Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          kVXhb8aLr+0gwMiglFbdYp+L9TSAeoYMfy5a9asIR24=
Subject key identifier:   5F:B4:00:AC:02:56:E2:BF:99:12:54:EC:FC:98:1F:3A:83:C2:90:A1
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       018F35511B3BC2FC794F0841C114D065EEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          0884
Signing time:             Wed 01 May 2024 18:00:58 +0000
Manifest this update:     Wed 01 May 2024 18:00:58 +0000
Manifest next update:     Thu 02 May 2024 18:00:58 +0000
Files and hashes:         1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: 5376RPU4XjDPskybGhWzgfVbN4+1KDQBJz85n50ZDhI=)
                          2: J2Vg7W797JEzbUaA-6FXcPLvnuA.roa (hash: 5TYvS1Q+j2G6yrp5hRTPPQZumYgERHqGXl7a/4sCwLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:1b:3b:c2:fc:79:4f:08:41:c1:14:d0:65:ee:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: May  1 18:00:58 2024 GMT
            Not After : May  2 18:00:58 2024 GMT
        Subject: CN=5fb400ac0256e2bf991254ecfc981f3a83c290a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:07:70:ed:b9:be:f0:60:a9:bc:e5:fd:6a:
                    5d:3b:3c:12:dc:67:ec:a0:3a:26:81:db:df:56:bb:
                    cf:31:0f:a1:c8:23:be:05:a1:d7:97:d6:48:65:2f:
                    c9:94:83:30:00:b5:1f:cc:d5:9f:a0:95:42:00:26:
                    9f:21:50:bc:9d:ec:57:d3:83:37:ed:6f:f2:f7:86:
                    77:59:98:78:2d:1f:0c:b7:60:97:4d:e4:4d:b9:ff:
                    46:48:6d:ea:6b:df:53:90:c9:40:21:24:34:06:6c:
                    90:aa:9f:8a:97:41:62:78:65:24:68:3d:9b:a9:44:
                    a5:e6:2d:04:34:1f:b6:ef:c8:4f:2d:c7:d6:ba:ce:
                    8c:65:e1:4a:9e:29:0c:57:5d:df:4b:54:9b:01:71:
                    4e:14:1f:33:11:15:f7:7d:88:d9:38:38:22:d4:50:
                    ca:ad:73:a3:26:cc:51:2b:86:d3:e5:56:24:33:e4:
                    01:c4:f4:0b:bb:3f:1c:52:1f:81:ed:fd:d5:40:6a:
                    60:6b:3c:9c:56:47:d9:5b:68:7c:15:40:60:0d:c6:
                    71:4c:96:53:e7:60:c2:62:43:6f:7f:4f:04:8a:7b:
                    29:7c:78:6b:1c:58:cd:72:5a:90:29:29:91:2a:2d:
                    e3:0b:19:20:59:9a:ac:6b:e8:fc:2a:58:0f:d4:62:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:00:AC:02:56:E2:BF:99:12:54:EC:FC:98:1F:3A:83:C2:90:A1
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:e4:80:1e:2d:ee:e5:8b:0d:d2:eb:ee:e1:da:05:c0:00:
         0b:90:02:84:df:28:05:65:55:b1:71:15:d7:fb:b5:72:20:70:
         20:1f:0d:28:92:74:3d:a7:fb:93:4c:08:90:b7:66:2c:e3:85:
         df:c2:94:6a:43:e0:a2:28:42:b8:81:56:b4:37:dd:34:bc:3a:
         4d:d5:87:d0:ac:46:56:64:62:df:29:ce:20:0a:d9:9e:42:7e:
         d6:fa:3b:0a:b6:d4:df:ce:68:66:53:37:78:e3:12:0f:76:51:
         62:c6:cf:cc:5d:10:26:a5:6e:e3:99:74:09:0b:bb:a4:6a:be:
         12:7a:15:51:07:f1:cb:45:04:09:8b:e2:d8:31:ae:fb:34:99:
         bf:7a:20:0b:56:3c:b7:39:9c:4c:0e:72:ed:8a:e3:89:f1:18:
         a5:f6:75:55:c7:b7:2f:fd:ce:15:d6:48:7b:09:d8:84:0c:fc:
         a7:4e:98:81:b1:71:d2:55:7c:0d:f5:5d:82:7d:7c:b8:20:53:
         f7:2b:47:07:7f:ae:aa:ca:02:98:da:a7:fb:c1:a3:4a:e4:14:
         64:80:a7:32:a0:80:ff:bc:2a:86:50:46:ac:1b:df:4a:53:3a:
         65:64:7e:88:b0:a7:0a:a1:e5:5e:cd:06:68:33:29:68:b3:d5:
         b9:22:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:56:53 2024 by rpki-client on console-ams.rpki-client.org