Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.mft
File:                     6jCBek9OLVD4Y8bJXSFgAFWS88Q.mft (raw, json)
Hash identifier:          eTtHYle/9/P+P37CA/VmQVp2mNug47lPqR+6wiolYhc=
Subject key identifier:   17:81:FB:96:71:B3:28:02:39:3D:6D:83:9D:1C:EB:8F:4D:3C:A3:83
Authority key identifier: EA:30:81:7A:4F:4E:2D:50:F8:63:C6:C9:5D:21:60:00:55:92:F3:C4
Certificate issuer:       /CN=ea30817a4f4e2d50f863c6c95d2160005592f3c4
Certificate serial:       018F38F78E495397BB6748D99321723AC501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jCBek9OLVD4Y8bJXSFgAFWS88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.mft
Manifest number:          114B
Signing time:             Thu 02 May 2024 11:01:38 +0000
Manifest this update:     Thu 02 May 2024 11:01:38 +0000
Manifest next update:     Fri 03 May 2024 11:01:38 +0000
Files and hashes:         1: 6jCBek9OLVD4Y8bJXSFgAFWS88Q.crl (hash: BeunOePkQQ+sDY6qQiHNj+BFtTlkp35sI7W0VBRP9H4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jCBek9OLVD4Y8bJXSFgAFWS88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:8e:49:53:97:bb:67:48:d9:93:21:72:3a:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea30817a4f4e2d50f863c6c95d2160005592f3c4
        Validity
            Not Before: May  2 11:01:38 2024 GMT
            Not After : May  3 11:01:38 2024 GMT
        Subject: CN=1781fb9671b32802393d6d839d1ceb8f4d3ca383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:6a:a4:4b:27:c0:42:3d:69:ea:08:32:d9:
                    75:63:06:be:b7:a2:ae:1e:bd:23:bf:83:cc:29:89:
                    93:6b:df:a1:6e:c3:33:3a:b3:3e:54:0b:37:19:25:
                    e1:20:0b:d4:db:2e:8d:a7:97:7c:c9:04:a4:7e:b1:
                    9a:9e:8b:98:b6:50:d7:a8:6a:64:22:8d:ca:dc:71:
                    2b:83:e7:35:9f:65:d1:87:e8:76:a8:ca:c8:3a:66:
                    3d:80:77:a8:65:40:9b:60:26:a1:3c:68:99:34:d9:
                    63:7c:f3:17:76:eb:6e:a5:4c:e5:f2:14:60:2d:9b:
                    c4:79:17:b7:36:5f:25:b8:8c:6b:ca:2c:8a:c6:39:
                    6f:56:8f:af:76:8f:fe:32:1a:0e:a3:d8:65:0b:e2:
                    7f:04:4b:31:0e:b3:be:9e:06:24:84:54:05:25:3b:
                    9b:50:73:21:c2:25:85:40:56:c9:e5:6e:c0:78:cf:
                    22:fe:69:47:2d:b6:43:b8:c6:79:bf:c5:96:17:97:
                    62:cf:cc:70:1e:ce:89:f5:bb:c6:12:c3:dd:7b:c5:
                    81:0d:10:9f:16:91:dc:61:1b:6e:29:e9:43:04:d6:
                    97:f3:f1:99:d6:7c:3b:3a:32:d4:56:76:c8:85:1e:
                    94:6f:3c:7d:8c:5d:c2:af:d8:02:19:7d:4f:32:78:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:FB:96:71:B3:28:02:39:3D:6D:83:9D:1C:EB:8F:4D:3C:A3:83
            X509v3 Authority Key Identifier:
                keyid:EA:30:81:7A:4F:4E:2D:50:F8:63:C6:C9:5D:21:60:00:55:92:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jCBek9OLVD4Y8bJXSFgAFWS88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5c8a49-3b1f-4735-b495-018d8e851f0f/1/6jCBek9OLVD4Y8bJXSFgAFWS88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:38:bf:f7:19:fa:aa:20:af:4f:c2:16:c7:22:17:5d:ad:9a:
         47:17:f9:8f:dc:30:23:16:30:67:88:c2:8d:ea:f9:02:29:1e:
         67:d5:ad:84:cc:21:c7:3a:a7:66:26:ed:95:4f:f8:30:83:d4:
         a5:be:de:df:b8:69:94:02:48:16:73:99:e3:0e:e9:21:95:60:
         00:27:e3:3e:fd:ad:6c:5f:41:6a:2d:9a:b3:6d:54:b5:f4:07:
         49:4e:a4:d9:bb:29:bc:fa:5a:03:61:e9:ab:1a:b0:82:fd:72:
         b3:a6:94:60:40:75:d4:a9:01:6e:c3:d9:8d:b9:3c:78:97:e1:
         cf:7e:26:d9:23:fd:90:a9:3d:ee:b4:b9:6c:7c:11:fe:e9:72:
         51:ff:dd:98:97:6b:be:dd:32:43:d4:c4:e1:86:9c:91:ab:65:
         a4:aa:fb:45:07:46:76:09:a8:91:cd:dc:a0:55:3e:37:44:1b:
         d3:0c:02:64:97:42:03:d1:87:1a:09:0e:5d:b8:5f:10:49:4d:
         b8:3e:c6:44:ed:60:c9:2c:3b:fd:5a:33:f4:91:0b:a5:19:0a:
         47:c9:9c:53:a6:90:8a:d8:c5:e7:2f:39:9b:52:5b:f8:03:64:
         f7:a2:33:aa:3e:8f:d9:fe:bf:f9:bf:1b:52:2c:6b:4a:fd:4f:
         a6:89:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:58:05 2024 by rpki-client on console-ams.rpki-client.org