Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File:                     6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier:          qbidGI6PdwR4c5HX6cBNtPWHHwhAqAy9lB5M2BYYJwE=
Subject key identifier:   8E:F2:27:31:A0:EF:C8:EB:27:10:E4:A9:D9:89:5F:38:95:6F:90:61
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer:       /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial:       018F44FBB86907CC00D579C738E4D659D552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number:          0562
Signing time:             Sat 04 May 2024 19:01:38 +0000
Manifest this update:     Sat 04 May 2024 19:01:38 +0000
Manifest next update:     Sun 05 May 2024 19:01:38 +0000
Files and hashes:         1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: QmbWe0Pffz1wXU+TiW3YRlW8DI6uoomIPoJaS6fGkyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:b8:69:07:cc:00:d5:79:c7:38:e4:d6:59:d5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
        Validity
            Not Before: May  4 19:01:38 2024 GMT
            Not After : May  5 19:01:38 2024 GMT
        Subject: CN=8ef22731a0efc8eb2710e4a9d9895f38956f9061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:00:e5:d8:83:91:02:8b:72:dd:3e:3f:66:
                    88:1d:68:d5:bd:b7:4e:24:9a:25:6c:e9:6a:2d:54:
                    06:c3:ee:19:bd:e1:e8:5d:a2:36:8d:8e:7f:d8:5b:
                    21:b7:7d:79:26:cd:5b:38:d5:b2:bc:cd:d0:20:ed:
                    49:fa:84:0c:80:2b:d1:2b:42:b9:73:20:1a:f0:7d:
                    f6:ad:dc:7d:ca:78:95:ff:d8:01:d2:b7:52:b1:50:
                    44:06:26:1a:53:a8:96:36:56:a2:ec:16:f6:62:b0:
                    f9:34:9d:31:33:17:35:63:36:a0:da:08:c2:45:2e:
                    02:41:e1:cb:c3:fa:a3:7e:54:06:00:ce:84:56:3a:
                    41:57:d3:eb:a9:89:31:44:30:fe:c6:9e:9f:55:43:
                    9b:53:4c:01:b4:60:31:d8:b4:62:d8:e9:66:70:9f:
                    4f:fa:77:2c:29:fb:c7:40:33:b2:b8:af:f2:3e:07:
                    c0:30:f6:af:84:bd:ea:0e:69:b8:e9:86:68:de:b0:
                    23:d4:c1:3b:13:87:4d:a2:69:84:4f:eb:0c:05:eb:
                    74:93:ce:ff:62:45:d4:2b:ff:be:be:14:0d:5b:0f:
                    9c:bd:ee:2e:45:8e:20:0e:99:0b:88:e6:e1:e2:c2:
                    8a:77:dc:cf:d3:04:d1:26:81:97:94:05:d2:95:e7:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:27:31:A0:EF:C8:EB:27:10:E4:A9:D9:89:5F:38:95:6F:90:61
            X509v3 Authority Key Identifier:
                keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:a1:9a:b7:ca:a7:df:52:0e:ec:b0:db:7b:69:3f:e2:7f:
         8f:b8:4b:a6:94:88:ce:08:8e:19:d6:3f:ed:a9:df:27:d6:a5:
         7e:46:a2:92:85:f9:e3:82:ae:21:e1:1e:fd:f6:16:38:a4:dc:
         9e:3d:3a:5d:16:ac:46:55:22:12:a6:ba:0d:c5:bd:9a:2c:36:
         78:fc:d3:c2:aa:2c:c3:5a:a4:13:db:09:f0:ad:c7:f0:ac:b7:
         76:e5:c8:c6:7b:32:04:48:9f:29:a8:27:29:ee:ed:00:a2:d8:
         fe:1d:50:53:3c:19:00:5a:98:e9:72:4e:01:0e:36:63:cf:1c:
         02:33:ef:a2:99:6b:82:d7:ac:79:92:af:b5:7b:90:97:60:13:
         c1:c6:83:97:02:d2:2b:9a:73:de:8f:41:50:d3:77:e0:cd:96:
         15:cb:a0:a3:a5:75:53:08:f5:88:84:80:4f:84:0c:b6:93:fc:
         df:12:a3:65:07:cc:7e:7a:b3:c5:26:92:77:a0:8f:f6:aa:3e:
         76:29:0b:35:ef:fa:58:a1:db:c7:75:53:09:5f:6c:41:63:7b:
         ca:5b:a3:8d:1d:66:a9:d8:7c:d8:b0:00:2e:24:89:bc:33:9a:
         52:0f:dd:d2:47:0e:0b:eb:02:c9:c1:94:d7:93:31:02:e6:08:
         12:44:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 23:03:13 2024 by rpki-client on console-fra.rpki-client.org