Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          AFcNwiezYjoPcNa8QFTK2jo8Wv1gO26lMrW7G1B6Hag=
Subject key identifier:   6E:EF:0B:BC:46:B6:00:67:E5:91:0A:11:33:CC:C6:3D:50:44:B0:34
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       018F3889181A939C0B35B57419D8813451DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0542
Signing time:             Thu 02 May 2024 09:00:59 +0000
Manifest this update:     Thu 02 May 2024 09:00:59 +0000
Manifest next update:     Fri 03 May 2024 09:00:59 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: j3ahwv9K37JSNGSG4byzpkcdxpz8cXzCd0KdOqMfOWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:18:1a:93:9c:0b:35:b5:74:19:d8:81:34:51:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: May  2 09:00:59 2024 GMT
            Not After : May  3 09:00:59 2024 GMT
        Subject: CN=6eef0bbc46b60067e5910a1133ccc63d5044b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:0b:8c:30:01:1b:84:64:7d:83:b2:22:78:
                    49:11:99:53:8f:a8:0f:19:65:31:ac:92:7d:db:8d:
                    25:70:4b:34:6e:e9:ed:f9:d9:c3:23:f9:75:9d:51:
                    49:2b:4f:67:2b:a5:1f:db:9b:f7:90:a2:d6:fa:06:
                    aa:9b:6c:0d:89:32:35:2a:d7:7c:20:6c:19:d8:74:
                    fb:68:2d:4b:f7:a8:82:02:a8:c5:4b:32:74:7e:11:
                    ae:7e:3c:66:b6:26:c2:84:94:5f:a9:ce:df:ad:33:
                    c9:f8:99:71:56:28:e4:90:62:ba:a0:5c:24:ef:6a:
                    fa:fb:0c:02:d0:38:63:26:00:b4:77:fe:04:11:c5:
                    2e:0d:2a:95:d0:d3:2a:ce:47:c8:1a:4a:f0:bc:7b:
                    99:66:37:91:57:9f:48:bb:76:54:8e:c5:c8:d4:5b:
                    48:6c:d9:e4:6d:a3:c0:ed:6b:13:04:43:ed:d7:2c:
                    f1:2e:94:bc:b8:9b:e6:20:dc:91:17:e9:9b:e7:c1:
                    4a:fa:37:a5:18:2d:bb:a1:79:ba:ac:6b:e2:b7:c6:
                    9e:7d:9d:b3:94:1c:a4:5b:8f:8b:85:bc:3e:ab:39:
                    c6:88:38:f3:e7:47:50:f6:2f:e3:5e:a0:66:8c:d1:
                    86:54:2e:f5:e3:45:aa:e0:c7:dd:08:b7:ff:46:07:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:0B:BC:46:B6:00:67:E5:91:0A:11:33:CC:C6:3D:50:44:B0:34
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:63:5c:b9:ac:e4:ac:3a:7b:e6:11:ea:e4:4b:96:be:f9:
         c8:4f:4d:19:ec:e2:9f:44:97:f0:54:5d:56:78:f6:d1:8b:8d:
         7d:08:75:50:9a:89:99:ef:9e:d1:7c:a9:29:43:c7:ff:fc:10:
         0c:3a:07:64:cd:29:43:a0:e4:65:da:6a:fc:97:3d:78:59:fc:
         73:78:67:56:df:ef:fd:2d:38:e9:28:c9:87:c2:fb:1d:74:ae:
         ad:6a:36:12:12:31:b0:30:f8:7e:c5:27:c9:59:a5:97:80:40:
         e1:ab:af:c8:c3:94:4f:21:6d:73:8b:12:18:37:64:96:d9:d7:
         e8:08:d9:9d:63:96:81:31:67:11:5f:1d:ca:f7:ac:e2:c3:83:
         02:b0:3b:6a:6a:df:72:0b:3f:1a:73:34:2f:9a:d2:dc:75:d7:
         35:08:0d:ea:63:b8:48:bf:6a:62:1d:30:56:2f:14:22:d1:55:
         ed:ca:1d:27:0b:d8:47:80:ff:d8:97:6a:fc:b8:75:2c:5d:bd:
         75:1c:27:e5:ee:28:f1:5e:04:88:02:fc:53:ee:93:a5:45:6f:
         c5:6e:8d:82:aa:bd:a0:b0:64:91:8e:d4:40:0b:27:b9:7b:9a:
         9c:36:af:76:3e:1f:1d:d0:da:14:44:ce:73:11:e8:46:af:08:
         7c:f7:f8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84iRgak5wLNbV0GdiBNFHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWEzNjJhM2ExZWE4ZDY5YTJkMjYzZmZmYzE4MGRhYjVh
MzgxYzkwHhcNMjQwNTAyMDkwMDU5WhcNMjQwNTAzMDkwMDU5WjAzMTEwLwYDVQQD
Eyg2ZWVmMGJiYzQ2YjYwMDY3ZTU5MTBhMTEzM2NjYzYzZDUwNDRiMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j8LjDABG4RkfYOyInhJEZlTj6gP
GWUxrJJ9240lcEs0bunt+dnDI/l1nVFJK09nK6Uf25v3kKLW+gaqm2wNiTI1Ktd8
IGwZ2HT7aC1L96iCAqjFSzJ0fhGufjxmtibChJRfqc7frTPJ+JlxVijkkGK6oFwk
72r6+wwC0DhjJgC0d/4EEcUuDSqV0NMqzkfIGkrwvHuZZjeRV59Iu3ZUjsXI1FtI
bNnkbaPA7WsTBEPt1yzxLpS8uJvmINyRF+mb58FK+jelGC27oXm6rGvit8aefZ2z
lBykW4+Lhbw+qznGiDjz50dQ9i/jXqBmjNGGVC7140Wq4MfdCLf/RgciKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7vC7xGtgBn5ZEKETPMxj1QRLA0MB8GA1UdIwQY
MBaAFOqaNio6HqjWmi0mP//BgNq1o4HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQt
ZDRkOGY4OTZiZmYzLzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQtZDRkOGY4OTZiZmYz
LzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2ZjXLms
5Kw6e+YR6uRLlr75yE9NGezin0SX8FRdVnj20YuNfQh1UJqJme+e0XypKUPH//wQ
DDoHZM0pQ6DkZdpq/Jc9eFn8c3hnVt/v/S046SjJh8L7HXSurWo2EhIxsDD4fsUn
yVmll4BA4auvyMOUTyFtc4sSGDdkltnX6AjZnWOWgTFnEV8dyves4sODArA7amrf
cgs/GnM0L5rS3HXXNQgN6mO4SL9qYh0wVi8UItFV7codJwvYR4D/2Jdq/Lh1LF29
dRwn5e4o8V4EiAL8U+6TpUVvxW6Ngqq9oLBkkY7UQAsnuXuanDavdj4fHdDaFETO
cxHoRq8IfPf4Fw==
-----END CERTIFICATE-----
Generated at Thu May 2 11:20:18 2024 by rpki-client on console-ams.rpki-client.org