Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
File:                     6jcwBj7kzNZaNW3IT8R5awCDJbg.mft (raw, json)
Hash identifier:          5QNQTvwSiLttBkeEGfhbrb9p5NNNa8TbnILGHxRLzfs=
Subject key identifier:   4E:E4:DC:84:FC:89:BB:A1:C5:3E:FF:33:02:57:AF:B3:76:56:2D:58
Authority key identifier: EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8
Certificate issuer:       /CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
Certificate serial:       01901DEBCF6934428308BC9AD7A51B098B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
Manifest number:          070D
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: 6jcwBj7kzNZaNW3IT8R5awCDJbg.crl (hash: pce3Y0GXC60j/VKAPpC1/oraR5jXF4yuXzdczwT+cGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:cf:69:34:42:83:08:bc:9a:d7:a5:1b:09:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3730063ee4ccd65a356dc84fc4796b008325b8
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=4ee4dc84fc89bba1c53eff330257afb376562d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:8b:39:72:ce:c8:e3:97:46:94:65:60:ab:
                    f1:37:42:43:be:f6:06:76:6d:0c:db:88:eb:24:06:
                    1f:5e:b6:7d:92:96:43:0b:be:5c:43:b8:b2:16:7c:
                    fe:12:ea:a9:33:59:7d:20:7b:76:a1:a2:52:b4:a3:
                    5d:fd:e9:c0:ac:b3:90:87:56:86:9d:0c:8e:75:8f:
                    3b:1a:0a:44:27:13:b2:f7:f2:ec:65:e1:28:77:d5:
                    b5:a5:ef:7b:aa:28:a4:9c:46:03:81:3a:f7:87:61:
                    9f:c9:16:54:0b:f2:ee:b0:52:f8:6f:f9:c0:da:64:
                    05:ef:0a:5e:4e:64:db:e6:0e:2a:9b:28:b2:e9:4c:
                    91:5a:0f:bc:06:ca:4b:a9:33:2c:90:b6:a2:29:7f:
                    98:57:27:5f:b7:0e:89:ed:44:fa:31:24:d1:b3:e3:
                    8a:ce:e0:d1:6f:a5:d9:60:5f:6b:4d:e9:5f:03:81:
                    c1:9c:ce:ca:4e:d1:dd:08:fb:dc:3c:a6:e7:2c:49:
                    06:25:d4:c3:af:b6:3e:12:a5:c9:0e:c2:cd:f1:e2:
                    25:3d:9d:b9:74:2e:6f:de:0c:52:cc:25:74:a2:45:
                    b5:96:d4:f0:e5:31:89:21:a7:d3:59:be:15:c7:f7:
                    be:ee:70:39:2f:12:ba:ed:90:ba:25:2c:44:95:98:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:DC:84:FC:89:BB:A1:C5:3E:FF:33:02:57:AF:B3:76:56:2D:58
            X509v3 Authority Key Identifier:
                keyid:EA:37:30:06:3E:E4:CC:D6:5A:35:6D:C8:4F:C4:79:6B:00:83:25:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jcwBj7kzNZaNW3IT8R5awCDJbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1c5d64-8983-485b-95ac-d76c9674500d/1/6jcwBj7kzNZaNW3IT8R5awCDJbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:5b:30:34:46:38:d3:26:3d:c4:47:af:84:68:a6:e6:6b:
         36:23:45:b3:db:c7:8c:aa:96:1e:b8:26:70:61:b6:19:35:ea:
         b5:8e:af:d0:76:fd:39:37:83:35:9c:fc:d3:0b:42:e4:94:5f:
         aa:32:8b:11:df:a3:8a:50:14:ed:47:fc:6e:21:d5:9c:f3:72:
         2b:96:14:38:35:0c:3f:51:12:6b:d5:28:a4:ed:41:3a:20:ea:
         5f:25:78:08:7a:60:39:3b:28:ff:9c:e8:10:09:8b:17:87:73:
         ba:ce:71:8e:ec:a3:df:36:93:a6:9e:2f:d5:eb:0f:42:90:03:
         60:ab:74:43:96:f7:b0:6a:62:a5:72:b8:56:03:64:38:e0:94:
         60:2d:9a:1c:73:36:a7:58:32:60:3c:98:ee:76:9d:8c:1f:fe:
         62:c1:c7:74:cf:40:c3:a3:44:f3:67:04:c4:cc:25:a2:2b:98:
         79:82:64:74:03:75:0b:c0:5d:3f:2e:dc:80:88:ce:1f:c7:0f:
         1b:55:17:ae:81:21:56:74:3a:da:40:c9:d4:3f:76:44:09:c9:
         02:36:d8:59:06:78:71:d1:6f:2f:c1:a0:2b:65:75:c2:e7:bf:
         aa:54:64:24:66:14:97:ae:4b:22:a1:ca:52:a7:52:4d:c2:f3:
         9d:b3:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:53:30 2024 by rpki-client on console-ams.rpki-client.org