b2:e7:a6:64:83:fd:11:
                    d3:d7:d1:69:99:83:ab:40:5a:da:3d:fc:a7:05:32:
                    23:93:bf:3e:41:e0:48:09:48:34:17:0c:18:0b:c3:
                    e3:46:e2:a5:63:a2:1f:50:a8:bf:17:56:28:c4:d6:
                    44:5a:94:28:1c:cf:ff:3f:02:b0:71:65:10:a5:c9:
                    4e:b6:08:55:3a:0d:ef:af:e9:9a:62:67:81:84:86:
                    bc:e6:8c:1e:b4:10:01:0c:57:ea:e9:de:d7:1a:f6:
                    8e:4d:7a:72:6a:c7:65:1b:47:80:c3:6a:aa:e0:a7:
                    4d:39:70:cc:84:a4:df:b7:a1:81:28:c0:8c:10:58:
                    a1:b9:75:93:4d:ac:cf:91:b7:c7:44:e7:a6:5a:21:
                    f2:cd:b3:38:ce:f6:80:91:7e:cf:ca:2b:76:69:ae:
                    21:0f:66:93:eb:0f:0f:df:ea:83:d9:39:d7:68:30:
                    0d:15:4b:f1:e5:23:44:92:c4:73:de:47:6b:a5:ff:
                    d0:8e:3e:3b:d0:74:eb:dd:d3:a1:1c:64:34:31:8f:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9F:52:27:0A:1E:C5:C9:61:A0:67:F5:0F:9C:69:66:4D:4D:62:B1
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:06:96:80:10:23:15:fa:34:a9:1f:4d:52:e7:31:ac:80:38:
         a1:66:40:af:99:36:1e:2c:21:ab:51:bc:95:84:08:e4:ca:83:
         10:df:e3:f3:d8:cf:89:d9:19:02:4e:d0:0c:02:fb:40:6a:fa:
         63:25:bd:e3:0d:84:8f:e3:f4:0a:cc:5b:3f:75:b3:e8:a1:ac:
         81:bf:0b:93:c0:be:b5:0e:b5:08:0f:9c:b7:f5:c0:1d:7e:a9:
         a6:8d:7e:78:eb:1d:bc:2b:da:52:15:2c:1f:fb:1b:f7:85:c2:
         98:28:c4:13:4b:36:4f:19:e2:ea:99:3e:05:c0:4e:bd:52:72:
         65:f1:2e:2a:ad:82:b1:55:46:a9:99:b2:97:eb:51:a9:83:fa:
         53:60:f0:be:bd:95:eb:cf:bf:de:0e:3e:b4:56:b3:ad:5e:d3:
         f2:fa:18:a1:06:dd:e7:24:0e:2d:88:92:f6:88:dd:a4:e8:12:
         bd:f4:c3:24:0c:6c:35:ce:f7:2c:e4:2d:14:f1:f8:8b:01:8e:
         18:43:d9:31:c8:55:98:c1:3a:b6:ff:1d:5c:a9:df:0d:98:e2:
         ac:64:39:5b:71:ba:00:83:e2:e7:e8:45:21:33:a8:f1:c4:71:
         21:99:5f:28:fd:0f:64:f1:4c:76:9e:ef:3a:ad:63:88:7a:dc:
         df:35:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:51:39 2024 by rpki-client on console-fra.rpki-client.org