Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          peKuYzNLHsmf9fxTvfmKb1LpK0mgbzzBJDSzypTdaGg=
Subject key identifier:   52:8F:BA:A6:1A:E0:C8:E2:23:BC:D6:2B:7F:F4:77:49:E0:79:2A:77
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       019238B87AFECDC5D09FE7244B7D5C2FE3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          69
Signing time:             Sat 28 Sep 2024 13:01:07 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:07 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:07 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: 4OH62COptqVAw4zco87qCFTnHcbZVDjRkzTB5iKrD3c=)
                          2: XnwBPF6v1-qMOmH6FW7LX4lIySs.roa (hash: cPNcpcRrU5rBA2C7r3m3l+bjAUAeoQhRmOGZFJPgPhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:7a:fe:cd:c5:d0:9f:e7:24:4b:7d:5c:2f:e3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: Sep 28 13:01:07 2024 GMT
            Not After : Sep 29 13:01:07 2024 GMT
        Subject: CN=528fbaa61ae0c8e223bcd62b7ff47749e0792a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:0b:1b:90:48:e9:e3:5c:53:64:3c:94:8a:
                    3d:1c:79:44:17:72:26:61:fe:50:7d:24:e9:88:ce:
                    d7:d8:a7:52:d6:cb:bb:19:82:57:49:b9:71:84:f1:
                    a0:05:20:b7:ad:50:49:3a:b3:31:3c:59:a4:49:66:
                    39:1c:4f:1f:f8:05:8b:5e:40:be:70:2f:10:16:6c:
                    e3:c6:8e:57:ff:04:c9:da:2f:ee:ca:1f:67:1c:20:
                    9d:af:c9:c2:7e:14:88:24:44:62:56:d5:38:f8:9b:
                    a1:ed:76:ab:4b:c2:7d:63:ba:e3:7f:ab:22:2e:86:
                    f1:84:63:b1:fb:a7:cd:06:04:c0:19:43:c7:3f:06:
                    59:a3:0c:f3:fd:98:16:46:fa:de:69:44:83:be:44:
                    d3:5c:2b:2d:8e:70:20:ef:ad:3c:92:bd:55:ba:59:
                    f4:f6:53:f7:07:26:30:05:c4:f5:63:a0:b4:cb:2f:
                    6b:78:a1:ab:07:a8:29:71:db:2c:17:8e:e0:c2:88:
                    7d:af:b9:a8:cc:bf:4c:5e:c2:3f:70:fb:d0:c0:4a:
                    22:65:8d:fc:78:19:ba:c0:4b:d0:82:32:cb:2a:eb:
                    f5:ff:64:b1:3f:52:85:07:8e:67:46:9e:f4:bc:86:
                    a9:8b:03:0c:fd:7b:00:bf:ec:be:af:52:94:00:72:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8F:BA:A6:1A:E0:C8:E2:23:BC:D6:2B:7F:F4:77:49:E0:79:2A:77
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:16:9c:18:50:d7:63:16:f7:0e:55:39:e5:1c:67:3b:d9:
         7f:66:c2:da:82:98:52:6f:52:84:ca:7b:be:f4:91:a2:e8:67:
         bb:6c:e6:69:d1:95:62:af:4a:79:5f:14:64:fa:2d:7a:42:1c:
         5c:6b:b1:e2:dd:58:33:7d:b3:32:37:b9:2c:82:a9:34:a9:2d:
         a3:17:47:e7:fa:04:f9:b6:2f:7a:be:e6:d6:f4:95:d1:bf:8e:
         db:17:73:97:1f:21:44:12:d2:17:15:3f:fb:06:7f:e9:24:d2:
         a7:67:3e:b8:2b:6d:90:e7:6d:fc:b6:e0:ea:a0:9f:fe:fb:b3:
         56:36:8d:4a:51:37:42:5d:d5:2a:18:62:7b:68:61:dd:38:e7:
         27:30:b3:85:61:c7:eb:8b:b7:30:12:62:99:20:7b:27:2e:fe:
         99:e0:03:06:4f:34:a7:9c:f1:2a:cd:ca:8b:83:5d:77:41:5e:
         c8:4c:cd:88:53:5b:82:71:96:f2:0c:0c:f8:ed:10:ff:41:02:
         29:ed:d7:e4:e6:2d:29:ac:c8:a1:f3:d6:58:5a:ba:5c:df:7c:
         e0:e6:a9:a5:e1:d1:d2:72:79:28:8c:6e:c4:87:4e:b3:54:90:
         5c:1a:d2:f2:e8:db:9e:20:d3:e0:75:e1:89:78:c6:86:d5:10:
         b8:1d:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:09:49 2024 by rpki-client on console-ams.rpki-client.org