Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.mft
File:                     6roioBcR6lVTDQq9nyRALjJOIt0.mft (raw, json)
Hash identifier:          tQEhCCEkQXjp+3iBYLc7+DNJvcEU9mwGLsV/EsXzIsA=
Subject key identifier:   1A:57:4F:7B:88:8D:68:73:D8:9A:A3:F6:9D:2E:C2:AB:C8:A3:D8:92
Authority key identifier: EA:BA:22:A0:17:11:EA:55:53:0D:0A:BD:9F:24:40:2E:32:4E:22:DD
Certificate issuer:       /CN=eaba22a01711ea55530d0abd9f24402e324e22dd
Certificate serial:       019369D9D032E0220ABE9FC03BF8F33B7631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6roioBcR6lVTDQq9nyRALjJOIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.mft
Manifest number:          0243
Signing time:             Tue 26 Nov 2024 19:01:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:42 +0000
Files and hashes:         1: 6roioBcR6lVTDQq9nyRALjJOIt0.crl (hash: DQ8RspzmNl6ZhqbQPazj5zmdLpniyHET0QsbdSXkm+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6roioBcR6lVTDQq9nyRALjJOIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d0:32:e0:22:0a:be:9f:c0:3b:f8:f3:3b:76:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaba22a01711ea55530d0abd9f24402e324e22dd
        Validity
            Not Before: Nov 26 19:01:42 2024 GMT
            Not After : Nov 27 19:01:42 2024 GMT
        Subject: CN=1a574f7b888d6873d89aa3f69d2ec2abc8a3d892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:10:b4:82:a0:ca:3f:89:e2:73:72:db:d9:
                    61:41:40:a0:5d:10:a3:3b:70:3b:91:53:6b:7e:8d:
                    de:75:a7:1c:e7:74:63:c3:d5:99:45:88:1f:94:89:
                    1f:48:35:c7:f1:54:a3:1b:51:ba:a3:65:c6:52:ee:
                    e2:95:9a:70:c6:ec:52:ac:9c:44:35:1d:9e:85:b0:
                    cc:d2:1b:12:f4:f9:d6:e2:d3:ba:0d:fd:40:ea:3f:
                    3e:26:b6:75:9d:61:d4:b1:fb:be:08:67:4b:9c:00:
                    84:3a:7f:2d:30:d3:e8:a9:1e:b4:66:26:d3:10:5c:
                    b0:c0:f5:77:93:c4:9a:17:af:79:a9:b5:f2:cc:b8:
                    43:4c:c2:3b:3a:00:49:f0:bf:04:95:99:b9:21:e0:
                    40:e0:2d:2a:90:00:ce:4d:80:90:18:9b:be:88:20:
                    7f:1f:31:e8:26:a6:e2:ca:19:8d:59:44:54:2e:2b:
                    c1:f4:52:b5:1d:e4:4b:e2:d2:ad:f1:55:62:0d:68:
                    06:a5:3a:e2:da:89:e4:9f:2c:b7:34:e5:07:b1:89:
                    90:0b:d4:d2:18:bf:8a:ce:6c:41:58:10:9f:7b:32:
                    3d:b8:41:a3:0a:9e:09:11:44:c5:e8:59:de:20:8c:
                    e4:0b:59:9d:04:01:e6:aa:38:5b:b4:8f:b9:3d:82:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:4F:7B:88:8D:68:73:D8:9A:A3:F6:9D:2E:C2:AB:C8:A3:D8:92
            X509v3 Authority Key Identifier:
                keyid:EA:BA:22:A0:17:11:EA:55:53:0D:0A:BD:9F:24:40:2E:32:4E:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6roioBcR6lVTDQq9nyRALjJOIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/248cb5-162e-4fe3-a60a-36deb82cab84/1/6roioBcR6lVTDQq9nyRALjJOIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:5c:34:40:10:36:2b:33:8d:a6:f9:38:91:bc:52:89:b3:
         2b:3c:e0:65:17:20:92:be:ad:c4:a4:ae:17:f8:62:ea:ce:46:
         99:28:07:15:11:0f:71:fe:ea:d3:36:14:64:f6:bf:5d:eb:02:
         99:6c:ed:18:eb:e1:fa:3f:13:6e:46:97:b9:e8:2f:68:8f:dd:
         73:1f:4b:f3:18:b9:75:d7:de:de:94:2e:9d:73:32:75:be:fd:
         62:8e:fb:d9:28:ba:f1:9c:28:87:2c:5c:8d:ea:1e:fd:33:b0:
         9b:96:5d:13:f3:23:a6:1e:c6:6a:46:67:a2:c0:1b:07:6c:e7:
         59:53:ec:a1:be:a2:57:37:44:d6:c5:64:c5:cb:e8:7a:33:b5:
         49:6f:4a:58:fb:d1:de:40:c5:66:fc:c8:76:80:c8:e1:70:9a:
         79:65:ec:43:c4:34:1c:11:91:e3:70:c8:10:45:92:48:68:ea:
         bc:81:0a:bf:29:da:a5:42:de:41:a8:b6:b1:00:b1:ee:7b:76:
         78:b6:63:68:80:3f:08:cd:cc:db:24:1b:86:85:6d:4a:31:46:
         a6:0e:d6:84:1c:61:8a:05:24:83:bb:07:8c:bf:71:f0:22:b6:
         35:ee:d0:f7:06:4b:8d:ae:c2:d1:d2:27:b1:41:0b:fd:76:fe:
         67:9c:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:19 2024 by rpki-client on console-fra.rpki-client.org