Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File:                     a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier:          rpvniV7zlLygPPwfZBJfrlOFiuYedQGx8d+SAOZw/8o=
Subject key identifier:   EC:13:C1:26:AC:0B:32:82:88:FE:17:A7:D1:65:0C:F8:13:77:A4:45
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer:       /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial:       01901CA12808144CE45B38FB807977F7539A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number:          6A
Signing time:             Sat 15 Jun 2024 16:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:41 +0000
Files and hashes:         1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: 1UynfMqsrp7ne4d9W5xxyt5neqkXKwW6BerhIPzV/aE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:28:08:14:4c:e4:5b:38:fb:80:79:77:f7:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
        Validity
            Not Before: Jun 15 16:00:41 2024 GMT
            Not After : Jun 16 16:00:41 2024 GMT
        Subject: CN=ec13c126ac0b328288fe17a7d1650cf81377a445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:d1:c0:5f:5e:d1:7c:51:64:54:98:74:17:
                    7a:6f:6b:a0:d2:41:26:b3:80:77:9e:72:dd:8b:15:
                    92:40:2a:cb:87:96:54:3b:c0:f5:af:85:1e:55:5a:
                    88:41:09:1a:77:7a:38:77:da:32:29:ba:01:b7:bc:
                    c7:71:5b:6b:a2:5c:e7:4c:f7:73:1a:da:6e:e2:89:
                    be:e4:7e:d9:52:c1:aa:3d:7b:08:ff:61:60:99:d6:
                    e7:77:e4:3f:4c:27:b8:81:bb:02:7c:cb:86:75:40:
                    bb:0c:3c:fa:b3:d5:4d:b4:d7:a1:0c:e0:b5:f0:82:
                    ec:63:1b:2d:52:84:bd:84:ac:41:e5:eb:42:4a:5c:
                    d6:0c:3e:93:e4:e2:13:87:49:5b:1a:f3:38:fc:8b:
                    81:f7:27:cc:11:c4:ab:43:59:67:d6:bf:e9:c9:2e:
                    21:48:63:43:67:08:fc:c1:37:98:2c:f6:8f:7d:57:
                    5e:e8:f0:c0:1b:97:ff:d0:c8:65:ce:5c:cb:09:77:
                    60:4c:a9:3b:77:92:01:28:3b:27:f9:6a:22:24:0b:
                    71:33:d7:4a:01:60:b3:c5:57:f7:ac:02:46:51:5a:
                    4a:ee:4e:1a:10:cf:5f:4a:cf:a2:df:06:14:1d:66:
                    f9:d5:d8:b9:b9:ca:a6:f9:59:10:90:93:c3:99:fc:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:13:C1:26:AC:0B:32:82:88:FE:17:A7:D1:65:0C:F8:13:77:A4:45
            X509v3 Authority Key Identifier:
                keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:44:3c:92:fd:78:bd:58:a3:65:d5:b5:c2:e0:a1:8b:e6:
         20:dc:59:b5:35:b8:c6:45:ec:8c:4d:40:f1:98:6a:94:fd:68:
         fe:61:24:53:ab:d8:2a:d1:ba:f1:3f:b3:d3:5e:be:8f:dd:12:
         d4:4b:8c:26:59:87:5d:ca:86:11:bc:80:dc:02:a8:32:5f:15:
         92:d6:bd:1b:db:58:22:6d:ab:64:d5:50:30:b5:a8:d8:ea:b1:
         16:ac:94:f3:51:6e:5e:d7:f0:0b:f8:df:4c:9a:dc:24:d5:de:
         d0:fe:07:d6:bf:f3:99:17:36:b0:03:2c:dd:45:59:b9:c3:d9:
         fb:59:2e:90:2f:7c:39:5b:99:d8:5f:8e:65:4d:46:af:66:d8:
         f3:a1:c6:97:11:9e:da:01:8b:6b:a9:af:05:44:57:84:55:b7:
         a4:11:93:a5:c5:98:b2:d5:db:53:ad:70:ea:5d:56:03:1b:03:
         1d:db:d8:cc:d2:09:5f:99:c1:c4:34:cd:9e:8e:f5:9f:a0:46:
         20:a2:d1:9a:05:12:7d:d8:87:7d:a3:66:95:df:ea:1d:bb:3b:
         5c:20:5d:b1:50:0f:9e:31:29:5c:4c:db:a5:3e:38:36:91:d1:
         87:35:cf:a1:31:97:81:28:3f:96:66:57:40:fb:74:27:d5:7a:
         10:3a:87:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoSgIFEzkWzj7gHl391OaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZTQ5ZTVhMTRiMGNiZjQxMDRjMDM0YjU3MmEwZjlmMTU0
YTk5NzUwHhcNMjQwNjE1MTYwMDQxWhcNMjQwNjE2MTYwMDQxWjAzMTEwLwYDVQQD
EyhlYzEzYzEyNmFjMGIzMjgyODhmZTE3YTdkMTY1MGNmODEzNzdhNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd7RwF9e0XxRZFSYdBd6b2ug0kEm
s4B3nnLdixWSQCrLh5ZUO8D1r4UeVVqIQQkad3o4d9oyKboBt7zHcVtrolznTPdz
Gtpu4om+5H7ZUsGqPXsI/2Fgmdbnd+Q/TCe4gbsCfMuGdUC7DDz6s9VNtNehDOC1
8ILsYxstUoS9hKxB5etCSlzWDD6T5OITh0lbGvM4/IuB9yfMEcSrQ1ln1r/pyS4h
SGNDZwj8wTeYLPaPfVde6PDAG5f/0MhlzlzLCXdgTKk7d5IBKDsn+WoiJAtxM9dK
AWCzxVf3rAJGUVpK7k4aEM9fSs+i3wYUHWb51di5ucqm+VkQkJPDmfzK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwTwSasCzKCiP4Xp9FlDPgTd6RFMB8GA1UdIwQY
MBaAFGvknloUsMv0EEwDS1cqD58VSpl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUt
YWI5OTdmYzY1MGU0LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUtYWI5OTdmYzY1MGU0
LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRJEPJL9
eL1Yo2XVtcLgoYvmINxZtTW4xkXsjE1A8ZhqlP1o/mEkU6vYKtG68T+z016+j90S
1EuMJlmHXcqGEbyA3AKoMl8Vkta9G9tYIm2rZNVQMLWo2OqxFqyU81FuXtfwC/jf
TJrcJNXe0P4H1r/zmRc2sAMs3UVZucPZ+1kukC98OVuZ2F+OZU1Gr2bY86HGlxGe
2gGLa6mvBURXhFW3pBGTpcWYstXbU61w6l1WAxsDHdvYzNIJX5nBxDTNno71n6BG
IKLRmgUSfdiHfaNmld/qHbs7XCBdsVAPnjEpXEzbpT44NpHRhzXPoTGXgSg/lmZX
QPt0J9V6EDqHIg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:16:59 2024 by rpki-client on console-ams.rpki-client.org