Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File:                     7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier:          qPw+nawDObtNdY74Fv4UF0z9iEAvSXz95ReuTEgMLXA=
Subject key identifier:   6B:F3:8A:18:50:6D:80:93:A6:C1:77:FF:CA:A3:69:11:CD:38:52:4E
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer:       /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial:       018FDC4272E386836C7BB395CF496742B508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number:          06FE
Signing time:             Mon 03 Jun 2024 04:01:33 +0000
Manifest this update:     Mon 03 Jun 2024 04:01:33 +0000
Manifest next update:     Tue 04 Jun 2024 04:01:33 +0000
Files and hashes:         1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: roRfQ+kXQh7TMZAiNaujsq4Wk2sMS+eA5LbaRWAIXL4=)
                          2: W7I8YdrGK8USxroYWsDN27BmPvU.roa (hash: v1jjtUflVkxp2Zldw0vcFyxD7l3zIkzjC9K3rZkR62o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:dc:42:72:e3:86:83:6c:7b:b3:95:cf:49:67:42:b5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
        Validity
            Not Before: Jun  3 04:01:33 2024 GMT
            Not After : Jun  4 04:01:33 2024 GMT
        Subject: CN=6bf38a18506d8093a6c177ffcaa36911cd38524e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:17:1e:6f:54:97:64:60:1a:20:50:85:1c:
                    1e:2f:2f:da:22:5a:8e:1e:06:e8:c2:07:37:75:a5:
                    ba:58:b4:da:74:64:b7:fa:c3:35:61:95:ab:57:8e:
                    ea:e3:6c:2d:6e:5a:95:26:19:b6:af:d2:0a:aa:9f:
                    ea:43:90:9e:1b:57:dc:ab:1a:92:97:6c:6d:65:f3:
                    be:6e:25:61:1b:61:db:f2:3d:8f:6a:72:91:4a:0b:
                    04:1f:d9:15:6f:27:b1:5b:7e:34:31:e6:52:db:cc:
                    18:af:89:be:ac:76:76:48:02:e5:92:66:05:ad:03:
                    af:4d:e1:b0:dd:8f:0f:ce:2c:df:56:06:44:05:20:
                    30:bf:e0:0d:c4:02:f7:14:c7:23:7c:28:e1:79:f8:
                    76:68:59:eb:1b:58:86:33:9b:13:3a:dc:41:41:f5:
                    26:ab:a1:bb:31:7e:b0:6f:d0:b1:6f:dc:d5:1a:ee:
                    99:47:ed:eb:18:b8:44:77:a0:9c:dd:d0:ea:eb:9d:
                    06:35:af:a1:f0:4f:45:ba:6c:d5:d2:77:6e:4a:1b:
                    fe:9e:be:1c:6f:21:76:53:d7:0b:df:70:90:61:b6:
                    63:24:0f:6e:3a:f3:98:6e:18:72:8b:f3:a4:3e:9f:
                    d6:fd:ea:3d:28:07:5c:1e:50:2d:60:7f:dc:7c:20:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:8A:18:50:6D:80:93:A6:C1:77:FF:CA:A3:69:11:CD:38:52:4E
            X509v3 Authority Key Identifier:
                keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:cd:66:d4:a5:84:5d:5a:4e:2b:38:90:f2:1a:f2:6f:73:
         d5:38:79:d2:d7:73:8f:6d:4f:0f:49:36:10:1f:b5:7a:30:ac:
         39:da:2b:fd:47:ef:75:f5:02:bc:10:7b:11:a9:cd:a1:50:61:
         97:1d:43:ea:fe:8c:4d:b9:77:03:0e:b4:73:ea:28:4d:c6:6a:
         0d:59:82:a3:82:19:69:92:26:d2:89:c4:d5:23:97:0e:11:30:
         dc:41:f1:aa:e6:37:57:5c:d4:7c:50:9f:73:1e:45:97:a6:90:
         d8:ea:ef:38:d6:5b:c7:e5:f9:36:06:a7:c9:3d:e8:c7:f9:aa:
         95:de:24:85:00:39:b9:98:82:6f:7a:04:16:f6:db:9f:06:d0:
         3c:97:fb:94:da:f2:0d:9d:ab:07:da:e3:4c:30:a2:f7:0b:63:
         30:32:15:1a:08:5a:17:c0:99:b9:60:00:86:f8:ce:88:d7:a2:
         24:4e:a3:84:ae:4d:af:a7:b7:34:f9:34:ec:bc:42:56:cf:14:
         b3:af:ea:26:2c:7a:1a:54:05:b9:1d:36:c7:cb:21:f0:aa:a2:
         53:46:52:47:4e:4e:10:89:0b:16:5d:d5:72:dd:9e:85:f7:a6:
         30:24:55:e0:c9:05:1a:88:44:7f:9d:ca:b0:2a:ce:94:31:0b:
         04:38:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 14:14:36 2024 by rpki-client on console-ams.rpki-client.org