Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
File:                     6LboSZ_-MeH21ngNAwF-g0c_LTw.mft (raw, json)
Hash identifier:          Dmv326ZYpCQxzyRG7j4+czn/BcqOx+6sgfRlonJ9n68=
Subject key identifier:   DF:B4:74:5D:3E:27:2F:E6:C3:4E:84:B5:97:85:3C:97:35:E8:6D:C6
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Certificate issuer:       /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial:       018F43B483FCB3DFEBBC6F4555660FDE6868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
Manifest number:          1158
Signing time:             Sat 04 May 2024 13:04:14 +0000
Manifest this update:     Sat 04 May 2024 13:04:14 +0000
Manifest next update:     Sun 05 May 2024 13:04:14 +0000
Files and hashes:         1: 6LboSZ_-MeH21ngNAwF-g0c_LTw.crl (hash: TnSG1r5D5zpPganA0X0k3HcLx2/8u2gx2lqObftTaTo=)
                          2: p2mP_iQ8vqiDBycbJvsDFCJgN6M.roa (hash: cVtiqnZap8f923qJEyJ4FNxLWUNazzDcwXcHwRcctIU=)
                          3: v7xY5sc0A-R85DZEgdxWiZuvzRg.roa (hash: pdqdIOkua3RbQt98TXCeFiqoM4jUGWyEZxXOGiDhH3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:83:fc:b3:df:eb:bc:6f:45:55:66:0f:de:68:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
        Validity
            Not Before: May  4 13:04:14 2024 GMT
            Not After : May  5 13:04:14 2024 GMT
        Subject: CN=dfb4745d3e272fe6c34e84b597853c9735e86dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:7c:a7:fb:bf:4c:72:7c:1f:38:ee:02:de:
                    2c:4f:cd:2a:b9:56:c8:16:ba:97:e3:f6:4b:9c:ae:
                    55:ca:37:58:82:29:ff:af:6d:97:d0:ba:f4:91:89:
                    dc:27:60:64:2c:39:85:33:c4:55:11:dd:bb:23:b3:
                    ac:f2:71:bc:28:7e:db:37:94:5d:79:a5:12:62:2b:
                    46:d8:6d:b3:21:6d:a9:b2:25:17:65:78:c9:a1:00:
                    67:6e:a6:32:82:9f:d6:f6:1d:5e:9d:8f:45:9d:30:
                    14:07:ab:d7:e1:37:54:ee:f7:42:7d:1b:d7:11:f8:
                    e7:4f:77:f7:76:4f:ca:6f:54:da:49:4e:a2:9d:ac:
                    92:08:0d:5d:36:49:30:d3:e5:ee:c3:fb:b3:60:a0:
                    9b:a6:31:5b:61:d9:bc:5d:03:b2:06:ad:26:59:c6:
                    23:e2:0f:07:fb:8a:fd:d5:fa:0e:1b:50:34:30:d8:
                    d4:1f:87:bf:86:ce:43:a7:cd:15:84:7c:bb:64:07:
                    f2:fb:52:e2:09:db:df:e8:a4:e4:28:5c:1a:ef:3f:
                    a3:73:8f:43:27:d0:97:36:61:63:2e:40:fe:51:5a:
                    c7:6a:c2:dd:1c:72:63:7e:8a:ff:8b:0f:db:58:fb:
                    fc:11:3b:34:15:b2:74:a3:6c:ec:f9:e2:71:db:0e:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:74:5D:3E:27:2F:E6:C3:4E:84:B5:97:85:3C:97:35:E8:6D:C6
            X509v3 Authority Key Identifier:
                keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:e5:82:44:93:1e:3d:2a:b9:b0:07:5d:eb:87:ad:1a:8c:
         3d:37:31:5c:d4:74:6c:90:a7:b8:a1:12:55:90:29:08:d0:f6:
         d1:41:72:c5:90:e1:70:ec:6e:49:d2:f4:b2:9c:9a:54:07:77:
         e1:ac:fe:6e:d1:f4:0d:c1:e1:78:40:1f:01:0a:72:50:69:62:
         b0:5a:e7:0e:c3:84:d2:3e:8d:2c:13:ef:ad:57:2e:e4:1a:d0:
         bb:57:97:4e:9d:9b:68:66:a0:d2:1e:0d:df:d1:1a:29:09:39:
         57:e1:57:c9:29:ee:90:df:35:8a:58:1b:64:bb:56:79:ee:97:
         d0:08:39:b3:83:8a:2f:67:ee:15:6c:71:99:c9:c7:73:e7:b8:
         c7:3d:29:c5:5d:15:a3:1c:5e:c4:b8:e6:53:51:81:f0:80:a8:
         4f:20:c1:ff:03:e1:73:66:2a:f7:f8:76:f0:63:f5:57:14:d2:
         72:de:8f:da:b5:51:2e:9b:47:28:43:b1:7b:96:4d:f4:bb:18:
         3f:f1:b0:5f:4c:83:f1:56:9d:b8:6a:b9:ab:73:ff:cc:10:04:
         70:27:a7:bc:32:08:eb:9e:a5:19:dc:cc:74:4b:6f:23:04:2f:
         0b:77:49:56:4b:3e:b2:5b:91:c2:2f:61:d4:21:8c:25:dd:f9:
         d4:40:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:58:45 2024 by rpki-client on console-fra.rpki-client.org