Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          qGewhj3HUHxpdP4O7IjAOIi2BeWYv8rZOpyco5KX1hc=
Subject key identifier:   D8:53:85:AD:22:B0:7E:12:DB:AC:EB:A1:37:F6:6C:B8:34:90:45:86
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       3F6ECB87875711C6DEE43767BCC14D824D6350DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          BB
Signing time:             Sun 28 Apr 2024 14:32:12 +0000
Manifest this update:     Sun 28 Apr 2024 14:27:11 +0000
Manifest next update:     Mon 29 Apr 2024 15:23:11 +0000
Files and hashes:         1: AS215028.asa (hash: 5MRXwX0QbnG9JLwOFWrjaLXXZYC/pxYrzhyIa9aB9QY=)
                          2: AS216107.asa (hash: CVnxmMoP9h72QVVcvr9k9O4OeSLFAr0ltQ8AkIIxQbU=)
                          3: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: Co/i5JjtxmlDGkSP8kDjXrhFntGc4PabPIotHVNAQ7g=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6e:cb:87:87:57:11:c6:de:e4:37:67:bc:c1:4d:82:4d:63:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Apr 28 14:27:11 2024 GMT
            Not After : Apr 29 15:23:11 2024 GMT
        Subject: CN=D85385AD22B07E12DBACEBA137F66CB834904586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:2e:ff:b2:d9:01:c6:52:b8:d6:0d:1c:6a:c8:
                    4e:0d:64:a3:c8:d1:fb:b1:87:c6:81:16:95:e8:b0:
                    cf:f1:5f:56:2b:53:8b:3f:db:2e:29:73:68:7b:3e:
                    9a:ac:72:31:1d:5a:40:95:24:08:1e:09:a8:fc:05:
                    e8:e7:83:5c:e5:01:f7:38:5f:a7:02:a1:ad:80:5b:
                    48:5c:c6:87:64:ac:73:55:d0:e6:70:f9:1b:67:39:
                    2f:ab:f3:26:a0:4e:49:2d:ca:57:35:ff:ad:b2:4c:
                    e8:58:f2:f3:d9:fc:8c:2d:2f:7e:15:1a:95:af:9d:
                    4d:60:94:cf:9c:89:63:06:33:28:00:a2:1e:66:3a:
                    ac:c4:70:f7:aa:36:73:0b:15:19:69:ad:45:20:92:
                    df:11:95:14:6d:3d:15:79:88:de:7c:e3:f5:29:4a:
                    8e:c8:16:ec:5a:04:bc:eb:44:95:59:9d:bb:2e:e1:
                    e8:d3:e5:e7:4b:8d:44:6a:67:8a:f6:1d:ca:b9:68:
                    f5:b3:6e:75:7d:b0:b2:40:12:b8:5b:7d:c8:8b:45:
                    55:59:3f:3d:68:61:e4:10:e4:98:6f:f0:f8:e6:ee:
                    17:8f:90:71:40:be:96:6a:f6:35:d3:ce:0b:ec:89:
                    96:61:f0:cb:58:c6:2e:2f:bc:21:bc:29:76:80:40:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:85:AD:22:B0:7E:12:DB:AC:EB:A1:37:F6:6C:B8:34:90:45:86
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:42:7e:ad:ee:a6:f0:8d:57:0e:fa:f2:5a:97:dd:32:6c:
         3e:18:10:a8:f5:2f:2c:23:fe:5a:b0:83:09:e8:db:c3:fb:d7:
         a5:d4:5f:4d:a5:b5:fb:80:69:a1:5b:5a:66:c6:cb:38:bd:49:
         75:a8:21:bc:a0:73:0b:ee:96:ea:8b:f2:98:1c:30:e4:02:16:
         99:95:19:40:40:e9:3b:b6:15:c3:21:e3:f4:1b:95:7c:c2:3a:
         9a:78:0a:5d:59:86:80:49:4e:d8:9c:03:74:d9:cc:38:3b:ac:
         a0:7b:43:f9:14:fe:53:7a:83:a0:76:04:0f:e0:d0:d5:21:fb:
         b5:7b:cb:ba:30:3e:2b:b5:c9:e7:23:1c:38:60:36:6b:dd:94:
         fe:e3:eb:20:c8:cd:45:2f:72:2f:46:b5:ac:eb:b4:5b:36:22:
         de:82:a3:29:df:5e:59:5d:67:1e:7e:4a:76:5b:48:c5:08:63:
         3f:de:cd:5b:56:c1:e9:67:ab:0a:8e:98:ec:55:1e:c0:dc:2f:
         ba:c0:a1:3d:b2:05:fb:9d:25:c3:0f:de:c2:d9:33:81:f7:9d:
         29:95:64:a6:95:ef:87:d2:90:8a:3e:ff:fb:fe:2e:48:ca:fb:
         07:71:f5:47:1c:07:7d:3f:00:41:ac:6a:6b:0f:3e:71:59:b7:
         ba:fa:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 18:14:12 2024 by rpki-client on console-fra.rpki-client.org