Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          nPirkm9ARDfORmOiLYu02a9tv2gb4RgD4JMgJMckX7Y=
Subject key identifier:   04:6B:DB:C0:E5:6F:11:58:CE:6F:B5:66:EB:66:2B:93:B0:6A:FF:29
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       018F46EA09B2905A60192A7DA7DBB720814B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          0C00
Signing time:             Sun 05 May 2024 04:01:34 +0000
Manifest this update:     Sun 05 May 2024 04:01:34 +0000
Manifest next update:     Mon 06 May 2024 04:01:34 +0000
Files and hashes:         1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: EgkhPrOFD+FiLlLiDzlwvTjzNw3iD/Ht1IxcNc94tcI=)
                          2: trfl0QrNf_q3b-82sXnmxK63EWQ.roa (hash: TdwMpB/1uJKch2QQU34XexuZc670PQl77wONv4vjK9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:09:b2:90:5a:60:19:2a:7d:a7:db:b7:20:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: May  5 04:01:34 2024 GMT
            Not After : May  6 04:01:34 2024 GMT
        Subject: CN=046bdbc0e56f1158ce6fb566eb662b93b06aff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:01:c6:ec:ea:f5:64:20:39:81:33:30:a7:
                    75:fd:11:81:c3:98:8b:57:33:4e:12:9a:fe:f1:17:
                    30:10:1e:2f:f4:27:5f:0f:4d:cb:8a:1e:db:3c:c9:
                    b9:97:30:fb:8a:f1:90:a9:41:48:dd:3f:ac:29:d9:
                    d8:9d:77:1b:11:9c:6a:7b:a2:4a:c5:ee:3e:06:58:
                    cf:80:2f:d0:7f:ed:59:12:26:4b:59:e1:b2:9f:4f:
                    86:08:2c:30:48:66:4d:c2:95:99:31:75:8d:51:db:
                    10:35:0b:bd:1e:b7:49:be:3d:9a:3e:44:ab:34:e6:
                    1d:80:91:45:27:4e:dc:18:d3:cd:b3:d8:64:97:eb:
                    57:cc:07:03:8d:9b:3a:c2:87:6e:6d:e3:bc:a2:3f:
                    3a:bb:3c:b1:8d:70:29:13:f2:ee:f2:77:89:bf:4f:
                    3c:0e:3e:86:7b:9d:fc:7c:3a:1f:d3:b0:c6:f5:b4:
                    be:4b:b6:f8:d2:4f:00:ec:54:4e:ea:91:2e:ec:db:
                    82:17:f1:40:5e:e1:42:d9:92:7f:bf:77:5c:a7:64:
                    da:8f:c5:46:4b:7b:a6:9d:ea:7d:6b:1f:1c:09:2a:
                    70:d2:aa:31:00:fc:2a:cb:0f:05:df:00:59:9f:66:
                    0e:38:54:77:9a:6b:0e:63:8c:04:f3:65:8a:48:62:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6B:DB:C0:E5:6F:11:58:CE:6F:B5:66:EB:66:2B:93:B0:6A:FF:29
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:c0:e5:77:94:cb:67:79:87:78:54:b6:98:fb:3d:31:24:
         7e:a2:6d:af:8f:57:c7:89:13:65:e8:dc:4e:34:5f:dc:33:f3:
         93:8c:b1:f9:af:d6:cb:9f:4b:62:d4:ec:cf:b2:c4:61:68:88:
         1f:38:27:a2:aa:8d:01:8e:46:22:99:9a:0d:b7:f0:09:57:55:
         37:54:be:bc:90:98:cd:d4:77:de:ec:f7:d9:7d:45:7a:7f:65:
         f2:3a:ef:f5:18:bb:f3:1e:ef:d0:06:93:12:3c:a4:49:f0:8e:
         66:e5:db:46:6f:8e:65:02:7d:fc:29:ff:6c:b0:05:9b:b3:63:
         41:3a:e9:48:6b:68:75:8b:da:f8:6d:07:1d:e2:fc:ad:f0:fd:
         99:e1:f0:0e:66:41:9d:11:f9:f6:77:39:e7:b5:52:e8:65:96:
         0d:5a:b8:46:a5:f3:0c:12:82:fd:a9:f8:41:df:65:73:32:fd:
         06:01:81:25:e9:24:3f:7a:19:01:0a:44:0b:eb:18:27:ad:95:
         1a:77:97:0f:13:3b:ce:b9:93:9f:35:fc:d6:ae:c7:e8:e8:d3:
         aa:c2:e2:e6:94:46:e0:ed:f0:4b:46:23:ae:c3:90:7a:74:89:
         34:4a:de:6e:59:09:58:ff:09:88:d8:43:70:a1:93:2c:cb:52:
         67:ae:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:55:43 2024 by rpki-client on console-fra.rpki-client.org