Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          +bhyshSyvnWGAxOhTWm1W+ls810R3Kmsyz7kPw6EqDs=
Subject key identifier:   87:52:5C:FB:F5:A8:76:E1:39:2C:0A:4C:F5:85:4C:6A:C8:2D:E4:EA
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       018F4B6B7BE53FDFF8A805FA2F26EFAF1758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          04FE
Signing time:             Mon 06 May 2024 01:01:26 +0000
Manifest this update:     Mon 06 May 2024 01:01:26 +0000
Manifest next update:     Tue 07 May 2024 01:01:26 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: 4D3s8yyWcck8E82S+TUwGMP74s9JoBTC3dVdxCcDoio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:7b:e5:3f:df:f8:a8:05:fa:2f:26:ef:af:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: May  6 01:01:26 2024 GMT
            Not After : May  7 01:01:26 2024 GMT
        Subject: CN=87525cfbf5a876e1392c0a4cf5854c6ac82de4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:2a:f5:d1:b8:9b:bf:59:4f:16:e8:3c:b9:
                    99:dc:b9:e8:91:bb:4b:4c:8e:b8:e3:a6:b4:57:b9:
                    44:77:9a:25:a3:06:f1:21:f1:76:2d:6c:ba:4f:d8:
                    1f:c4:fc:e2:de:75:58:4d:09:a8:d6:d2:08:6c:bb:
                    1d:43:40:e3:a5:8e:0e:43:4e:40:37:3c:2a:47:bb:
                    f1:3e:80:5c:78:fd:1f:f7:1e:57:cf:26:d9:1a:1d:
                    bc:82:a8:fa:45:42:a0:60:58:18:c6:69:5e:e0:95:
                    e0:b4:c0:66:80:5e:fb:a4:05:82:5c:8a:bb:ed:0e:
                    1c:e7:d0:83:60:d5:63:ad:6d:de:a5:3f:b2:2e:3f:
                    69:4b:f3:81:4a:3c:a7:94:a2:62:0d:fb:a5:48:51:
                    80:f2:ff:c8:e3:91:c2:a0:56:f7:6b:08:e3:f8:dd:
                    6d:5c:fc:44:d9:dd:1a:c9:5f:f4:46:aa:44:41:a5:
                    de:4d:b5:4d:09:14:90:cf:8d:16:d1:5a:a6:3d:ab:
                    4f:d2:e4:fd:09:2c:62:96:bf:0d:7e:b1:91:8f:c7:
                    d0:57:8a:f0:87:ea:89:e7:d9:5a:86:00:ba:45:f4:
                    60:02:50:89:e7:18:ee:85:68:47:f3:82:66:b1:17:
                    03:07:52:c6:f1:09:c8:5e:04:38:da:60:f4:5f:4b:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:5C:FB:F5:A8:76:E1:39:2C:0A:4C:F5:85:4C:6A:C8:2D:E4:EA
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:0c:5a:df:a2:cd:0c:24:7f:bb:53:da:93:c8:9d:d3:e6:
         ff:ba:87:fe:08:10:f6:ef:67:c1:df:9a:41:88:ad:b6:7b:7c:
         50:be:1c:3f:9d:36:d8:9a:d4:c4:77:ce:1f:a8:f5:c7:f0:af:
         39:f5:24:1a:70:2d:4d:a3:dd:32:4a:a4:8a:24:42:cd:0a:37:
         11:5c:e4:9d:7a:4d:43:ac:e4:a0:4c:0d:0e:dc:f0:8a:a2:ce:
         b5:c9:b3:d4:da:12:2e:70:fe:a5:6c:43:7f:d2:3e:e6:7e:a9:
         3d:21:e1:eb:20:c4:35:e5:59:2d:46:61:53:43:fe:a6:13:b7:
         8d:fe:61:06:85:6a:fa:fe:e6:f9:80:ec:b0:8f:56:cd:61:83:
         de:97:aa:65:ea:53:db:cc:b1:4f:07:28:76:06:e3:92:95:09:
         0b:e6:58:38:f5:f3:43:22:ce:cc:63:81:3f:4b:c6:1e:8f:15:
         08:7b:88:a1:91:27:bf:ab:f8:c3:9b:57:c7:f8:42:9e:bf:b3:
         49:ea:66:f7:fb:e7:72:e9:17:91:b4:f5:7a:4d:34:e8:f9:52:
         9c:64:84:60:23:ce:98:ae:c9:f4:d6:2b:2d:40:4d:28:34:88:
         64:91:f6:15:30:c3:e3:9e:00:1a:cb:5a:84:17:cb:7a:9c:a1:
         e0:47:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:25:55 2024 by rpki-client on console-fra.rpki-client.org