Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.mft
File:                     6CW3Ws3EH2mtzEXfp69-4ntHdbk.mft (raw, json)
Hash identifier:          0ENTzN70ftpsrLNMttp5HNgylx5rNUILywtSVMXpgus=
Subject key identifier:   6E:10:3D:E3:6B:C5:9E:6C:D1:C3:42:DC:09:76:E5:D3:7B:AB:49:82
Authority key identifier: E8:25:B7:5A:CD:C4:1F:69:AD:CC:45:DF:A7:AF:7E:E2:7B:47:75:B9
Certificate issuer:       /CN=e825b75acdc41f69adcc45dfa7af7ee27b4775b9
Certificate serial:       0193572D87A95DD991EAC9C3008AB4C27310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CW3Ws3EH2mtzEXfp69-4ntHdbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.mft
Manifest number:          06A1
Signing time:             Sat 23 Nov 2024 04:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:21 +0000
Files and hashes:         1: 6CW3Ws3EH2mtzEXfp69-4ntHdbk.crl (hash: yGILjTszEJiwj8HlBiEwHEZLaAD2WgOLYiJr7X9LAZc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CW3Ws3EH2mtzEXfp69-4ntHdbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:87:a9:5d:d9:91:ea:c9:c3:00:8a:b4:c2:73:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e825b75acdc41f69adcc45dfa7af7ee27b4775b9
        Validity
            Not Before: Nov 23 04:00:21 2024 GMT
            Not After : Nov 24 04:00:21 2024 GMT
        Subject: CN=6e103de36bc59e6cd1c342dc0976e5d37bab4982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:87:26:4f:70:8f:7a:d3:68:d4:74:b5:5e:
                    77:6b:10:b0:4c:27:66:cc:d1:a8:61:79:41:16:49:
                    59:85:6c:73:73:ce:f9:e3:0a:6a:6e:a5:7d:63:86:
                    6d:63:16:c3:89:e9:97:64:50:bc:d5:aa:b8:46:69:
                    39:82:af:85:37:18:11:a0:92:0f:f0:9e:97:0d:fb:
                    00:18:19:63:b6:71:2e:60:61:7f:9c:4c:0c:78:39:
                    9b:26:fd:c0:fa:fe:fa:a2:1b:f7:66:da:e0:33:81:
                    f2:92:a9:07:ff:94:bb:1e:d6:2d:13:ef:c0:cb:e5:
                    1d:49:63:8a:eb:93:ad:09:a8:f5:de:3b:1a:91:6d:
                    9e:0a:49:8a:6b:9c:17:2c:19:b0:c5:df:e6:b0:3d:
                    f0:c9:ca:1a:e3:90:a4:39:aa:80:2b:19:4d:c9:3d:
                    4e:25:71:86:74:eb:f9:23:f7:5f:f9:ec:4c:ac:a5:
                    35:1d:f9:fe:7d:63:87:2e:ae:e5:26:e6:dc:af:c6:
                    e8:11:ce:f8:b2:f1:7b:99:16:66:74:d6:e6:06:7b:
                    bd:0a:31:c0:72:ae:60:3b:db:a2:cf:fb:ea:08:95:
                    03:44:cb:54:ec:db:ed:c0:f4:a8:7a:4e:40:37:db:
                    4f:8d:5e:21:eb:f5:ce:f2:59:27:fc:eb:61:4e:07:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:3D:E3:6B:C5:9E:6C:D1:C3:42:DC:09:76:E5:D3:7B:AB:49:82
            X509v3 Authority Key Identifier:
                keyid:E8:25:B7:5A:CD:C4:1F:69:AD:CC:45:DF:A7:AF:7E:E2:7B:47:75:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CW3Ws3EH2mtzEXfp69-4ntHdbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/21dec4-b1df-41ff-b6cf-49c3f46f88fa/1/6CW3Ws3EH2mtzEXfp69-4ntHdbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:0d:ce:d5:ab:c7:df:4e:4a:bc:d8:33:76:22:e1:c9:7c:
         e0:5c:d9:fb:28:7c:c1:6b:96:11:0a:83:15:80:90:2d:a0:9e:
         53:ee:b3:bc:41:52:f6:f7:70:e2:90:80:7d:80:b8:2d:9e:fc:
         f9:d2:cd:b7:bd:65:b4:7d:2d:cb:66:71:4e:f1:59:fd:5e:35:
         a6:62:9e:b1:37:da:0a:72:aa:61:d5:1e:a0:98:15:58:89:f1:
         16:c2:87:4d:85:50:93:03:d6:8d:b9:dc:81:6c:40:98:28:e4:
         46:77:c7:1d:2c:23:55:06:7b:4c:4a:3a:0d:c4:96:bb:48:5f:
         4a:56:18:2c:fe:02:08:a9:02:b8:3c:f6:ca:19:e7:9e:17:c9:
         39:13:81:2f:c9:f6:8a:28:a5:c8:56:41:3f:75:6f:dd:e6:ff:
         bc:c5:4e:5f:60:80:74:8c:8f:aa:35:19:f3:50:83:69:d1:c9:
         06:24:da:8a:e8:c3:5e:8f:20:ea:86:e6:37:b7:52:43:db:2c:
         df:d5:52:94:a6:eb:59:0b:94:ff:75:1b:f5:87:d5:c8:c9:60:
         3a:be:4e:f4:5a:e1:69:5c:05:df:71:8d:07:8a:4c:a5:58:20:
         e7:6a:84:49:b4:55:95:6c:9d:fe:65:18:0e:ba:a4:f3:f4:8e:
         ca:d6:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:24 2024 by rpki-client on console-ams.rpki-client.org