Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File:                     6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier:          u6jxflXdX0Q/9nXKfCd0xbZn+GP9dAzIDDSu7/G8Fec=
Subject key identifier:   BA:96:B8:D9:71:C0:3E:96:95:84:06:2F:0C:A1:BA:8F:C7:A3:A3:68
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer:       /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial:       018F467C2043C2F209E056DE1BA5BB649A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number:          0498
Signing time:             Sun 05 May 2024 02:01:30 +0000
Manifest this update:     Sun 05 May 2024 02:01:30 +0000
Manifest next update:     Mon 06 May 2024 02:01:30 +0000
Files and hashes:         1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: 3M+1gc2SPj13us8N1cg8cXEeYlrXWOF6S+zYkS5h4/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:20:43:c2:f2:09:e0:56:de:1b:a5:bb:64:9a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
        Validity
            Not Before: May  5 02:01:30 2024 GMT
            Not After : May  6 02:01:30 2024 GMT
        Subject: CN=ba96b8d971c03e969584062f0ca1ba8fc7a3a368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:b0:ed:72:cc:9c:49:05:80:16:99:45:eb:
                    35:93:4c:68:3c:15:be:6d:f7:cc:b7:82:0a:ba:6b:
                    3c:97:2a:31:4e:ed:45:b3:1e:d4:51:38:53:9c:2b:
                    83:53:18:27:91:69:23:48:d3:69:5a:e5:77:9d:a6:
                    35:a5:80:ce:00:f7:c9:86:c2:0d:da:e2:b3:b0:76:
                    40:fd:bd:ad:30:67:d8:2d:36:a1:31:60:8d:b6:d7:
                    9b:5e:41:27:5b:3b:e7:05:ad:82:b2:ee:70:b3:6f:
                    4d:8c:9a:e9:9d:65:57:ef:a1:f4:4f:84:3e:b2:a6:
                    d5:62:46:04:4b:6c:26:27:c0:1d:6a:0b:d7:e5:42:
                    db:9b:01:6b:e7:64:95:ed:9a:44:95:8a:8b:35:b1:
                    93:3d:06:37:53:f0:3d:b6:a6:89:f8:e8:74:fc:3c:
                    8c:4b:ae:3e:b0:16:73:8f:52:1f:5f:50:c5:ce:12:
                    3a:00:ba:ba:14:d2:d0:23:0a:d8:a4:1b:6c:16:45:
                    ea:e4:8e:4e:ae:77:51:c4:5c:79:92:12:40:e0:4a:
                    6f:66:c8:9b:94:a5:c9:99:e2:cd:c9:c3:77:81:2e:
                    e3:39:97:ff:40:cb:84:9b:9c:35:76:51:af:00:f1:
                    75:9e:f5:59:4c:76:62:43:83:fe:01:b2:92:91:4c:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:96:B8:D9:71:C0:3E:96:95:84:06:2F:0C:A1:BA:8F:C7:A3:A3:68
            X509v3 Authority Key Identifier:
                keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:87:9e:40:b6:1f:07:7d:a2:a9:42:e7:d8:9b:b9:43:aa:
         eb:0e:0f:f7:76:c7:b6:77:5a:d2:e5:6d:03:a7:52:a1:df:3d:
         99:90:c7:63:d6:69:17:8a:0e:a0:95:b6:44:b6:dd:98:63:7d:
         59:25:90:77:b8:06:40:1e:41:ef:8d:1b:96:54:2a:4e:eb:9c:
         87:2e:55:93:c6:59:dc:e1:cc:ce:c0:bb:95:b4:85:01:e4:ef:
         c9:63:47:3e:3b:17:02:53:0e:aa:a5:4e:ef:e4:15:40:13:96:
         27:53:cc:86:68:60:53:f2:1b:74:72:d3:ce:bc:5d:06:c5:7a:
         fb:4f:87:70:6f:8d:a7:2a:d7:22:17:9a:c1:70:04:a1:7e:92:
         b5:24:87:45:13:b8:24:2d:2a:9a:db:fd:6c:4d:c0:df:a7:07:
         ad:bf:8c:3c:3b:d6:c8:4f:8f:ac:fc:50:f7:b9:79:19:ba:81:
         1f:66:6a:19:d3:13:e2:37:98:d3:f4:72:ea:d9:c4:11:98:59:
         46:34:48:1e:3f:8e:6c:23:04:ea:a3:3e:53:14:91:7d:67:94:
         e5:66:06:57:21:72:a9:e1:53:b3:3c:29:0b:e6:40:ae:77:3d:
         00:cf:99:d9:d8:aa:69:07:0a:35:0d:80:be:15:c4:df:45:c5:
         bb:73:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:58:59 2024 by rpki-client on console-fra.rpki-client.org