Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          3T/dT/F32UsV31tPTzPNKVLolaj1cg2A9J4MiGS+H50=
Subject key identifier:   07:BE:2A:71:55:56:D7:F7:BD:EB:B3:6F:0C:E0:19:B7:53:AA:C4:BE
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       019406EAA398BBC847925002A854EC92C66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          0DC7
Signing time:             Fri 27 Dec 2024 07:00:28 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:28 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:28 +0000
Files and hashes:         1: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: 8KqdddHcmeDg8gY6QOLQnCG2+z6nkHSs59UeBRX14Lk=)
                          2: n2CuodfCPouCM-L8tkR8INHGBBo.roa (hash: 4aG9zfFYHww+QPfySp0aMy9HYPnNpJulVWw5gYLv2uM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:a3:98:bb:c8:47:92:50:02:a8:54:ec:92:c6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Dec 27 07:00:28 2024 GMT
            Not After : Dec 28 07:00:28 2024 GMT
        Subject: CN=07be2a715556d7f7bdebb36f0ce019b753aac4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:39:10:a9:41:f4:e1:2b:79:cb:c6:c5:32:
                    a2:5c:12:fc:c4:4a:df:1c:ce:c0:44:61:4c:a6:7a:
                    17:8a:84:e2:37:f3:65:2f:b1:76:d6:2d:6b:d0:a4:
                    79:fe:6c:14:75:b3:8c:be:20:c8:d3:da:e7:56:50:
                    5a:36:84:01:ff:34:39:81:f6:b6:08:08:30:0b:ea:
                    29:f9:15:4d:99:03:2b:a6:2d:2a:2a:c9:1a:7e:7d:
                    62:3d:df:d2:58:b8:74:66:a2:08:b5:6b:3b:c0:6c:
                    a4:0a:fc:1b:a8:86:5d:26:49:2b:a4:f7:bc:0f:e9:
                    79:b8:6d:46:31:8f:c3:55:37:4d:34:9b:26:15:2f:
                    d6:77:14:43:ce:14:b6:91:09:6b:c1:c5:77:68:15:
                    18:0d:65:d9:1e:34:c5:4e:5d:fc:84:79:d3:98:0d:
                    6e:db:57:91:66:73:fb:c1:89:3f:ed:08:41:8b:9a:
                    32:dd:79:e4:f4:dc:46:b1:7e:81:96:0b:74:39:d3:
                    bd:4a:03:08:ff:3a:67:c4:02:c4:0d:87:9b:91:36:
                    c7:38:fc:0a:bb:d5:45:6e:10:5d:b2:df:ff:aa:2a:
                    71:ed:de:73:41:e9:9d:2f:18:28:39:50:d5:06:9a:
                    3a:08:b8:16:70:81:08:b9:25:3f:43:1f:f0:71:a3:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:2A:71:55:56:D7:F7:BD:EB:B3:6F:0C:E0:19:B7:53:AA:C4:BE
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:46:a0:46:43:82:ab:04:62:6f:d7:8f:c0:66:01:2d:33:
         30:31:c8:f2:1f:dc:2e:d3:72:f9:72:38:7b:8b:06:d6:7f:78:
         71:44:df:4c:9d:45:b9:92:0a:0a:f6:dd:d9:cf:ef:fe:d1:25:
         34:d6:ea:21:af:0e:2e:72:4e:dd:f1:d5:15:c2:aa:e9:8c:84:
         43:5e:8a:f4:77:e7:4e:2d:79:71:16:fa:11:8c:c5:e3:95:43:
         d8:89:ed:e3:d6:6f:a9:de:33:63:90:88:68:25:6c:40:38:c9:
         83:da:2a:cc:5d:d9:c0:d1:2e:a6:d8:07:e2:66:b4:be:34:c0:
         f9:12:6f:89:3a:18:c9:08:2a:9c:53:68:d6:77:25:db:9b:e7:
         f5:ab:ce:7e:99:a8:02:79:85:2f:84:0c:37:39:e6:c1:dd:1f:
         c7:f2:ed:72:f5:65:b8:67:f9:26:e8:a0:66:d1:71:67:27:b2:
         88:fc:ec:55:f1:81:18:d5:d3:ac:98:5c:97:34:4b:3b:a5:74:
         4a:25:18:66:77:a8:c4:7c:e2:68:1a:5f:13:14:9e:92:6c:f3:
         14:5f:a0:8a:f5:b9:41:d0:83:ac:92:78:d2:b2:d7:e5:d7:0f:
         19:d8:53:57:48:23:9c:1f:63:2a:a6:bc:24:12:dd:b9:d0:6c:
         74:33:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:17:18 2024 by rpki-client on console-ams.rpki-client.org