Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          7zGZoABlIncSVwNWz524BZFToUAYWQ+xVIQGroLuFW4=
Subject key identifier:   5D:1B:6A:4D:BF:42:82:17:E7:51:AD:59:8D:1A:09:71:84:03:25:8D
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       018F40B1091D2C28847ACCB1D6DDADDFF3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          08AB
Signing time:             Fri 03 May 2024 23:01:34 +0000
Manifest this update:     Fri 03 May 2024 23:01:34 +0000
Manifest next update:     Sat 04 May 2024 23:01:34 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: GC4tMrY96BB9QBrPinoAnMWNQRaPpWGravWV2KIpEj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b1:09:1d:2c:28:84:7a:cc:b1:d6:dd:ad:df:f3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: May  3 23:01:34 2024 GMT
            Not After : May  4 23:01:34 2024 GMT
        Subject: CN=5d1b6a4dbf428217e751ad598d1a09718403258d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:9e:9a:00:35:9d:4d:49:a6:cd:59:e1:a4:
                    4e:89:e1:de:03:f0:e8:3e:86:da:7e:55:d9:64:0f:
                    46:98:53:5b:bd:75:d4:74:28:f2:3d:5e:40:87:99:
                    ec:10:d5:67:52:3c:7e:83:7d:f2:c9:9e:c7:af:6f:
                    4b:c8:56:14:71:c7:52:bb:67:22:89:da:a2:4f:59:
                    ea:b2:ae:7b:29:b3:54:e5:d9:d1:a3:ab:6c:dd:48:
                    3b:ad:83:fc:19:f5:1a:ac:a2:7f:2d:ce:6f:02:cc:
                    3b:c3:d0:d2:25:b1:83:a5:28:f2:68:6a:22:5a:c4:
                    bf:3d:0c:ff:bc:77:d4:fe:bf:c6:6e:e3:3b:31:cf:
                    2e:e7:35:59:0b:82:48:76:4c:61:af:fe:74:af:01:
                    48:48:35:8c:43:7b:59:06:ab:6b:37:31:81:9d:c3:
                    1d:1b:af:c0:18:d7:84:db:7a:c8:d1:60:07:49:c7:
                    68:f1:65:63:51:44:d6:94:a8:2c:2d:35:de:db:88:
                    22:7e:16:ae:cf:cd:c8:ae:9b:89:00:d9:49:22:1c:
                    88:65:98:d4:58:e9:6d:12:d0:d4:39:f7:6d:0c:68:
                    7d:09:e6:0f:db:95:4f:0d:08:af:c4:4f:cc:ae:19:
                    46:d8:69:5a:e6:49:56:17:13:1c:c1:e6:2f:2c:c3:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:6A:4D:BF:42:82:17:E7:51:AD:59:8D:1A:09:71:84:03:25:8D
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:8a:b4:b9:c5:af:27:82:87:05:a7:71:4d:2d:a2:c4:b3:
         32:a3:53:74:51:ad:c4:de:5e:ba:7c:eb:d1:e4:2f:8b:c7:ba:
         62:2b:91:0d:92:1b:8f:f4:5d:ef:0d:44:cd:12:0f:b8:f4:58:
         3b:5b:1b:67:7b:90:7b:67:c6:79:db:77:02:85:6a:05:04:44:
         20:cd:a4:94:bd:5e:d7:0c:3a:4d:06:c0:32:42:22:c1:a1:72:
         bf:60:81:ea:c6:ab:73:8c:3e:b9:34:3c:65:46:32:23:04:48:
         3d:b6:b2:2f:71:a7:9b:42:0e:2d:10:b5:ba:92:a1:0e:3e:75:
         7f:b2:b7:90:72:89:d7:ce:32:cd:1f:a8:6e:50:fb:0a:a9:2a:
         89:dc:5d:36:18:97:2a:48:78:dd:78:0f:94:3d:65:08:84:f3:
         d9:16:09:f8:90:88:68:f1:bb:ff:97:d3:a8:fd:f9:01:66:41:
         4a:48:fa:24:d0:7f:71:c9:a9:12:3b:34:8a:f0:75:b1:79:4a:
         7f:78:11:68:96:2c:62:d2:35:94:fc:94:35:a2:45:5e:89:ad:
         a7:6f:6c:d1:ae:06:c7:71:31:5a:ac:39:65:f7:a4:a8:5d:44:
         e9:22:5f:82:ce:1e:8c:b5:30:ae:85:c8:cf:94:c8:1b:da:59:
         ea:36:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:39:46 2024 by rpki-client on console-fra.rpki-client.org