Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
File:                     bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json)
Hash identifier:          gvmGyeDMUPcC8kfFGrjTLHbFi0TtchRspQs1TdRZeB8=
Subject key identifier:   80:55:FA:75:DA:03:85:F1:88:C1:EA:BE:70:84:95:CB:26:6B:7D:1D
Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8
Certificate issuer:       /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
Certificate serial:       0194BA844B4BC0E5DEAB455B5005B41834FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
Manifest number:          0496
Signing time:             Fri 31 Jan 2025 04:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:19 +0000
Files and hashes:         1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: ufu2WA10wUt4yo76s1FdNQmUHIBXgag4BfScLsJV1FE=)
                          2: e_fKzyMGP2BAukkTPFbz9htGhsU.roa (hash: R8piax2BZXmCIRcmiQxJAzyQx3Kr2idqCRP3833Mldo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:4b:4b:c0:e5:de:ab:45:5b:50:05:b4:18:34:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8
        Validity
            Not Before: Jan 31 04:00:19 2025 GMT
            Not After : Feb  1 04:00:19 2025 GMT
        Subject: CN=8055fa75da0385f188c1eabe708495cb266b7d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:d2:8e:eb:19:ff:f2:a3:c1:a0:39:4d:62:
                    18:2a:2c:19:2b:76:e5:53:a1:de:89:da:2c:5a:e2:
                    c2:74:51:d4:63:ad:98:6d:b2:cc:41:ca:97:49:85:
                    ad:14:d9:9d:56:c3:ee:15:c6:32:bd:8b:90:6c:fb:
                    ef:b5:98:30:8f:be:e0:79:e5:cd:a8:89:45:e2:a1:
                    2b:dc:48:8d:3d:f3:0c:c0:02:7a:e7:6c:b9:3d:3e:
                    50:55:15:3d:d5:fa:a5:15:40:ca:8e:37:ac:3e:6d:
                    ff:f1:db:7b:a4:88:8d:e1:8a:08:e5:92:ee:db:73:
                    33:3f:58:1d:66:95:c1:81:62:9e:55:4a:6a:40:d8:
                    db:b6:c2:56:e8:bf:2d:18:59:f6:15:3b:0e:f3:2b:
                    8c:32:96:29:c0:70:57:2c:11:5c:a7:3a:64:68:10:
                    ac:00:23:72:a8:b5:bf:33:9c:04:f4:2d:11:73:55:
                    81:6a:20:a8:16:f7:ac:b2:90:42:e6:95:60:fd:24:
                    20:f1:97:b0:43:8b:90:a2:a7:1c:06:54:c2:20:55:
                    9a:7c:22:34:04:9d:69:fb:93:3c:a3:b8:3e:af:76:
                    a3:74:e2:30:a3:c2:2c:41:a1:34:cc:77:4f:08:18:
                    a9:dc:fd:04:fd:65:b5:b1:46:a3:4a:7d:ca:9a:07:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:55:FA:75:DA:03:85:F1:88:C1:EA:BE:70:84:95:CB:26:6B:7D:1D
            X509v3 Authority Key Identifier:
                keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:58:2d:59:ac:90:a3:87:f5:6e:ff:1e:d4:ce:8c:42:ff:
         3a:95:c1:55:17:2f:7d:10:d5:f9:95:b1:61:f2:d0:c1:75:9c:
         ad:8b:26:ee:a3:42:10:fa:ab:20:15:1b:71:72:dd:1e:5a:fb:
         e2:a5:06:73:29:7a:81:15:74:0f:72:ae:87:f6:d5:fa:fa:c0:
         ef:e1:2a:fd:51:ec:ec:35:17:95:06:dc:5c:69:a1:39:59:07:
         6b:4b:13:7e:df:a7:72:87:c4:ba:8c:1d:47:5a:05:d6:34:cc:
         a1:ce:e1:93:74:0c:05:63:db:7d:67:1b:1e:35:ad:7f:61:2f:
         79:b8:a8:72:b9:1c:3e:b0:99:f0:f3:de:99:8f:c3:22:d5:55:
         22:a3:c5:78:51:14:66:bf:3f:65:90:e9:a6:c9:8c:85:27:17:
         3d:b8:bb:ec:b2:cf:b0:fc:61:fa:9b:a7:53:50:6c:1f:0f:f0:
         d2:ad:24:b4:41:fa:df:ed:55:a8:88:8c:06:e1:81:9a:ef:f9:
         19:ac:52:7d:0b:7a:f3:96:e9:a7:6d:ad:ae:67:ec:dc:73:12:
         26:b0:4e:92:f8:cd:7f:0d:08:31:13:0d:04:41:52:e8:3e:b6:
         b9:67:ab:54:f9:80:1f:6f:d5:f8:7d:be:49:35:40:01:d6:63:
         70:8c:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:25 2025 by rpki-client on console-fra.rpki-client.org