Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          HS69YusNVhPOF/pPqY/5izo+9dSO3sLI3UZuS94NCkU=
Subject key identifier:   48:1C:BF:A8:63:C1:36:1C:A3:C4:60:B4:4B:B0:23:98:A4:8F:00:E6
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       018F4CB4D7689E31441E77E4CAB2B49537AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          07ED
Signing time:             Mon 06 May 2024 07:01:11 +0000
Manifest this update:     Mon 06 May 2024 07:01:11 +0000
Manifest next update:     Tue 07 May 2024 07:01:11 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: gR3e+LShITAyIE7XO+K4LoI/P+w66BusgA08pnVixMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:d7:68:9e:31:44:1e:77:e4:ca:b2:b4:95:37:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: May  6 07:01:11 2024 GMT
            Not After : May  7 07:01:11 2024 GMT
        Subject: CN=481cbfa863c1361ca3c460b44bb02398a48f00e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:5f:7f:7a:f2:bc:2c:10:8b:24:5f:9a:79:
                    86:ea:47:70:f1:86:8a:c6:40:40:1b:fc:75:4b:d5:
                    b9:51:d7:97:77:54:95:44:81:ee:66:bf:6c:ff:d6:
                    7a:a8:69:36:1c:f7:5c:72:2f:b4:ad:ab:06:1f:2e:
                    58:b7:34:67:64:a5:e0:d9:36:e0:cd:48:7d:17:3e:
                    b9:5a:48:b0:02:1c:89:14:15:3d:1d:f0:74:d5:42:
                    27:ad:aa:4e:7b:90:fb:5c:0d:b7:b1:9d:d8:e0:97:
                    40:6c:e1:19:e1:a8:be:9e:9f:f8:d1:9b:80:c8:90:
                    a4:e6:5b:b4:63:6d:2a:15:ce:89:33:35:8c:1b:72:
                    fb:40:f4:65:d0:3c:2f:3a:de:3e:1e:33:a6:9c:6c:
                    74:96:f3:60:eb:2e:fe:a6:d9:99:18:51:31:46:83:
                    85:29:a9:62:95:46:8a:87:7e:8c:22:dc:17:de:59:
                    c5:02:c1:42:5e:2c:bd:6d:eb:d3:ca:cc:b2:ec:42:
                    69:c5:51:8e:ab:6a:ef:54:a3:35:ab:10:eb:f9:08:
                    a6:fd:d8:ea:ab:c2:46:39:ab:58:7d:11:35:3a:d4:
                    6e:09:b2:48:a2:23:16:16:d4:ef:5a:13:e9:ce:82:
                    f1:29:7d:17:86:90:d2:f0:4e:6c:08:68:bd:4c:92:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:BF:A8:63:C1:36:1C:A3:C4:60:B4:4B:B0:23:98:A4:8F:00:E6
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:80:b2:c7:73:ba:a3:fb:82:a2:d4:e8:95:50:7f:5e:d7:
         0e:28:9d:8c:d0:b5:65:26:58:ab:ac:35:41:a1:44:64:a7:55:
         93:84:bd:31:ca:ff:b4:77:d1:f9:6f:11:24:f7:fd:d2:cc:f1:
         56:7d:c9:e9:40:42:59:46:10:e6:f7:6d:d6:fc:c8:ba:60:9f:
         5b:86:be:04:f2:c0:9a:e2:e5:ca:b4:5f:01:45:74:e7:2b:ca:
         67:6a:67:ca:d1:f0:d8:4f:09:c7:25:80:b3:d6:26:35:fb:3f:
         df:4c:a8:b3:c4:db:d3:f7:4c:3d:40:76:a9:45:55:f5:e7:03:
         91:65:f3:bc:a5:16:fa:96:2e:f3:b9:53:6f:b5:d6:a7:cf:2f:
         e7:39:2b:05:d1:c3:49:53:99:49:d0:c0:f5:45:c4:ad:18:70:
         07:2a:9b:22:ab:62:be:6a:d1:7c:ea:f5:58:b4:82:e3:b0:49:
         d0:45:b0:a5:74:15:09:aa:57:44:63:1d:c2:e7:29:5c:ee:33:
         6f:7f:52:83:b5:e8:af:ec:6b:fc:47:46:0e:b2:d0:04:f6:66:
         51:55:1b:3e:df:7f:3e:81:3e:bc:04:88:30:5b:7d:3b:9a:f6:
         2a:b8:21:61:fb:bf:7b:fb:cf:92:86:02:8c:71:65:c2:70:a0:
         8f:a0:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:33:22 2024 by rpki-client on console-fra.rpki-client.org