Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          VFVr7d4KJtHWUWg0rpEaJSaMyfpNn88GnIKjiP15iTk=
Subject key identifier:   25:BC:FA:72:D2:38:5D:07:36:EF:32:76:99:E2:AF:43:01:80:F0:5F
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       018F5138A21249089665C7533BB9C8CA0C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          10E3
Signing time:             Tue 07 May 2024 04:03:36 +0000
Manifest this update:     Tue 07 May 2024 04:03:36 +0000
Manifest next update:     Wed 08 May 2024 04:03:36 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: S9nBD2y8UrzGQHEZeOT7okHp9VdxEbm/njXKG/UcFNE=)
                          2: HdjQUa57Z007bGgwM2AC07zC5OE.roa (hash: +k/8vcyG2cjFaNiheelNXyJzON4H5TK3SYgJ/4+UfY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:a2:12:49:08:96:65:c7:53:3b:b9:c8:ca:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: May  7 04:03:36 2024 GMT
            Not After : May  8 04:03:36 2024 GMT
        Subject: CN=25bcfa72d2385d0736ef327699e2af430180f05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:66:b5:fd:26:87:5a:81:9a:bd:26:8b:29:
                    68:b3:eb:fc:b8:b5:33:9a:22:ee:35:a7:e9:36:2c:
                    fe:79:86:35:1c:a2:59:43:26:3b:37:2b:55:38:c3:
                    e6:9f:b3:34:82:45:3d:96:75:7d:47:1b:6a:65:77:
                    0b:07:7a:5a:19:1b:ec:d5:86:9d:6a:d9:4b:11:75:
                    87:96:ac:37:e8:6c:64:2e:8b:7e:a3:41:88:c7:8b:
                    40:7f:0b:0d:60:7e:29:bb:ff:f6:4f:7d:3d:60:cc:
                    f5:3b:61:38:0f:eb:17:7a:7b:63:da:dd:b7:eb:ae:
                    04:9b:16:26:24:3f:91:07:5f:fd:3d:c9:fc:8e:dd:
                    3c:04:4c:f3:c6:32:9a:cc:fa:2e:20:0d:13:c9:09:
                    72:96:d4:74:52:c3:a2:62:23:e5:cb:a8:0b:d0:bb:
                    9b:c0:b9:2c:13:fb:71:45:db:00:c2:9a:ee:03:ad:
                    27:fe:df:bb:d4:10:37:7b:b3:3e:46:04:12:94:5a:
                    ed:05:c1:f5:a9:37:4a:86:b5:ca:aa:16:f2:f8:b8:
                    45:ad:06:10:bc:e5:85:08:eb:2e:80:3f:0d:83:26:
                    b9:68:38:dc:f7:4b:5f:c7:41:a9:47:73:81:64:b9:
                    1c:06:27:d5:74:5b:49:96:34:ba:7e:31:b9:a7:5b:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:FA:72:D2:38:5D:07:36:EF:32:76:99:E2:AF:43:01:80:F0:5F
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:d6:46:1a:ed:2a:d4:2d:d5:d1:77:36:20:02:a6:23:95:
         6b:96:8d:f9:91:f3:f6:75:7a:a6:7f:4b:10:04:be:da:da:ae:
         4d:b0:55:28:6a:f6:36:58:fe:f5:66:bb:b3:42:63:b3:1d:67:
         14:38:c5:e6:3f:d4:28:2f:c9:23:61:5f:eb:8b:0d:82:63:3a:
         0e:b0:d8:66:e8:db:3e:67:55:df:df:b0:60:a2:91:55:3a:56:
         b0:44:9d:87:15:19:01:3c:89:c2:7b:36:42:67:a5:8d:8a:eb:
         a6:6b:33:26:93:66:f2:ed:bb:26:79:ed:d9:cb:06:ea:69:65:
         a6:61:ac:30:26:1d:4f:a3:f7:55:52:eb:01:63:30:2e:af:64:
         66:9b:25:17:82:a3:56:fe:09:b6:35:6d:32:b8:30:2b:8f:cc:
         3a:38:aa:d0:2a:a7:09:9f:e0:b1:cf:74:51:5f:b1:a2:b7:7d:
         82:f9:d9:4a:c2:3f:55:a2:8c:ca:4e:59:d6:df:2d:50:1a:cc:
         19:c2:78:d4:44:91:9e:4f:b5:6c:a3:e2:7f:d5:06:33:5c:3d:
         f4:22:fd:e7:6d:a1:ef:c8:5e:ba:1f:fe:90:36:e0:df:b5:05:
         37:66:f1:9d:38:bc:0b:62:54:85:6f:11:9a:c2:ae:83:a9:90:
         8a:11:3e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROKISSQiWZcdTO7nIygwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl
OTc2OTEwHhcNMjQwNTA3MDQwMzM2WhcNMjQwNTA4MDQwMzM2WjAzMTEwLwYDVQQD
EygyNWJjZmE3MmQyMzg1ZDA3MzZlZjMyNzY5OWUyYWY0MzAxODBmMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0dmtf0mh1qBmr0miylos+v8uLUz
miLuNafpNiz+eYY1HKJZQyY7NytVOMPmn7M0gkU9lnV9RxtqZXcLB3paGRvs1Yad
atlLEXWHlqw36GxkLot+o0GIx4tAfwsNYH4pu//2T309YMz1O2E4D+sXentj2t23
664EmxYmJD+RB1/9Pcn8jt08BEzzxjKazPouIA0TyQlyltR0UsOiYiPly6gL0Lub
wLksE/txRdsAwpruA60n/t+71BA3e7M+RgQSlFrtBcH1qTdKhrXKqhby+LhFrQYQ
vOWFCOsugD8Ngya5aDjc90tfx0GpR3OBZLkcBifVdFtJljS6fjG5p1v57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW8+nLSOF0HNu8ydpnir0MBgPBfMB8GA1UdIwQY
MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt
OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy
LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxvWRhrt
KtQt1dF3NiACpiOVa5aN+ZHz9nV6pn9LEAS+2tquTbBVKGr2Nlj+9Wa7s0Jjsx1n
FDjF5j/UKC/JI2Ff64sNgmM6DrDYZujbPmdV39+wYKKRVTpWsESdhxUZATyJwns2
QmeljYrrpmszJpNm8u27Jnnt2csG6mllpmGsMCYdT6P3VVLrAWMwLq9kZpslF4Kj
Vv4JtjVtMrgwK4/MOjiq0CqnCZ/gsc90UV+xord9gvnZSsI/VaKMyk5Z1t8tUBrM
GcJ41ESRnk+1bKPif9UGM1w99CL9522h78heuh/+kDbg37UFN2bxnTi8C2JUhW8R
msKug6mQihE+1w==
-----END CERTIFICATE-----
Generated at Tue May 7 08:12:27 2024 by rpki-client on console-ams.rpki-client.org