Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
File:                     6quXbuOZaLcCcSdvbSLluRyOFuM.mft (raw, json)
Hash identifier:          ZgGWfL0ws1Ifb2Dnl7mZl6U8gPU0S0BrEON7vtCpSzU=
Subject key identifier:   36:3C:47:2E:70:E5:59:5B:BE:26:48:83:C2:8B:39:5B:92:D2:4F:0C
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Certificate issuer:       /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial:       019357644B273D8EA9EA06855A7BEAFA8615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
Manifest number:          02A6
Signing time:             Sat 23 Nov 2024 05:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:10 +0000
Files and hashes:         1: 6quXbuOZaLcCcSdvbSLluRyOFuM.crl (hash: yaONHUtx2diYG2Z9wjbdRoLbHWoZVIS9xdViOUS2QE4=)
                          2: vxTPh7d6i8fof9bq9sfsH1ZTl78.roa (hash: 2/W9ppJjpSpLXWpCdFQIr3VP6SANHerfmZ4cR9ALbLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:4b:27:3d:8e:a9:ea:06:85:5a:7b:ea:fa:86:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
        Validity
            Not Before: Nov 23 05:00:10 2024 GMT
            Not After : Nov 24 05:00:10 2024 GMT
        Subject: CN=363c472e70e5595bbe264883c28b395b92d24f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:0c:09:03:36:28:a1:a1:c6:b8:a3:08:f2:
                    26:dd:91:1a:90:e8:5e:0d:1f:3b:bf:39:d6:61:91:
                    8c:7a:8f:b3:7a:47:11:f6:1b:2b:03:8a:92:88:97:
                    b1:04:82:fe:fd:b4:36:87:55:04:e9:16:2d:4b:83:
                    3f:d6:b8:89:d8:49:55:e1:cc:12:d2:85:ae:5a:e6:
                    15:dd:0a:41:42:5f:de:d2:f3:dd:e1:71:82:7d:d3:
                    57:2c:3c:66:c7:50:d1:38:36:99:44:57:49:35:ac:
                    52:10:1e:ab:3e:59:6f:4d:6f:61:bf:39:ae:a6:68:
                    4d:52:39:d4:a5:1e:71:c5:78:f5:54:a4:fa:90:25:
                    b8:47:42:d4:5f:83:34:ce:5f:18:89:ed:fb:ee:eb:
                    25:ce:68:74:2f:52:f9:9e:5a:a1:49:8f:1e:ce:ce:
                    00:b8:4e:bd:10:7b:33:b5:54:17:cf:50:f5:1a:78:
                    96:29:61:25:14:b0:50:a9:56:f3:44:49:c8:42:66:
                    9a:79:dc:5c:42:dc:9d:67:c1:4d:0d:b7:4b:8c:b9:
                    67:39:b0:d9:7b:e4:8e:4c:db:3f:f8:24:ea:54:15:
                    c1:6a:d3:a2:a7:d9:de:4a:ba:06:cf:fe:c1:a7:a1:
                    1d:56:6f:b1:df:0c:75:e3:80:4b:b6:35:ea:30:1e:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3C:47:2E:70:E5:59:5B:BE:26:48:83:C2:8B:39:5B:92:D2:4F:0C
            X509v3 Authority Key Identifier:
                keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:67:e7:21:ae:12:16:88:b4:91:56:12:99:c8:10:1f:9d:
         fc:aa:98:75:5b:29:e3:3a:98:7d:92:cd:26:f1:62:c7:0e:3a:
         57:05:72:cb:e7:55:63:f9:ab:48:69:1e:86:7d:0d:11:57:fc:
         64:7c:7e:43:5d:2d:a8:e0:13:c3:25:f3:a8:34:d9:89:8b:70:
         55:1f:35:c1:93:24:32:56:b3:ef:18:c2:c5:c1:3c:4f:25:29:
         bc:f0:89:3d:7e:bb:76:ee:92:e1:fc:62:d8:f2:be:f6:59:7f:
         85:cf:cb:31:a8:08:1a:0b:24:b9:01:b4:76:90:33:cb:30:3a:
         bd:b3:ba:f1:4e:c6:53:85:c6:96:99:0c:11:ad:d6:ad:03:d2:
         8d:b2:05:ce:db:db:9c:94:71:d2:ad:1c:35:a4:06:d6:b0:3d:
         6d:f2:e0:35:af:8b:e0:f1:df:54:a9:08:eb:54:e4:b8:f6:f5:
         3a:ef:fd:5a:4e:c9:aa:b7:b8:44:05:e1:2f:b5:df:b5:de:b0:
         dd:96:f2:e9:45:2f:ea:8b:5f:69:65:d4:f7:e4:08:41:26:68:
         88:4e:79:e8:45:68:a2:d0:99:f1:61:50:a2:6d:46:1b:38:70:
         fb:aa:a7:4f:7f:10:e5:81:d3:37:2a:0c:b6:34:46:f8:f1:cb:
         a7:0a:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:54 2024 by rpki-client on console-fra.rpki-client.org