Manifest

$ rpki-client -vvf rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
File:                     EF358042A5E1BF7DF7C3C398722ED00286078D06.mft (raw, json)
Hash identifier:          8HlBzAXoLYLDu9UxNTyHleZojInpLOgwhCnJoQJx2/A=
Subject key identifier:   AF:36:3D:CA:79:AE:BF:60:8A:91:4F:B7:22:DC:E7:32:96:DA:FC:B6
Authority key identifier: EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06
Certificate issuer:       /CN=ef358042a5e1bf7df7c3c398722ed00286078d06
Certificate serial:       1F428E462DFEAE49A1D8EADE1809F022006EF128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
Subject info access:      rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
Manifest number:          F6
Signing time:             Wed 04 Oct 2023 08:15:17 +0000
Manifest this update:     Wed 04 Oct 2023 08:10:17 +0000
Manifest next update:     Thu 05 Oct 2023 11:11:17 +0000
Files and hashes:         1: AS211604.asa (hash: +hBrhjY9oKQGnlYf+TUO2oBH0xE+VjaqjHqgFBez12U=)
                          2: EF358042A5E1BF7DF7C3C398722ED00286078D06.crl (hash: VzztDqJ/rUOsvkYhv/FfUAe7igjFeywdA+uh+NCpfEU=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl
                          rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Oct 2023 02:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:42:8e:46:2d:fe:ae:49:a1:d8:ea:de:18:09:f0:22:00:6e:f1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef358042a5e1bf7df7c3c398722ed00286078d06
        Validity
            Not Before: Oct  4 08:10:17 2023 GMT
            Not After : Oct  5 11:11:17 2023 GMT
        Subject: CN=AF363DCA79AEBF608A914FB722DCE73296DAFCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:38:9e:eb:f1:14:d9:a8:3c:8a:a7:c3:9a:
                    6d:b6:7a:02:30:53:54:3d:3f:42:bc:d7:18:8d:a9:
                    db:af:39:30:b0:1c:41:18:e3:af:5b:3c:ae:8d:b3:
                    32:a8:27:df:bb:27:c3:82:74:68:6c:bc:b0:20:07:
                    1d:4b:0b:4e:a2:b3:0f:7e:31:37:8c:43:fb:d7:49:
                    2b:b7:ac:0b:b8:4b:f1:d0:b0:a5:7b:8e:eb:95:09:
                    30:e5:58:e0:78:3b:e9:41:96:a0:a6:f6:02:1a:d9:
                    2d:5d:53:96:07:b9:89:18:77:db:7c:43:75:3d:a4:
                    df:19:ac:53:5f:0f:23:c6:2c:ce:1d:53:81:c0:c4:
                    2e:b6:e7:f3:6d:57:42:21:e7:b8:05:0d:3f:f9:69:
                    77:93:b7:e1:ec:e1:8c:62:7a:e5:4e:b1:1e:40:cd:
                    dc:7e:8d:31:34:ba:41:1c:19:7c:ae:77:5f:9f:a4:
                    e4:ff:14:64:d8:d7:df:64:70:ff:37:15:ff:84:b9:
                    35:08:79:eb:15:60:77:72:8e:81:90:96:72:2b:d5:
                    6b:fc:c1:bc:fa:27:f1:83:3e:74:bc:b2:cf:74:95:
                    7c:e1:24:52:01:9e:1a:f9:5c:c3:16:75:8a:35:1d:
