Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
File:                     G68dbBfxeiDxUwVXZjn97fqihaQ.mft (raw, json)
Hash identifier:          V+CSHK+31iKPRcSuvpw+Dh1tgQxfiyYIFkrFtoIAYdU=
Subject key identifier:   75:53:D3:3B:C6:86:E0:ED:EE:00:5B:4C:35:26:80:D4:D7:CD:22:C0
Authority key identifier: 1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4
Certificate issuer:       /CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
Certificate serial:       01940646DBB7DAFFAD7517291BA3F4E96AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
Manifest number:          04C8
Signing time:             Fri 27 Dec 2024 04:01:34 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:34 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:34 +0000
Files and hashes:         1: G68dbBfxeiDxUwVXZjn97fqihaQ.crl (hash: zD5f5Fgq8lDEqT+037lQOqpOmVRCp7LkGYvYqDkAEV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:db:b7:da:ff:ad:75:17:29:1b:a3:f4:e9:6a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1baf1d6c17f17a20f15305576639fdedfaa285a4
        Validity
            Not Before: Dec 27 04:01:34 2024 GMT
            Not After : Dec 28 04:01:34 2024 GMT
        Subject: CN=7553d33bc686e0edee005b4c352680d4d7cd22c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:28:cc:46:ae:20:a5:0a:ee:12:70:d3:e8:21:
                    26:b3:e1:c5:9a:85:13:46:c5:a6:8d:d5:46:36:ae:
                    89:42:79:48:92:e6:b4:76:22:68:bc:22:49:c1:2d:
                    7c:7a:65:36:44:69:0e:48:09:c8:d0:61:b1:bb:05:
                    43:93:89:16:e2:60:93:95:27:cf:0b:3d:aa:49:13:
                    ce:a4:d8:ff:1b:78:6b:53:82:52:b6:a0:d0:03:c1:
                    90:f7:5a:b3:a8:07:b7:67:bc:63:fb:b0:f5:b7:55:
                    67:68:b7:25:8c:cc:82:89:c3:bf:21:fa:f3:b6:09:
                    5b:48:4f:a7:2e:40:75:d3:ce:9f:7b:49:8b:28:f9:
                    cf:0c:e0:d8:43:ed:dd:f8:a1:42:3f:15:f3:8f:55:
                    af:c3:db:ec:74:98:84:ac:9e:51:24:6d:f6:ec:49:
                    b6:e7:b3:c1:24:8a:95:9d:ef:02:da:76:1c:f4:05:
                    b0:0a:d5:3e:81:f3:e0:27:4e:21:79:cb:22:a6:4e:
                    08:ad:17:ce:d6:42:6f:55:13:d4:0c:2a:a0:7f:85:
                    f9:33:87:74:8f:b2:6b:e9:36:5a:12:48:5c:0b:f2:
                    fb:27:87:1f:ad:4c:a4:ba:1b:4c:17:67:9a:6e:ba:
                    c2:45:e8:a4:a2:bb:c4:85:2c:7a:8a:87:20:a6:30:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:D3:3B:C6:86:E0:ED:EE:00:5B:4C:35:26:80:D4:D7:CD:22:C0
            X509v3 Authority Key Identifier:
                keyid:1B:AF:1D:6C:17:F1:7A:20:F1:53:05:57:66:39:FD:ED:FA:A2:85:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G68dbBfxeiDxUwVXZjn97fqihaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2c677e-1c87-4668-aa21-56690397d039/1/G68dbBfxeiDxUwVXZjn97fqihaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:19:48:9e:42:33:e3:2a:7b:8f:eb:d1:8e:28:47:a1:e5:4b:
         ce:e5:db:1c:4e:f2:61:b9:50:e3:bb:27:71:74:ee:ec:67:b1:
         a6:83:72:ed:7e:7a:6e:2b:20:8b:f5:bc:7a:94:4b:0e:ac:1c:
         34:31:a2:01:41:f4:1b:87:63:9f:b0:0c:bf:91:2c:dd:ad:ec:
         30:3c:92:75:5d:15:8e:0a:60:ba:5b:f2:3c:65:c8:7e:71:57:
         0f:52:b3:ac:e9:18:9b:3f:58:a5:b9:d0:cb:61:bc:1a:f1:74:
         55:50:98:49:3c:9e:e5:43:fb:b0:b3:5d:63:a6:b7:f3:24:de:
         70:d7:12:10:c2:0e:76:8b:df:51:87:22:da:b4:ed:77:54:c1:
         66:6e:b0:8d:5b:db:1b:e6:1b:ef:4b:dc:1d:cc:f0:c6:59:a8:
         85:b8:d8:16:0f:07:72:15:1e:63:cf:73:3a:10:f7:c6:0f:71:
         91:27:f7:50:4f:96:05:5b:2a:ec:cc:dc:df:ce:85:1a:27:ee:
         45:f2:50:0c:fc:c3:87:7e:14:be:bd:d9:27:f3:30:01:1c:3c:
         98:9b:4c:0a:2f:cc:eb:0f:c3:33:fa:b8:4f:51:4e:1e:c6:ca:
         b4:c6:bc:e0:c3:7c:f6:39:97:c3:ba:e5:93:3c:2a:0a:9a:2c:
         37:ec:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:15:44 2024 by rpki-client on console-ams.rpki-client.org