Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          kqbeun8gf0pAi0hR+SsZV4yh+Wr6hPyVHxCGeOyzhYE=
Subject key identifier:   26:37:8F:42:E1:38:E3:6A:26:86:94:0D:36:66:09:80:02:B1:34:BF
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       018F87B658B805DC47277E6F60E6964847FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          08B0
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: tCen3HvTpct/FCW6EBbLcOxQMyAgxTNqC6v04QlhYRA=)
                          2: i63p9T_YnjNuY9o34idQuavjRpg.roa (hash: 0NUcWmVkfiAMFAns8e4R658rcO3Jyg4Ctojwz0twDGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:58:b8:05:dc:47:27:7e:6f:60:e6:96:48:47:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=26378f42e138e36a2686940d3666098002b134bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:da:b5:e1:2f:cc:35:20:3a:77:c8:33:f8:
                    84:9e:5e:32:5a:c8:13:05:16:da:25:f1:ff:12:b6:
                    42:9e:79:ad:2e:2c:99:4c:79:b1:36:14:32:0c:56:
                    c3:bb:94:4b:45:57:0c:01:ab:28:47:b4:e1:fd:1e:
                    9b:02:4c:c2:6c:fe:db:ca:f0:a1:4b:c4:88:ef:31:
                    93:59:2f:07:81:93:95:90:3e:45:01:23:f3:14:7c:
                    3f:73:cc:29:f7:bf:5c:21:a0:2a:29:e4:3a:52:8d:
                    bd:57:ba:9f:61:bf:d0:0a:03:1e:04:fb:90:7b:c4:
                    34:af:5a:15:cf:46:62:dc:f9:f9:ec:42:c3:5f:2c:
                    14:9b:25:12:97:d6:49:3d:d4:2c:ca:ea:59:90:a6:
                    71:d5:0c:a7:0d:2e:c2:a6:ed:6f:9f:25:4d:f1:c3:
                    1d:1f:90:71:67:88:fd:12:34:2d:e5:1f:1e:cd:5f:
                    3b:7c:63:df:50:18:70:ce:cd:12:9a:4e:f3:cf:c4:
                    77:c0:17:04:cf:a4:c1:91:46:59:d1:e3:bc:d3:7e:
                    62:c2:32:2b:79:ff:7c:f6:61:78:c8:38:aa:d4:bb:
                    87:4a:28:29:cb:39:af:cc:14:af:63:79:a5:80:76:
                    f5:bf:94:bb:7f:ac:3e:bb:53:8a:1e:0a:c7:9f:4d:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:8F:42:E1:38:E3:6A:26:86:94:0D:36:66:09:80:02:B1:34:BF
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:4c:73:22:29:ab:2a:7c:9a:86:fb:64:7c:25:1f:7d:42:
         82:ca:6a:74:12:af:d4:36:b7:df:cb:a7:b0:0d:3a:54:4f:e0:
         a7:e7:5e:2a:d5:66:6f:a2:a2:15:05:0c:4b:31:de:e4:89:74:
         e9:75:c2:31:1b:99:f5:28:59:aa:4a:ff:ee:d7:b2:14:e0:d1:
         f4:3a:1e:c9:80:35:2e:bf:a1:94:4d:a8:e0:32:42:20:25:23:
         8e:86:e5:65:96:88:64:58:0c:e0:4a:07:9b:5d:28:0c:1f:23:
         84:f5:ab:e3:b1:5d:cd:af:e8:2a:33:8e:58:21:31:83:5a:93:
         b6:b8:52:65:bb:af:98:07:70:74:d7:05:04:f4:77:95:39:6c:
         c1:83:7f:0c:6d:52:a6:56:75:26:7b:67:c7:7a:44:5f:b4:cc:
         ba:7b:26:2d:88:7b:a1:45:6d:3e:78:e8:f9:c7:7a:0b:d6:09:
         d7:aa:81:eb:b2:eb:b4:e9:c0:3e:3e:d5:f2:bf:d1:8e:54:20:
         aa:ff:33:39:cb:e2:3e:c3:5c:a7:6a:5f:61:71:a7:a6:93:69:
         34:51:73:fd:6f:32:17:d7:64:f9:2f:81:ee:dc:44:aa:34:a6:
         22:f7:c3:fa:81:34:b3:af:a8:38:79:df:a9:7d:ee:b1:13:d0:
         9c:cf:74:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htli4BdxHJ35vYOaWSEf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjQwNTE3MTgwMDI1WhcNMjQwNTE4MTgwMDI1WjAzMTEwLwYDVQQD
EygyNjM3OGY0MmUxMzhlMzZhMjY4Njk0MGQzNjY2MDk4MDAyYjEzNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsjateEvzDUgOnfIM/iEnl4yWsgT
BRbaJfH/ErZCnnmtLiyZTHmxNhQyDFbDu5RLRVcMAasoR7Th/R6bAkzCbP7byvCh
S8SI7zGTWS8HgZOVkD5FASPzFHw/c8wp979cIaAqKeQ6Uo29V7qfYb/QCgMeBPuQ
e8Q0r1oVz0Zi3Pn57ELDXywUmyUSl9ZJPdQsyupZkKZx1QynDS7Cpu1vnyVN8cMd
H5BxZ4j9EjQt5R8ezV87fGPfUBhwzs0Smk7zz8R3wBcEz6TBkUZZ0eO8035iwjIr
ef989mF4yDiq1LuHSigpyzmvzBSvY3mlgHb1v5S7f6w+u1OKHgrHn02m6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY3j0LhOONqJoaUDTZmCYACsTS/MB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzRMcyIp
qyp8mob7ZHwlH31CgspqdBKv1Da338unsA06VE/gp+deKtVmb6KiFQUMSzHe5Il0
6XXCMRuZ9ShZqkr/7teyFODR9DoeyYA1Lr+hlE2o4DJCICUjjoblZZaIZFgM4EoH
m10oDB8jhPWr47Fdza/oKjOOWCExg1qTtrhSZbuvmAdwdNcFBPR3lTlswYN/DG1S
plZ1Jntnx3pEX7TMunsmLYh7oUVtPnjo+cd6C9YJ16qB67LrtOnAPj7V8r/RjlQg
qv8zOcviPsNcp2pfYXGnppNpNFFz/W8yF9dk+S+B7txEqjSmIvfD+oE0s6+oOHnf
qX3usRPQnM90zg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:06:02 2024 by rpki-client on console-ams.rpki-client.org