Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File:                     6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier:          gpu85saL94Oz9dMRIMek8QcbbztSM8kV+CoV/IqA7SY=
Subject key identifier:   1E:E6:FB:B4:60:E5:D9:0B:9C:E5:A2:F7:B6:E4:1C:B6:B1:F6:E3:79
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       0193696AAED219AA9FA98F15AE807DABD035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number:          02C3
Signing time:             Tue 26 Nov 2024 17:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:19 +0000
Files and hashes:         1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: M8La3Wt1VMpyzZj+vUSH8tCumq+842MAqane/dytLWY=)
                          2: msfDoyW_bFSjrdHuJq8L6CW3NvI.roa (hash: FLjXQb4VMp2DuIrc3fJX/hw1X3nyiyqsVxdLz2+UeyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:ae:d2:19:aa:9f:a9:8f:15:ae:80:7d:ab:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Nov 26 17:00:19 2024 GMT
            Not After : Nov 27 17:00:19 2024 GMT
        Subject: CN=1ee6fbb460e5d90b9ce5a2f7b6e41cb6b1f6e379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:6c:17:91:75:ab:74:c2:31:00:df:2c:57:
                    a4:7a:87:26:bc:a7:ee:2a:68:14:fd:72:14:f6:8d:
                    f0:a7:96:0e:4f:35:60:03:70:9e:aa:16:09:60:ae:
                    fd:a5:c7:4e:8d:7e:bd:96:00:f7:d2:ee:b8:a8:6a:
                    5f:f1:5c:ae:f7:c9:c3:e6:ea:19:f1:ea:63:c8:9b:
                    93:82:f9:94:e2:dc:96:92:78:1d:fa:57:f2:30:06:
                    78:fa:0b:0e:66:c2:d9:e5:78:7c:55:df:4e:f2:c0:
                    d8:3f:2a:0c:7f:b7:9d:47:4a:f8:a0:da:b5:ff:ed:
                    fe:45:a0:9c:7d:74:c5:65:c8:32:2b:67:44:ed:72:
                    3c:39:3a:b2:ad:cb:a8:29:19:95:e1:a0:98:2c:60:
                    b1:22:61:f9:6a:a3:0f:31:0c:f1:a1:a1:9f:28:37:
                    29:e1:01:e9:1a:c4:6c:f3:67:c7:f1:f4:12:f8:2d:
                    02:ce:ef:c8:f8:3d:15:ec:b9:ca:ed:3b:8f:1f:b9:
                    e1:de:5d:70:49:f0:47:b7:23:27:47:0a:d0:67:c4:
                    4c:b6:60:24:03:0a:71:c9:e8:07:26:d3:d6:bb:70:
                    44:a6:e6:0a:d7:9b:8e:1b:18:db:27:8a:c5:b0:f0:
                    8c:91:e0:ac:65:05:41:5c:fc:25:44:de:43:3f:ea:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:FB:B4:60:E5:D9:0B:9C:E5:A2:F7:B6:E4:1C:B6:B1:F6:E3:79
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:ec:86:37:d1:e6:b0:c0:d8:d3:76:9f:e1:8e:c9:1d:dc:
         41:da:42:ee:f9:23:b2:b8:54:11:1d:d3:e7:f6:d8:14:29:2d:
         b2:c7:95:f6:5a:82:06:66:88:63:60:86:a3:96:08:7c:b8:1a:
         df:d8:c2:f5:11:f9:c0:0e:a8:65:1c:8b:fc:a4:0d:1b:21:ab:
         31:ce:c4:d3:ad:f1:d6:c7:8b:45:50:1f:bc:fc:2f:23:87:2a:
         3a:e3:89:64:92:43:33:7b:17:52:ca:18:1b:4e:89:f0:48:b4:
         3f:2e:af:fc:f4:93:a7:f1:e5:76:bb:4b:be:15:06:6c:90:f3:
         dc:98:ec:41:12:d5:c1:18:c3:37:26:a9:0f:19:eb:3f:98:32:
         d0:7f:32:c4:48:f2:8c:eb:ca:e0:2b:bb:0b:ff:b9:e3:10:5b:
         c6:20:05:81:42:4f:3b:62:01:fe:1b:cc:33:82:97:f9:d5:55:
         dd:90:e3:2b:ff:d7:77:de:ff:ec:08:e6:90:04:06:17:ee:c7:
         e6:d0:0c:8f:75:89:99:1b:06:02:db:b3:fb:9e:f5:88:b4:ed:
         db:49:e4:71:ac:56:af:6f:70:d7:d4:f9:86:a5:0d:61:45:35:
         83:e4:2f:76:b9:7b:73:df:9a:8a:7e:cc:32:71:bf:9f:af:44:
         0e:d6:fe:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:27 2024 by rpki-client on console-fra.rpki-client.org