Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          x1pwOvzb+Ug9xvBTZI3MiXk+fwJeUH/INQQBTDtS99k=
Subject key identifier:   6B:B8:C7:09:ED:36:24:F7:BC:94:22:FB:A5:00:B1:E7:FC:8E:EC:42
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       01935689ADE32397404C9CC1C05BBD7FCFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:23 +0000
Files and hashes:         1: GY8UF_e74UollanhGstg7mbbWSk.roa (hash: XC4CC2rwJMKVO//jp/QM/09AfanSIbeVqM7v/Wi1jbk=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: SO9oTxHFHzj8QYBBWFFilfn+9T0glKcXs1tvQsADX/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ad:e3:23:97:40:4c:9c:c1:c0:5b:bd:7f:cf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Nov 23 01:01:23 2024 GMT
            Not After : Nov 24 01:01:23 2024 GMT
        Subject: CN=6bb8c709ed3624f7bc9422fba500b1e7fc8eec42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:bb:27:0b:65:60:d5:f6:65:74:33:88:95:
                    3c:35:5d:29:e6:72:bc:29:f8:8c:f2:05:cf:30:45:
                    19:77:6c:8b:94:68:f5:26:a1:7f:a9:38:38:5f:56:
                    0a:cd:5a:a2:36:34:3b:ad:d9:ce:84:0b:d0:db:e1:
                    a6:71:db:2e:04:0b:17:6e:23:38:ec:41:f1:35:f0:
                    e4:cd:d7:5e:75:ca:25:b1:7d:6c:82:0f:cd:5b:6c:
                    e4:c8:05:30:f0:c9:ca:90:79:92:3c:96:b4:f2:f1:
                    65:56:8a:24:5b:ad:68:24:e0:3b:56:db:d3:b0:d8:
                    c7:5b:ca:05:8d:20:e0:ad:4a:11:52:21:09:9f:de:
                    2e:87:05:ce:ef:56:29:90:2b:29:da:b6:a4:42:db:
                    be:34:0b:9f:aa:33:d6:5f:13:30:a9:f1:50:51:a5:
                    05:4f:c7:2b:33:c7:6f:e4:94:34:46:f1:76:a2:bf:
                    c9:73:9c:8e:f2:c9:05:34:8b:43:8a:cf:bf:c5:d6:
                    da:53:ea:b3:db:f5:11:69:aa:f4:d5:37:52:87:eb:
                    df:17:57:38:dc:1b:68:2a:cf:54:75:62:a5:06:5d:
                    35:3c:40:f1:a3:4e:39:bc:4c:9f:2c:6f:a6:06:47:
                    e8:e8:48:1d:a6:a5:78:ac:68:21:b9:19:e6:80:d6:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:C7:09:ED:36:24:F7:BC:94:22:FB:A5:00:B1:E7:FC:8E:EC:42
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:06:4d:70:a6:11:05:ee:3b:c7:0b:81:94:52:b9:ed:a2:
         ec:d5:e1:74:bd:8a:89:c2:ef:6a:15:d7:09:8f:8b:1d:9b:95:
         78:37:d5:ae:11:fa:a7:27:70:57:22:2f:01:e3:d1:aa:49:6d:
         db:8c:f1:76:a4:77:71:55:6c:bb:9b:80:a8:31:a7:72:75:1f:
         c2:3c:6c:be:3e:4b:d7:a5:fd:b2:29:fd:93:ab:d8:ad:5b:e2:
         be:11:04:4c:15:90:cf:15:cf:9e:0b:f4:0a:44:b5:2c:e8:99:
         65:70:74:9d:34:8f:54:04:a4:9b:4e:21:fe:aa:a7:7f:89:11:
         42:18:6c:4c:61:4c:f6:02:1f:e7:13:20:ae:3d:78:3f:09:77:
         d3:70:dc:c7:6d:e8:7d:0a:5b:59:00:22:87:e5:2d:72:ed:93:
         1f:a2:f4:72:57:2e:51:51:0e:c4:4c:d8:d9:03:f9:30:cc:5e:
         93:c3:d9:57:7e:54:cc:73:c4:38:1e:44:48:3f:89:4e:c8:90:
         33:bf:0c:16:75:2c:2c:d8:93:2f:81:a3:d9:f0:c0:30:21:8c:
         aa:2d:86:ea:52:71:a2:5c:c2:fd:d6:54:50:29:4c:f8:71:46:
         cc:51:12:92:df:96:35:52:3c:73:e7:ba:d6:32:83:84:61:74:
         71:42:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:16 2024 by rpki-client on console-ams.rpki-client.org