Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File:                     6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier:          gnuUbGRb1z/2nz/VfFlZg2xmrTicQeJLmN0D8Qj99L8=
Subject key identifier:   D5:C2:B4:81:92:95:60:25:4C:10:DF:4F:3C:8E:48:2C:7B:30:8F:39
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer:       /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial:       018F45A2B082D59F81186EEC263373394877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number:          07E8
Signing time:             Sat 04 May 2024 22:04:00 +0000
Manifest this update:     Sat 04 May 2024 22:04:00 +0000
Manifest next update:     Sun 05 May 2024 22:04:00 +0000
Files and hashes:         1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: L9kQ7K9ZkhiFpGHVMavLg0B3+CNxeTBYh2YEr0nxqjY=)
                          2: JndOZnJuD7VeVtgFn7jTOya0C7w.roa (hash: 1eJ1OWtaIx/DGoIMazt3tn6pZJzZMIkM+x9Kg7IgSJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:b0:82:d5:9f:81:18:6e:ec:26:33:73:39:48:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
        Validity
            Not Before: May  4 22:04:00 2024 GMT
            Not After : May  5 22:04:00 2024 GMT
        Subject: CN=d5c2b481929560254c10df4f3c8e482c7b308f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:43:0a:87:57:51:2d:d3:5d:b2:4d:17:d9:
                    f3:b7:d7:4e:50:1d:65:3e:f0:f5:0a:58:48:24:3a:
                    c0:20:b2:e7:88:28:8b:13:07:d6:b2:0b:01:a1:2e:
                    9d:4f:68:2b:27:9f:20:21:e1:20:d0:23:51:fc:f5:
                    50:d3:7b:ec:30:da:77:61:1f:8f:89:b5:31:23:e6:
                    59:98:35:61:06:6f:e5:ad:e6:45:fd:ce:cb:89:60:
                    a4:cd:71:f0:62:48:39:c0:d5:ec:5d:52:7e:54:a8:
                    ed:11:74:cb:be:b2:e3:ea:96:05:6c:ab:22:10:27:
                    65:61:5a:7d:fe:9f:96:9e:1c:f9:ca:2b:03:67:da:
                    40:55:9e:78:a5:89:16:e9:ba:a7:55:36:fe:cc:a3:
                    5e:1e:fd:5d:d8:f3:6c:e2:b2:e4:ed:ca:f9:b9:61:
                    9a:2a:a5:fc:08:cd:f1:16:21:20:90:b9:2c:3f:cf:
                    a9:b6:98:fe:b0:30:43:0a:35:d2:33:04:76:36:95:
                    a5:0f:93:66:5a:06:19:f1:ac:0a:14:42:c5:f7:49:
                    bc:34:de:0e:97:8f:0c:85:6d:15:a0:9a:ff:05:a0:
                    65:73:5f:b9:7d:1c:3b:c4:75:09:c2:9c:8f:10:78:
                    53:ab:64:68:05:d4:3d:51:df:16:87:20:4e:8a:9e:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:B4:81:92:95:60:25:4C:10:DF:4F:3C:8E:48:2C:7B:30:8F:39
            X509v3 Authority Key Identifier:
                keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4b:c2:96:1f:b8:00:0d:d4:e6:12:89:3a:7f:5c:1b:64:56:
         11:ee:26:d4:94:eb:22:9e:ee:be:15:cb:19:8b:9f:99:49:97:
         d9:d1:b3:8b:ef:bd:36:d8:21:56:98:4d:f9:c9:33:ea:d1:8b:
         c6:dc:3c:3b:d3:a4:44:6e:ef:18:29:a6:7f:d2:7b:d0:6f:79:
         6a:66:e0:86:cc:f7:05:76:1e:b3:50:5d:f2:6c:f9:20:55:50:
         0c:0b:05:e2:32:e6:1a:a6:a1:96:ba:0f:59:a3:f9:d4:86:0a:
         dc:2c:55:62:8f:32:92:a1:f6:52:35:e4:09:b3:81:a7:05:69:
         35:a8:2a:07:8d:68:3a:b5:c5:f6:1d:d0:ce:35:d5:28:5d:08:
         26:15:a4:25:a9:74:22:22:d4:ee:80:e7:a8:46:3b:c3:60:6c:
         82:de:ba:03:fb:96:33:77:76:02:7e:a5:de:56:52:84:1c:e7:
         ab:86:af:23:b0:30:c7:6e:45:61:45:ee:83:12:a8:74:9a:93:
         33:18:f9:25:7a:b2:e9:46:71:45:6f:dd:01:9e:34:14:51:e4:
         61:8b:b6:bf:2c:38:42:a2:e0:05:a5:7d:0c:11:dd:ad:17:f5:
         31:cc:78:d0:4c:ca:ed:4e:8c:9e:31:d5:21:b3:16:a5:b7:2c:
         aa:64:fd:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ForCC1Z+BGG7sJjNzOUh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm
NmY2NTMwHhcNMjQwNTA0MjIwNDAwWhcNMjQwNTA1MjIwNDAwWjAzMTEwLwYDVQQD
EyhkNWMyYjQ4MTkyOTU2MDI1NGMxMGRmNGYzYzhlNDgyYzdiMzA4ZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu1DCodXUS3TXbJNF9nzt9dOUB1l
PvD1ClhIJDrAILLniCiLEwfWsgsBoS6dT2grJ58gIeEg0CNR/PVQ03vsMNp3YR+P
ibUxI+ZZmDVhBm/lreZF/c7LiWCkzXHwYkg5wNXsXVJ+VKjtEXTLvrLj6pYFbKsi
ECdlYVp9/p+Wnhz5yisDZ9pAVZ54pYkW6bqnVTb+zKNeHv1d2PNs4rLk7cr5uWGa
KqX8CM3xFiEgkLksP8+ptpj+sDBDCjXSMwR2NpWlD5NmWgYZ8awKFELF90m8NN4O
l48MhW0VoJr/BaBlc1+5fRw7xHUJwpyPEHhTq2RoBdQ9Ud8WhyBOip4tHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXCtIGSlWAlTBDfTzyOSCx7MI85MB8GA1UdIwQY
MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt
OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy
LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEvClh+4
AA3U5hKJOn9cG2RWEe4m1JTrIp7uvhXLGYufmUmX2dGzi++9NtghVphN+ckz6tGL
xtw8O9OkRG7vGCmmf9J70G95ambghsz3BXYes1Bd8mz5IFVQDAsF4jLmGqahlroP
WaP51IYK3CxVYo8ykqH2UjXkCbOBpwVpNagqB41oOrXF9h3QzjXVKF0IJhWkJal0
IiLU7oDnqEY7w2Bsgt66A/uWM3d2An6l3lZShBznq4avI7Awx25FYUXugxKodJqT
Mxj5JXqy6UZxRW/dAZ40FFHkYYu2vyw4QqLgBaV9DBHdrRf1Mcx40EzK7U6MnjHV
IbMWpbcsqmT9nA==
-----END CERTIFICATE-----
Generated at Sun May 5 00:39:12 2024 by rpki-client on console-fra.rpki-client.org