Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          pWq2PTDFcdXHmhlycW8sJZ7vTk9JfNP+yA1LjRhR16E=
Subject key identifier:   26:06:2F:C8:B6:04:4D:35:AB:7A:DE:9A:0C:D2:D1:07:9E:F4:43:78
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       01935A6590C07B0A22E50C9AB24DDB003ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          0265
Signing time:             Sat 23 Nov 2024 19:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 19:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 19:00:25 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: ZM04XeAWFIP9mUU9um4FKMjskXJpHWZmIBrEtrea18M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:65:90:c0:7b:0a:22:e5:0c:9a:b2:4d:db:00:3a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Nov 23 19:00:25 2024 GMT
            Not After : Nov 24 19:00:25 2024 GMT
        Subject: CN=26062fc8b6044d35ab7ade9a0cd2d1079ef44378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:95:d1:60:7f:b8:b2:2d:15:99:48:70:2b:
                    5b:95:88:a8:56:f7:53:4f:cf:c3:a2:d6:d4:99:0f:
                    83:52:f4:74:13:92:82:73:02:0c:b1:7f:8a:26:b7:
                    53:b4:e4:08:55:0c:0b:0e:37:dd:2a:32:03:70:92:
                    3a:e8:9f:d8:43:40:f5:ba:a4:5d:88:e2:9e:64:87:
                    09:30:54:dc:b0:a8:d8:f4:10:73:f0:1c:0f:76:d6:
                    6c:0b:7d:78:31:a7:46:fe:7b:b2:74:74:3e:83:99:
                    fe:b6:d2:3d:fc:b5:62:ba:4b:bc:62:d3:e9:c4:c6:
                    c8:ba:71:81:93:8c:6c:b1:9e:47:85:2d:a8:93:3e:
                    f2:a0:21:62:29:37:86:a7:7c:0a:55:55:e7:65:71:
                    bd:20:ac:47:64:12:57:c4:6e:e5:eb:07:56:c6:ad:
                    8e:dc:94:55:5e:b3:54:78:e2:a9:90:cd:1c:89:b6:
                    87:b5:73:c1:7f:1e:5a:78:11:71:99:d8:d1:3f:77:
                    47:c4:ba:fb:26:49:3c:1e:31:5f:cc:e5:5b:a6:a3:
                    af:66:a3:6e:9d:2a:df:f3:26:8a:44:99:38:55:38:
                    85:43:77:e3:19:a8:1a:a1:53:7e:8d:eb:a6:05:88:
                    f7:59:40:d8:1a:b0:23:40:22:b0:51:70:7d:8d:a9:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:2F:C8:B6:04:4D:35:AB:7A:DE:9A:0C:D2:D1:07:9E:F4:43:78
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:74:fa:0e:83:36:f6:ca:f0:e3:60:09:3c:8b:02:4c:ed:
         3f:39:af:1c:17:46:94:d5:a7:5e:30:7c:26:29:29:f4:4a:85:
         f3:53:91:a1:c7:ab:0c:2c:5e:e4:ca:b5:b5:34:38:c1:5c:b4:
         4f:d2:23:44:2e:42:f6:31:d2:76:9c:ff:48:fc:3f:b3:9b:ed:
         0a:bd:eb:85:33:71:13:91:80:a8:b9:e4:82:bf:55:03:f5:90:
         da:38:9a:b7:b7:9e:9f:9b:8e:af:e8:95:f5:f4:af:40:06:70:
         68:9f:6a:73:8e:dd:2b:3f:48:b4:04:63:13:e3:a2:ac:56:c0:
         87:c7:59:a6:23:ce:a8:5f:4c:89:46:fb:38:18:a0:96:f1:3b:
         f4:ed:bf:a9:f3:92:c7:ef:6d:85:1d:fe:30:9a:81:36:df:ae:
         b5:4b:ed:a8:53:f1:f8:4c:f9:15:37:4b:df:6f:63:0f:98:a7:
         fe:a5:8b:96:2c:e7:3a:18:40:6f:82:d0:84:69:d8:23:51:77:
         17:47:fe:ee:37:f8:90:ab:78:65:86:52:0a:87:7f:3a:91:a7:
         98:57:83:3d:fa:e7:8b:4c:0c:ce:4c:80:9b:ec:7d:e1:13:bd:
         99:8c:15:ba:e4:ad:e7:fa:81:b2:f7:19:91:f3:81:b6:d0:cb:
         8a:73:06:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNaZZDAewoi5Qyask3bADreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4
ZmNiNWMwHhcNMjQxMTIzMTkwMDI1WhcNMjQxMTI0MTkwMDI1WjAzMTEwLwYDVQQD
EygyNjA2MmZjOGI2MDQ0ZDM1YWI3YWRlOWEwY2QyZDEwNzllZjQ0Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQOV0WB/uLItFZlIcCtblYioVvdT
T8/DotbUmQ+DUvR0E5KCcwIMsX+KJrdTtOQIVQwLDjfdKjIDcJI66J/YQ0D1uqRd
iOKeZIcJMFTcsKjY9BBz8BwPdtZsC314MadG/nuydHQ+g5n+ttI9/LViuku8YtPp
xMbIunGBk4xssZ5HhS2okz7yoCFiKTeGp3wKVVXnZXG9IKxHZBJXxG7l6wdWxq2O
3JRVXrNUeOKpkM0cibaHtXPBfx5aeBFxmdjRP3dHxLr7Jkk8HjFfzOVbpqOvZqNu
nSrf8yaKRJk4VTiFQ3fjGagaoVN+jeumBYj3WUDYGrAjQCKwUXB9janiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYGL8i2BE01q3remgzS0Qee9EN4MB8GA1UdIwQY
MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt
ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk
LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArst0+g6D
NvbK8ONgCTyLAkztPzmvHBdGlNWnXjB8Jikp9EqF81ORocerDCxe5Mq1tTQ4wVy0
T9IjRC5C9jHSdpz/SPw/s5vtCr3rhTNxE5GAqLnkgr9VA/WQ2jiat7een5uOr+iV
9fSvQAZwaJ9qc47dKz9ItARjE+OirFbAh8dZpiPOqF9MiUb7OBiglvE79O2/qfOS
x+9thR3+MJqBNt+utUvtqFPx+Ez5FTdL329jD5in/qWLliznOhhAb4LQhGnYI1F3
F0f+7jf4kKt4ZYZSCod/OpGnmFeDPfrni0wMzkyAm+x94RO9mYwVuuSt5/qBsvcZ
kfOBttDLinMGwg==
-----END CERTIFICATE-----