Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          mdm36zkfG/ILyyMcXw8wJM2a25NvI0BfyliVb5+IjXo=
Subject key identifier:   81:02:1A:54:B1:1C:1E:4D:C6:AC:7A:F9:7A:3D:5C:56:AA:98:57:C8
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       018F3D4209AF10DBAA1D7353F21A6CE458F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          073D
Signing time:             Fri 03 May 2024 07:01:29 +0000
Manifest this update:     Fri 03 May 2024 07:01:29 +0000
Manifest next update:     Sat 04 May 2024 07:01:29 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: WCiodvIbZrT8wNcfwOEPabHPWRurvGPWzpCCfQ7TMCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:42:09:af:10:db:aa:1d:73:53:f2:1a:6c:e4:58:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: May  3 07:01:29 2024 GMT
            Not After : May  4 07:01:29 2024 GMT
        Subject: CN=81021a54b11c1e4dc6ac7af97a3d5c56aa9857c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:d8:ff:c9:53:7a:70:79:d6:5e:e8:6d:53:
                    38:ea:10:36:81:13:10:d4:73:87:71:55:b6:30:b5:
                    73:e5:aa:0c:c3:29:b1:ed:0c:43:62:24:ff:f5:95:
                    a9:34:35:58:f8:9c:b1:75:42:69:d1:6e:7b:0c:11:
                    2c:5d:03:7c:ae:aa:0a:cf:68:aa:d0:96:20:82:52:
                    b2:68:bc:39:be:cd:36:e0:3c:27:92:23:63:3f:c1:
                    30:8d:14:8f:f6:39:f1:b4:fd:ff:36:79:5d:a3:0d:
                    da:cf:b7:a9:7b:2a:d7:b1:ff:9e:68:57:7d:94:40:
                    a1:e2:5a:cf:1a:55:f0:a5:25:7d:ee:ca:ec:8e:1b:
                    d0:12:19:a1:44:73:5c:1e:92:78:92:41:73:2b:23:
                    e6:ef:3a:73:ab:a2:20:00:b6:c7:e2:76:f0:1a:d5:
                    2c:16:b1:1e:fc:58:05:df:7b:bc:d6:f6:ff:dd:14:
                    9b:7a:f3:fd:bc:82:e7:e6:ae:68:ac:65:08:87:cc:
                    ce:77:da:ed:a3:60:53:11:21:2f:2f:dc:be:3d:60:
                    3b:c5:f5:27:03:12:3c:2d:97:76:81:a0:81:c1:6e:
                    8b:28:e8:f8:9a:26:1e:dc:86:3a:02:21:33:b0:f7:
                    d5:2d:bc:2f:e9:b4:0f:32:13:b5:58:a7:3e:57:17:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:1A:54:B1:1C:1E:4D:C6:AC:7A:F9:7A:3D:5C:56:AA:98:57:C8
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:37:8f:7b:b8:ed:6f:ce:d4:9f:34:49:08:3e:94:66:b4:d9:
         9e:bb:14:42:c8:ba:7d:d5:b0:e9:35:25:23:99:79:49:b9:7a:
         d9:82:9f:2d:af:0c:70:01:e2:fe:26:72:6c:0e:0e:60:d8:be:
         23:f6:6f:bf:70:d7:db:42:d6:5f:16:db:a4:94:30:d8:d6:15:
         e6:b0:bc:8e:fc:40:51:1c:41:3f:0b:cd:68:56:5a:45:a9:59:
         ec:50:8a:d5:c8:03:ff:f0:4b:e7:59:e9:df:5e:3d:96:2d:4e:
         0e:db:cd:34:bf:59:49:13:c6:a8:ae:55:af:84:25:47:b6:c7:
         11:a4:66:25:c4:1a:85:47:37:d6:3c:d1:c9:d4:2b:f3:7e:ec:
         ce:44:fa:64:7f:1a:33:dc:92:8e:97:10:6c:7f:76:d3:2f:20:
         0c:8a:ba:98:fc:a8:a7:8f:c5:30:6e:2f:d6:38:e8:e4:3b:94:
         23:d0:59:18:84:37:6a:3a:3f:f2:6d:dc:f7:88:fd:70:7b:6a:
         6b:02:d1:1b:3b:fb:4d:8b:da:b3:91:e4:c6:7f:87:35:d3:1f:
         77:3b:98:21:75:04:e5:d1:3b:67:0c:67:59:46:21:1f:92:48:
         aa:e0:a9:b2:ab:16:33:12:43:97:86:93:9d:53:4e:4a:af:d0:
         e7:65:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:52:36 2024 by rpki-client on console-ams.rpki-client.org