Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File:                     6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier:          OYCux7VO6xCryZj8HRny+mBxu5dLhrs574X2TOsa/Lo=
Subject key identifier:   2C:4A:6D:87:8B:94:74:F3:8E:DA:F5:E7:EC:E4:5E:CB:45:8E:A7:50
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer:       /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial:       0193549A999FF9EF48ED3CFE9FC293017B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number:          06A2
Signing time:             Fri 22 Nov 2024 16:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:38 +0000
Files and hashes:         1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: m6ixSRE8LA42R7YDbbAjWLNIiq/OGJQERYGaL9BzeFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:99:9f:f9:ef:48:ed:3c:fe:9f:c2:93:01:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
        Validity
            Not Before: Nov 22 16:00:38 2024 GMT
            Not After : Nov 23 16:00:38 2024 GMT
        Subject: CN=2c4a6d878b9474f38edaf5e7ece45ecb458ea750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:35:ec:5a:b4:84:40:f5:c9:ae:78:3d:06:
                    2c:12:d8:b1:a0:de:aa:35:cb:4d:fb:89:0f:7b:a4:
                    1b:91:5d:87:d8:f5:af:4f:ae:20:11:65:4d:11:c1:
                    a9:42:4b:e2:b5:a2:81:05:6b:e9:d6:d7:9e:b1:1b:
                    92:ac:cd:e2:dc:06:f5:99:cb:b5:00:1c:7e:f7:c9:
                    d4:c4:8e:21:8c:e2:a4:1f:41:b3:e3:bb:e3:5d:3c:
                    29:ce:12:ca:7e:b7:9f:20:ed:ca:4e:18:12:e8:0c:
                    4e:25:83:03:ce:33:77:6a:a7:b8:7e:64:7e:1f:0c:
                    bc:2d:cb:27:35:1d:10:72:c1:a1:ee:60:e2:ea:40:
                    be:c1:99:ec:90:4f:fa:66:61:21:42:6f:e9:bb:b0:
                    44:64:38:0f:db:97:19:6e:74:2d:70:5d:55:e5:9b:
                    4f:a8:7c:62:03:30:11:a5:97:55:72:d3:cb:dd:41:
                    a9:62:f5:08:fc:0a:c1:e1:c5:d9:49:4d:67:d7:28:
                    35:3a:76:57:bb:bf:57:99:10:d6:97:b4:06:5a:1d:
                    de:ee:4f:7e:0f:8c:ee:6c:38:66:ba:ff:5f:23:ac:
                    89:5a:97:52:13:b2:72:c7:65:63:5e:e6:12:b2:37:
                    6a:96:38:38:6a:be:ed:be:1c:9b:ea:f9:5f:43:87:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:6D:87:8B:94:74:F3:8E:DA:F5:E7:EC:E4:5E:CB:45:8E:A7:50
            X509v3 Authority Key Identifier:
                keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:02:67:1d:11:53:18:c4:28:27:fe:67:47:05:9c:5a:0a:8f:
         45:b6:fd:cc:1c:10:c2:b3:bf:8b:c4:4d:13:0a:7a:f2:69:18:
         48:f1:40:42:4f:12:2d:a9:1e:16:af:22:06:cb:f1:36:08:f1:
         e8:e4:fa:a0:4d:39:73:72:98:98:f1:7c:ec:cd:e2:bd:f7:04:
         a5:59:ef:15:92:fa:57:99:e6:ad:2c:05:c5:00:60:b5:52:13:
         85:78:ba:3a:42:90:e9:99:91:98:14:d4:31:d9:ef:9d:f0:23:
         9a:a1:c1:7a:78:71:78:f4:e0:82:ea:5d:72:a1:b9:ce:0d:0d:
         a3:84:e9:47:3b:94:80:a3:87:e3:ed:72:49:5b:01:4b:5c:5d:
         bb:b2:9c:1c:98:a4:c4:54:18:47:76:42:6b:af:be:71:68:31:
         72:06:9f:73:71:db:91:f4:b7:cb:81:20:f9:b5:d9:4a:0d:64:
         ba:04:f7:29:7a:9f:8d:94:b5:89:db:be:c0:12:d1:77:9e:eb:
         3a:4e:7e:e4:45:a1:ef:39:ad:dc:44:e5:b2:e4:78:ab:14:65:
         fd:0d:9f:ea:49:ce:c8:4b:e7:1f:49:28:a3:a6:ee:ca:14:62:
         2e:0b:0a:a6:2d:53:76:53:c2:7f:76:33:85:e8:a2:fe:7d:1d:
         46:95:a3:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmpmf+e9I7Tz+n8KTAXt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi
NmQyNzcwHhcNMjQxMTIyMTYwMDM4WhcNMjQxMTIzMTYwMDM4WjAzMTEwLwYDVQQD
EygyYzRhNmQ4NzhiOTQ3NGYzOGVkYWY1ZTdlY2U0NWVjYjQ1OGVhNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUI17Fq0hED1ya54PQYsEtixoN6q
NctN+4kPe6QbkV2H2PWvT64gEWVNEcGpQkvitaKBBWvp1teesRuSrM3i3Ab1mcu1
ABx+98nUxI4hjOKkH0Gz47vjXTwpzhLKfrefIO3KThgS6AxOJYMDzjN3aqe4fmR+
Hwy8LcsnNR0QcsGh7mDi6kC+wZnskE/6ZmEhQm/pu7BEZDgP25cZbnQtcF1V5ZtP
qHxiAzARpZdVctPL3UGpYvUI/ArB4cXZSU1n1yg1OnZXu79XmRDWl7QGWh3e7k9+
D4zubDhmuv9fI6yJWpdSE7Jyx2VjXuYSsjdqljg4ar7tvhyb6vlfQ4c3OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxKbYeLlHTzjtr15+zkXstFjqdQMB8GA1UdIwQY
MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt
ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl
LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAJnHRFT
GMQoJ/5nRwWcWgqPRbb9zBwQwrO/i8RNEwp68mkYSPFAQk8SLakeFq8iBsvxNgjx
6OT6oE05c3KYmPF87M3ivfcEpVnvFZL6V5nmrSwFxQBgtVIThXi6OkKQ6ZmRmBTU
MdnvnfAjmqHBenhxePTggupdcqG5zg0No4TpRzuUgKOH4+1ySVsBS1xdu7KcHJik
xFQYR3ZCa6++cWgxcgafc3HbkfS3y4Eg+bXZSg1kugT3KXqfjZS1idu+wBLRd57r
Ok5+5EWh7zmt3ETlsuR4qxRl/Q2f6knOyEvnH0koo6buyhRiLgsKpi1TdlPCf3Yz
heii/n0dRpWjMQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:17 2024 by rpki-client on console-fra.rpki-client.org