Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File:                     C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier:          6iVZ2lMh9np9A/DJ7oxzkFLjz1SZIstOJjNR1iOPJbk=
Subject key identifier:   11:D7:45:F0:76:33:A1:93:C5:86:6E:9C:C1:37:17:0F:3A:4A:26:BC
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer:       /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial:       0193579B7CCC994DAB0E3C4264BCE4A2AB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:27 +0000
Files and hashes:         1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: x+3yjHrBr6n8B2K3pwrqTPOX594kSaQi/oPJ0u/2gcU=)
                          2: kkBdxolfOUPYG18H0Fx3c8EbyfY.roa (hash: GmpytjViCrNgUf4tt0mamBGjFcZucbdyFCA0k8kodXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:7c:cc:99:4d:ab:0e:3c:42:64:bc:e4:a2:ab:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
        Validity
            Not Before: Nov 23 06:00:27 2024 GMT
            Not After : Nov 24 06:00:27 2024 GMT
        Subject: CN=11d745f07633a193c5866e9cc137170f3a4a26bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:3e:04:0a:a1:8b:b7:4b:1e:36:c9:e0:db:
                    64:09:f9:e5:02:c7:4a:15:76:e6:41:84:67:0c:06:
                    08:6e:16:43:7e:00:3d:ef:6f:f3:da:73:0e:03:ed:
                    05:c8:c8:dc:d0:c0:35:66:54:cc:ea:75:5a:c2:1a:
                    be:2f:d6:d3:52:47:d9:e6:3a:df:99:a7:13:84:bb:
                    61:4c:c4:6a:09:be:2c:0c:2a:ea:62:ae:5a:7d:2f:
                    5b:41:f5:63:3a:0a:da:b5:af:bc:85:e2:82:57:cd:
                    90:b9:5f:fe:8e:68:c6:bc:68:80:e0:3f:f1:26:c2:
                    46:1c:8d:91:5b:75:18:f1:2d:17:4e:2c:21:e6:4f:
                    fb:9a:ef:ba:ae:74:ef:3a:b5:2e:be:39:83:48:8e:
                    bb:d1:e9:99:13:e9:9c:a1:29:1d:63:aa:fd:cb:59:
                    75:46:1a:da:8c:1b:4a:2f:e1:40:5f:9a:90:17:8d:
                    9b:28:20:e7:fa:12:3b:6b:af:5d:67:0f:75:de:c6:
                    65:74:a8:ef:db:35:2d:89:27:cc:2b:a8:88:83:f6:
                    72:3c:32:b2:af:30:34:6e:00:d1:d1:48:74:87:38:
                    43:21:3a:eb:95:4a:03:d5:22:b2:4b:c0:26:2a:36:
                    58:7e:de:df:30:47:88:16:e5:73:68:82:97:df:72:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:45:F0:76:33:A1:93:C5:86:6E:9C:C1:37:17:0F:3A:4A:26:BC
            X509v3 Authority Key Identifier:
                keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:55:09:cd:48:b0:98:dc:7b:3f:09:52:aa:ba:9f:90:43:
         80:09:d4:66:9f:4b:fa:82:44:d9:57:cb:dc:d9:c1:f7:b8:75:
         19:36:51:5c:aa:01:94:96:62:1e:b4:e1:f5:fd:26:43:3a:ea:
         6f:aa:c8:4a:47:34:3f:a0:35:14:28:5a:67:56:f0:dc:31:d0:
         e8:a1:46:f4:2f:ba:e9:7b:2b:d6:96:bc:74:ea:d8:79:23:bf:
         9e:fd:77:33:a9:08:45:1c:0a:9c:84:9f:7f:4b:45:3a:cf:c7:
         39:50:75:a7:a3:eb:ae:27:06:64:cf:af:9d:bc:78:10:3b:67:
         b2:b1:6e:97:dd:5d:0d:49:11:6c:26:a0:93:68:8b:da:5a:23:
         a7:f6:b6:75:bb:9f:bf:41:58:06:c2:f3:f6:38:18:35:57:08:
         ad:bd:34:a8:bf:6d:e7:8f:d7:f6:67:84:e1:8e:50:9e:bf:72:
         f1:fb:a2:25:08:2b:ed:26:eb:a6:f2:df:f7:7f:60:a9:c2:d4:
         8e:0b:15:a2:e2:bc:76:b7:90:02:93:52:86:94:c9:02:71:00:
         04:73:bd:b5:42:5f:de:22:9d:dc:ae:fd:d2:fa:7a:8f:96:b5:
         23:19:37:89:60:fa:8c:00:6a:da:72:6a:61:d0:c3:50:25:81:
         2f:27:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:11 2024 by rpki-client on console-ams.rpki-client.org