Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          wWVf7owESYNBPxxKUv3ySjMxWiSkMk7poTryk6YHIMo=
Subject key identifier:   AB:E1:E2:E5:FD:2A:57:72:C3:05:3F:15:8C:0F:AA:84:B2:76:6A:38
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       0193512BBE054D40971BE2A0661128C5DADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          0B6B
Signing time:             Fri 22 Nov 2024 00:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:41 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: JU1F0FvCftxLQ04elWvRWLT+ciZ4izb5NKKu2qZGbtc=)
                          2: trggNIZrjNlnjSfmiVu90bHo1YY.roa (hash: mPtNgzXOMagmtBWZykzH2CcCRByS1E6KtqGWmo8HH3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:be:05:4d:40:97:1b:e2:a0:66:11:28:c5:da:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Nov 22 00:00:41 2024 GMT
            Not After : Nov 23 00:00:41 2024 GMT
        Subject: CN=abe1e2e5fd2a5772c3053f158c0faa84b2766a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:ac:50:03:5d:aa:86:98:b0:f2:2f:af:89:
                    d5:3e:4f:23:e7:91:9c:2f:f6:a4:4b:46:53:ba:3e:
                    3f:a1:b4:ba:54:37:56:e2:c0:17:77:12:1b:7c:1b:
                    37:af:78:d1:e9:62:79:03:ea:30:12:3b:8d:9e:fc:
                    ce:c5:60:f5:c4:7a:93:8f:36:af:93:d1:e1:b3:32:
                    35:cf:9c:b0:e2:e7:03:38:20:5c:ac:9a:20:f9:46:
                    e2:88:12:0c:ff:7a:11:2f:aa:9d:2b:14:b1:7c:89:
                    99:85:f1:e4:ef:d6:2f:21:24:07:d7:a3:87:26:8d:
                    60:70:49:62:b0:7e:8b:b1:ac:02:d8:a2:eb:8a:ac:
                    d0:18:7e:62:0b:0f:f5:42:d1:71:e5:88:7d:16:ed:
                    13:78:5c:44:50:e8:2d:74:c9:26:d5:9a:e8:9a:cb:
                    a2:28:c7:82:cc:b8:3c:72:57:f8:61:26:88:50:39:
                    e2:1f:74:85:9d:dc:62:b0:85:74:1b:9c:51:be:9f:
                    27:1d:e3:45:28:49:66:df:d7:19:9e:96:25:38:d5:
                    e2:36:ee:4e:23:f3:f6:ec:b8:c4:9b:bf:b1:73:73:
                    49:0d:f6:b6:5b:80:4e:95:3f:90:43:11:09:d5:dc:
                    93:b4:e9:03:80:ff:5d:94:99:68:6b:c1:47:14:1b:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:E2:E5:FD:2A:57:72:C3:05:3F:15:8C:0F:AA:84:B2:76:6A:38
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:a5:9b:62:2e:75:10:8b:9d:a8:28:2f:50:ba:8b:fd:06:
         49:80:42:9b:b1:47:d9:89:9b:9e:dc:56:c5:76:af:76:38:aa:
         ba:9f:59:91:77:8a:a2:25:14:3e:48:5a:65:84:d5:83:22:a9:
         19:63:c9:b1:b9:a8:f5:ef:0c:10:a9:c9:be:c1:aa:c3:21:56:
         e5:15:7f:92:1c:9d:de:20:0c:06:51:f6:c8:76:d5:8f:4a:db:
         09:06:ae:ba:f5:e1:59:69:6e:da:f2:58:d3:3d:4a:3f:74:11:
         af:7e:98:cf:d1:65:e9:e9:4a:95:4a:42:eb:34:79:e2:0a:b3:
         20:0a:02:9c:28:63:1c:a1:0a:58:12:96:3a:7f:24:83:c6:2a:
         c8:57:26:3d:83:4e:a3:f8:a4:e4:ed:28:c0:4e:d8:d0:53:0e:
         73:14:a7:ea:97:dd:fd:1d:4d:5f:17:c0:ee:df:b5:26:37:8f:
         c2:10:70:40:d8:b4:60:fb:ae:93:57:da:cf:49:a3:3a:13:16:
         41:4a:be:c8:7a:b7:e2:26:3c:a4:bf:a8:2b:66:28:47:a3:a7:
         42:fc:ff:33:1a:96:63:84:04:72:68:2d:33:e9:83:97:76:c3:
         bf:72:af:cc:8f:38:4d:6c:85:2d:5f:2f:5a:3a:92:d2:14:be:
         67:dd:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:02 2024 by rpki-client on console-fra.rpki-client.org