Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.mft
File:                     6gJBRDagVawm5qTe-gKywNYqur0.mft (raw, json)
Hash identifier:          13ZBtTZs0psaBapJfx1G1xUi7wB78hkJjncDxpbXb24=
Subject key identifier:   5F:FF:43:0A:F5:36:D8:A2:77:E8:BF:75:05:95:15:26:BF:19:72:AF
Authority key identifier: EA:02:41:44:36:A0:55:AC:26:E6:A4:DE:FA:02:B2:C0:D6:2A:BA:BD
Certificate issuer:       /CN=ea02414436a055ac26e6a4defa02b2c0d62ababd
Certificate serial:       018F1936C102B47AB420A1AB58CB9D4D7037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6gJBRDagVawm5qTe-gKywNYqur0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.mft
Manifest number:          0CE0
Signing time:             Fri 26 Apr 2024 07:02:49 +0000
Manifest this update:     Fri 26 Apr 2024 07:02:49 +0000
Manifest next update:     Sat 27 Apr 2024 07:02:49 +0000
Files and hashes:         1: 6gJBRDagVawm5qTe-gKywNYqur0.crl (hash: R1v2GD1/EqseBLpvqMRSZM1X3ClCmBAk8eOu49PnUh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6gJBRDagVawm5qTe-gKywNYqur0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:36:c1:02:b4:7a:b4:20:a1:ab:58:cb:9d:4d:70:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea02414436a055ac26e6a4defa02b2c0d62ababd
        Validity
            Not Before: Apr 26 07:02:49 2024 GMT
            Not After : Apr 27 07:02:49 2024 GMT
        Subject: CN=5fff430af536d8a277e8bf7505951526bf1972af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:21:ee:3b:c1:44:b6:fe:74:9a:a6:64:f5:
                    38:fd:c8:d1:ef:bc:70:a3:77:ee:55:f3:38:68:f0:
                    cc:bf:83:c1:ca:71:45:46:90:78:2f:39:ed:fa:12:
                    29:43:b9:84:ba:c2:c1:95:0b:6a:94:f9:73:e6:6c:
                    e9:58:5f:7d:af:6d:eb:5a:7d:f3:1c:3a:58:c8:1f:
                    e8:d5:db:84:a2:dd:4a:ee:3d:61:dd:7f:0c:dd:58:
                    5e:94:12:20:ee:e7:4f:8b:09:4a:9d:29:9d:92:73:
                    d2:3c:19:97:f7:10:e3:d1:10:fe:63:b1:d5:60:81:
                    7a:04:67:fb:6e:ce:2e:46:08:5c:56:0f:a3:76:67:
                    52:09:d9:e3:92:19:10:a8:cc:95:1d:fa:51:e5:54:
                    30:03:f2:40:2b:74:06:c1:60:e7:30:e3:ea:ec:69:
                    0d:a3:d3:a7:02:35:ff:f3:ba:b9:58:d7:e4:74:27:
                    da:60:a1:b3:9c:42:36:6b:da:19:6c:5b:61:fc:0f:
                    3e:c7:cc:00:cb:74:51:5b:d8:40:5b:9d:db:48:dd:
                    b8:5b:e6:9d:43:1b:67:e2:ff:f8:12:aa:90:de:df:
                    e4:37:85:82:b4:48:6c:43:5b:9d:65:00:61:bc:d4:
                    4b:ab:77:0e:68:97:95:16:69:0e:20:13:11:d6:e0:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FF:43:0A:F5:36:D8:A2:77:E8:BF:75:05:95:15:26:BF:19:72:AF
            X509v3 Authority Key Identifier:
                keyid:EA:02:41:44:36:A0:55:AC:26:E6:A4:DE:FA:02:B2:C0:D6:2A:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gJBRDagVawm5qTe-gKywNYqur0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/86f654-119e-4f37-af13-37993b87d056/1/6gJBRDagVawm5qTe-gKywNYqur0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:3b:88:ea:b7:06:36:b2:12:ce:b4:d5:8f:9e:78:ca:2d:
         0b:99:dc:13:02:2c:a8:c7:14:9b:52:e7:40:d1:a5:8e:f9:d8:
         8a:39:e7:02:51:0d:b1:83:44:2d:13:f0:e0:f3:67:a8:f4:c8:
         e5:b6:b8:a1:4e:f3:34:b0:6f:d6:08:8b:c2:c3:02:9c:46:6a:
         e2:00:86:b6:60:6b:6b:99:fd:07:61:d1:90:48:0f:9a:27:9c:
         43:20:9d:0e:7f:42:3e:7b:34:4f:73:77:26:1f:cd:84:22:31:
         1a:e8:49:dc:b1:1f:13:4c:36:7c:48:87:41:ef:6e:3f:f2:59:
         97:d3:3f:79:60:ee:35:a3:9c:c4:58:34:a0:b4:e2:fd:1f:ab:
         a5:ec:a9:0c:a8:0a:b9:de:66:4c:5b:65:19:05:0d:ab:ac:da:
         5b:68:bf:94:4f:0c:e0:93:08:3a:b5:e8:7c:9a:d1:e6:a6:82:
         be:ff:ae:6f:ac:d5:1a:c6:4f:5c:17:f0:62:8b:35:97:c3:9e:
         97:19:0b:f0:13:50:3f:25:80:f1:61:bd:a0:10:8c:d8:ca:cb:
         03:dc:1a:89:4a:2b:54:de:e2:c2:5c:ae:e6:93:0b:a3:d1:cf:
         72:32:f8:86:d9:2b:c7:b0:f5:30:af:fa:0f:8f:4b:ad:b8:8a:
         33:6d:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:23:25 2024 by rpki-client on console-ams.rpki-client.org