Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          tvTZXT2ffxpPR+5qQ7F/1KE+klCDsVTHwnQ7kI/WYik=
Subject key identifier:   B2:FC:31:70:FA:D6:44:03:8B:F9:DD:7C:22:90:54:06:BB:7D:D4:27
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       018F43B4581CA9CEB3D7AF9C725B9969E87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 13:04:03 +0000
Manifest this update:     Sat 04 May 2024 13:04:03 +0000
Manifest next update:     Sun 05 May 2024 13:04:03 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: 6QwKU90Eq1Iuoat2aWv6ZQhXWgd9ZN5wiNPwmvWU+9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:58:1c:a9:ce:b3:d7:af:9c:72:5b:99:69:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: May  4 13:04:03 2024 GMT
            Not After : May  5 13:04:03 2024 GMT
        Subject: CN=b2fc3170fad644038bf9dd7c22905406bb7dd427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:2b:78:c2:a8:31:3d:8f:c3:02:96:15:9b:
                    47:e7:35:81:2c:9d:8e:69:42:23:4a:09:6b:6f:05:
                    6d:e8:25:8d:70:21:10:fd:d1:ce:ea:35:0d:14:d3:
                    29:9a:c1:32:61:39:92:b3:5c:70:11:d3:56:ac:19:
                    0c:fc:06:7a:47:a8:aa:ec:78:dd:0f:ae:54:e8:3c:
                    b0:b2:bb:7a:6e:62:34:cb:5f:7b:2b:09:a3:09:03:
                    e3:9d:70:ae:6c:2b:c6:68:8a:91:83:d0:f9:f8:9a:
                    a3:21:fd:6a:4c:1d:e4:9e:cd:1f:d0:d6:40:9b:89:
                    71:16:ab:94:5f:6c:d3:00:5e:2a:29:d8:18:7b:38:
                    56:37:9b:26:ac:8a:02:4b:ff:95:35:06:7b:0f:93:
                    2f:e4:b0:69:5c:67:5f:1e:1a:5f:79:d8:bf:c9:a7:
                    e0:21:ed:5f:c9:b8:70:c7:88:c0:78:88:4c:1d:31:
                    9e:77:30:90:05:99:43:f3:9b:aa:6f:17:91:63:8d:
                    9d:cb:b8:bd:1f:8f:50:1f:c3:f6:71:fc:44:63:fd:
                    7c:35:c1:ed:12:4f:ba:89:40:39:5e:f5:9d:8b:14:
                    9c:71:1a:46:fb:59:73:c6:1a:13:ec:6b:d6:91:b6:
                    44:18:a5:ba:4e:98:4e:27:a5:87:ce:0f:ca:d5:a6:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FC:31:70:FA:D6:44:03:8B:F9:DD:7C:22:90:54:06:BB:7D:D4:27
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2b:e0:b3:d8:5e:69:19:06:a5:2b:dc:42:97:2f:0f:c7:27:
         ca:9e:4e:b1:85:20:ea:c2:66:a9:bf:fd:9a:d8:68:c6:db:89:
         15:06:f3:75:54:ea:63:7c:cd:1f:97:a8:92:f4:87:3f:bd:b1:
         8e:82:1a:5a:18:1f:28:91:16:3a:eb:fe:59:a1:f1:21:69:ed:
         fc:d8:48:74:b5:d6:f4:bb:07:2f:46:a0:ef:4c:bb:6e:c9:6c:
         e0:89:fe:e3:73:25:7a:1a:32:b3:c9:26:49:1c:dc:8e:10:67:
         c7:f3:8f:f5:4d:a0:cf:6e:47:87:ac:bd:a2:3e:8f:9a:65:7f:
         2b:23:9e:67:06:13:8e:cb:7d:45:b1:a3:4b:42:1d:f6:f5:df:
         23:f9:d7:7d:b3:90:36:3d:3e:42:7a:2e:26:fe:bf:fb:8b:75:
         00:28:a2:5f:b8:36:21:25:bf:e8:59:d6:f2:bf:86:42:d1:80:
         88:76:7a:b9:00:3f:aa:c2:a3:fa:f6:06:d2:31:81:3e:40:ca:
         bc:93:7e:b8:b5:8c:97:0f:b2:03:a1:40:5e:e5:c0:c2:64:bf:
         29:55:64:d9:0f:0f:5d:0d:46:be:76:c0:f0:38:aa:24:ab:8d:
         34:38:00:cf:c3:a3:cb:68:e7:a5:a1:01:0f:09:87:91:ef:3b:
         5f:d8:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:35:40 2024 by rpki-client on console-ams.rpki-client.org