Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
File:                     6jcwBj7kzNZaNW3IT8R5awCDJbg.mft (raw, json)
Hash identifier:          IXBdLjX6CYJSATpY8vG1611GbtQ5XZCKwgd8odRecCs=
Subject key identifier:   F9:7A:1A:A0:44:8A:75:14:0C:FF:2F:2F:07:66:63:00:F2:CE:DA:5B
Authority key identifier: EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8
Certificate issuer:       /CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
Certificate serial:       018F45A131EBAE101BB1476A4A1204D80088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
Manifest number:          069D
Signing time:             Sat 04 May 2024 22:02:22 +0000
Manifest this update:     Sat 04 May 2024 22:02:22 +0000
Manifest next update:     Sun 05 May 2024 22:02:22 +0000
Files and hashes:         1: 6jcwBj7kzNZaNW3IT8R5awCDJbg.crl (hash: AGFwbIdWLATYTu3Y/6LGPKy5C3Ii/IwsmaHPykrof7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:31:eb:ae:10:1b:b1:47:6a:4a:12:04:d8:00:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
        Validity
            Not Before: May  4 22:02:22 2024 GMT
            Not After : May  5 22:02:22 2024 GMT
        Subject: CN=f97a1aa0448a75140cff2f2f07666300f2ceda5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:b7:96:d5:b7:81:57:a0:47:cf:a5:bc:ac:
                    70:f8:25:5e:73:7c:0f:7e:81:46:91:d8:fe:db:19:
                    ff:b8:12:1d:db:54:55:a9:72:c7:7b:79:f8:6b:67:
                    27:90:76:dd:3f:6f:d6:70:1f:a6:2c:e3:90:ab:ad:
                    4e:d3:b8:50:e7:e4:25:4f:79:f9:99:c2:23:dd:5b:
                    67:73:d7:94:ef:b6:86:8a:de:69:a3:5c:5d:f3:3a:
                    50:79:88:6a:38:19:38:d0:4a:b4:e1:7f:db:65:b3:
                    58:cd:c9:06:87:5d:30:0a:ce:f7:0d:0f:73:d0:08:
                    11:91:d4:84:1c:69:7a:ff:e3:f0:90:bf:38:14:aa:
                    02:83:18:8a:4b:f7:93:94:90:c2:99:4a:78:9f:74:
                    9d:83:ce:0e:e2:ee:a0:34:bf:af:dd:fa:d6:b8:ff:
                    e9:82:81:e2:e3:75:e9:14:5a:5b:fc:1e:95:cc:5c:
                    b5:e5:eb:18:1a:2a:14:2d:0e:ba:79:74:bd:8b:81:
                    60:66:6b:18:d0:6b:54:12:83:3d:87:08:16:59:b7:
                    9f:f5:98:5d:28:17:d9:46:c7:54:75:56:0a:0f:f7:
                    d3:a6:ce:76:f5:4a:49:40:47:45:66:f4:17:3c:23:
                    d1:ee:1b:93:23:4e:dd:97:43:01:a0:4d:46:4a:c2:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:1A:A0:44:8A:75:14:0C:FF:2F:2F:07:66:63:00:F2:CE:DA:5B
            X509v3 Authority Key Identifier:
                keyid:EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:38:c3:4d:17:b0:00:c1:3d:ae:80:f8:3d:18:2d:97:b4:
         b2:5d:ba:4b:a6:ff:ee:80:30:44:06:73:69:6d:9a:ac:a7:b1:
         46:f0:6b:88:67:66:54:88:bf:1d:b7:06:4e:37:62:cf:b7:cc:
         32:c7:07:a7:8e:50:2b:cb:35:29:4b:87:a6:5d:6e:c4:90:17:
         16:0a:05:ce:db:54:0a:86:8d:3c:28:bb:d4:67:88:b9:64:a3:
         66:a9:14:2e:be:3a:ae:cc:9e:c6:22:4a:3d:3e:af:a8:6b:03:
         f7:53:ea:ed:ae:39:81:50:68:88:b9:02:d0:dc:f5:7d:06:f2:
         76:8a:54:95:96:45:33:39:38:ca:bd:e8:86:37:f5:81:9b:e7:
         b5:39:15:22:34:fc:e6:ab:dc:c7:50:62:d5:cd:52:f2:eb:d4:
         70:9c:e0:48:91:ce:02:d1:31:b7:84:10:eb:82:e8:1b:5f:24:
         f4:31:af:22:fb:3c:44:53:12:bb:18:45:3e:65:24:ee:e1:32:
         38:24:43:fc:ff:24:7c:58:bf:74:12:cb:ca:16:92:ca:18:e0:
         ca:de:bb:59:4d:39:3b:7a:62:ad:ab:66:2f:63:bc:e8:af:26:
         cb:bd:0b:f5:ea:7d:5b:05:18:e2:89:3f:bb:6f:25:65:21:5e:
         02:e3:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:32:01 2024 by rpki-client on console-ams.rpki-client.org