                    da:7f:30:b9:16:7e:40:1f:ae:1f:71:78:41:0b:6c:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:3D:CA:79:AE:BF:60:8A:91:4F:B7:22:DC:E7:32:96:DA:FC:B6
            X509v3 Authority Key Identifier:
                keyid:EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:73:2f:48:12:f7:90:2e:61:bf:34:2a:9c:4a:71:c6:4a:e4:
         79:32:7b:c0:3a:78:dd:bc:4a:c2:4e:70:6b:d1:24:00:60:6c:
         1a:97:9c:af:3d:78:fd:c6:64:1f:73:46:35:c0:7d:69:19:62:
         cb:5d:b5:c0:01:34:8f:f6:09:de:02:68:a5:35:60:01:3c:cd:
         a7:ba:ab:fe:d1:56:58:97:01:b0:e0:85:10:f0:c4:47:58:71:
         55:c3:a3:3d:5f:46:f6:a8:19:7f:60:e2:26:9f:cc:cb:de:94:
         a8:be:4d:45:33:04:d6:9d:8b:fd:b5:1e:0d:54:4c:b8:68:2f:
         fa:cd:6a:ea:5f:4c:34:10:4f:bc:f5:e2:56:d6:27:d2:b7:66:
         04:4c:aa:6e:eb:b7:2e:0b:8d:81:d8:99:13:89:6b:c3:82:6a:
         fc:8c:9a:81:6d:61:4b:99:51:98:ca:eb:2e:8b:91:42:50:64:
         c9:2d:7e:e1:8e:5c:ae:3f:dc:b3:03:77:05:9c:f3:9a:03:e0:
         85:9a:31:40:e2:4d:8d:4d:3d:3d:07:32:52:03:7c:80:5b:a4:
         9e:f6:7b:7d:4a:b2:f0:99:4d:88:01:e9:e7:f3:24:54:2d:88:
         af:23:0e:24:d0:55:df:a9:bf:af:c7:b5:ca:db:dc:03:ef:24:
         a6:c1:a7:73
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgIUH0KORi3+rkmh2OreGAnwIgBu8SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYzNTgwNDJhNWUxYmY3ZGY3YzNjMzk4NzIyZWQwMDI4
NjA3OGQwNjAeFw0yMzEwMDQwODEwMTdaFw0yMzEwMDUxMTExMTdaMDMxMTAvBgNV
BAMTKEFGMzYzRENBNzlBRUJGNjA4QTkxNEZCNzIyRENFNzMyOTZEQUZDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uTie6/EU2ag8iqfDmm22egIw
U1Q9P0K81xiNqduvOTCwHEEY469bPK6NszKoJ9+7J8OCdGhsvLAgBx1LC06isw9+
MTeMQ/vXSSu3rAu4S/HQsKV7juuVCTDlWOB4O+lBlqCm9gIa2S1dU5YHuYkYd9t8
Q3U9pN8ZrFNfDyPGLM4dU4HAxC625/NtV0Ih57gFDT/5aXeTt+Hs4YxieuVOsR5A
zdx+jTE0ukEcGXyud1+fpOT/FGTY199kcP83Ff+EuTUIeesVYHdyjoGQlnIr1Wv8
wbz6J/GDPnS8ss90lXzhJFIBnhr5XMMWdYo1Hdp/MLkWfkAfrh9xeEELbIODAgMB
AAGjggHXMIIB0zAdBgNVHQ4EFgQUrzY9ynmuv2CKkU+3ItznMpba/LYwHwYDVR0j
BBgwFoAU7zWAQqXhv333w8OYci7QAoYHjQYwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzAvRUYz
NTgwNDJBNUUxQkY3REY3QzNDMzk4NzIyRUQwMDI4NjA3OEQwNi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxULzd6V0FRcVhodjMzM3c4T1ljaTdRQW9ZSGpRWS5jZXIw
aAYIKwYBBQUHAQsEXDBaMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIxMTYwNC8wL0VGMzU4MDQyQTVFMUJGN0RGN0MzQzM5ODcyMkVEMDAyODYw
NzhEMDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCIcy9IEveQLmG/NCqcSnHGSuR5MnvAOnjdvErCTnBr
0SQAYGwal5yvPXj9xmQfc0Y1wH1pGWLLXbXAATSP9gneAmilNWABPM2nuqv+0VZY
lwGw4IUQ8MRHWHFVw6M9X0b2qBl/YOImn8zL3pSovk1FMwTWnYv9tR4NVEy4aC/6
zWrqX0w0EE+89eJW1ifSt2YETKpu67cuC42B2JkTiWvDgmr8jJqBbWFLmVGYyusu
i5FCUGTJLX7hjlyuP9yzA3cFnPOaA+CFmjFA4k2NTT09BzJSA3yAW6Se9nt9SrLw
mU2IAenn8yRULYivIw4k0FXfqb+vx7XK29wD7ySmwadz
-----END CERTIFICATE-----
Generated at Wed Oct 4 08:43:02 2023 by rpki-client on console-fra.rpki-client.org