Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          +LrCoH+j2kvC0rs13BVh/QM++Jm6ZmDCNmeuMvgQSNc=
Subject key identifier:   2E:43:93:0A:B3:C8:01:9B:14:B7:A6:79:AA:17:6E:53:3D:F6:55:D4
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       6BC900BFBA018E1F75A1BE2129910572F57A14FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          BE
Signing time:             Tue 26 Nov 2024 21:08:54 +0000
Manifest this update:     Tue 26 Nov 2024 21:03:52 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:52 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: 1wN4MVpB1uSBc5wcRpy+LZWrurCb+VNrH2UrDq/RAOU=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:00:bf:ba:01:8e:1f:75:a1:be:21:29:91:05:72:f5:7a:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: Nov 26 21:03:52 2024 GMT
            Not After : Nov 28 00:00:52 2024 GMT
        Subject: CN=2E43930AB3C8019B14B7A679AA176E533DF655D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f6:4a:31:3d:46:dd:34:41:f6:7b:cd:8f:41:
                    9b:17:4d:c7:9a:81:9b:57:1e:02:b3:63:83:8c:42:
                    2a:72:1e:52:2a:03:4f:77:3b:7f:44:b4:68:80:13:
                    f5:43:96:4e:d3:f9:61:3b:46:3f:ee:37:1e:10:e6:
                    11:3a:5a:20:2c:b8:84:82:09:ef:da:ef:80:a2:a5:
                    17:11:ca:50:73:d7:ca:7b:22:01:85:16:9f:45:75:
                    6e:0c:fa:00:2f:d1:cf:b2:f4:43:8b:4c:7a:7a:71:
                    1b:98:1d:eb:f3:20:a5:c5:af:54:33:ea:27:ca:02:
                    4c:15:35:7a:8c:63:99:34:77:20:ab:21:e5:9a:e3:
                    18:06:e1:0e:e1:c6:10:99:26:49:64:16:e7:58:d3:
                    c4:5f:a4:f8:36:75:93:9b:8d:da:4b:78:29:46:6f:
                    b1:9b:99:ac:d0:18:73:de:f7:8b:09:6a:0e:f1:52:
                    91:39:fb:e2:80:d8:27:a4:20:c9:7d:a5:fe:e9:c8:
                    0e:1a:e7:3e:60:8a:43:1b:46:22:77:b8:9a:e8:f2:
                    74:92:9c:1f:20:5a:a0:81:43:52:b3:54:dc:1f:ba:
                    65:62:44:00:b6:39:ab:ca:25:a9:d1:e5:c3:25:8c:
                    02:3f:4b:64:9f:0f:bf:7b:7c:2a:c0:b0:b3:25:d6:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:93:0A:B3:C8:01:9B:14:B7:A6:79:AA:17:6E:53:3D:F6:55:D4
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:56:b9:e3:42:2a:fb:9d:1b:d0:27:4f:4e:c5:8d:c9:b9:
         34:f7:c7:38:26:50:c1:55:4d:41:58:6b:9f:75:9c:2a:a2:7c:
         00:cc:cd:5d:b8:0d:7e:2b:10:50:25:40:82:d6:87:fe:f8:9d:
         be:25:ca:fb:e4:90:c8:a9:1b:8e:a7:2f:1b:03:c1:96:be:23:
         68:7f:fd:fd:f3:e3:a2:ae:a3:1c:66:9d:f0:3a:71:44:8c:cd:
         fb:90:4f:70:54:80:4d:a0:ed:a6:d7:34:06:60:f0:4f:78:f3:
         64:ef:ec:b0:df:8b:2a:af:0d:f6:cf:7e:e3:68:a1:52:58:e7:
         0a:26:75:6d:cc:c4:0d:f6:6e:21:e5:f5:42:0d:80:92:41:d4:
         d5:0a:af:93:e3:75:df:2b:53:5a:3f:ee:5d:a3:65:7c:59:f6:
         70:e7:65:23:19:63:1a:94:49:86:2b:61:e7:5e:c1:8b:b2:cf:
         aa:d6:62:f2:46:b4:c3:0b:05:af:23:dd:7e:e2:5a:a2:58:3b:
         5b:33:ee:60:d8:b6:e7:ca:2d:c1:1b:3e:ec:f4:2e:bb:0d:a1:
         40:c9:54:92:43:ec:92:59:aa:e6:bc:7a:20:a8:bd:9b:7b:40:
         f7:b1:28:2a:0a:a1:cb:2f:8c:18:19:a3:59:6c:90:08:2f:7f:
         d5:85:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:43:44 2024 by rpki-client on console-fra.rpki-client.org