Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          iFsij/jl74Mxr7sgyOs2sM+XT4MUGlk9AomhO+PjKWo=
Subject key identifier:   89:0D:7E:52:87:B4:3D:FA:03:5E:60:5E:06:13:16:10:19:B0:50:E7
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       019356F68D31961D23AE96F99FF678BE2E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          1277
Signing time:             Sat 23 Nov 2024 03:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:18 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: aU4J5YMkH50Vd9YuY3T3qw9Yz1Hh2hG7fYrrFRb/MuE=)
                          2: jO_fqnNXgd3MOidtFd8E3NiISbE.roa (hash: f3/Illg5wbSvWeKgpSRB6YaD7H+QOeQcovAJt0CC95Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8d:31:96:1d:23:ae:96:f9:9f:f6:78:be:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Nov 23 03:00:18 2024 GMT
            Not After : Nov 24 03:00:18 2024 GMT
        Subject: CN=890d7e5287b43dfa035e605e0613161019b050e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:b0:ec:8a:13:71:57:3b:4f:96:d8:ae:39:
                    34:f4:75:54:4e:87:47:99:08:76:9e:08:ee:6d:46:
                    f7:95:b5:41:5f:d7:86:83:9d:16:1b:59:54:bd:1c:
                    8e:49:e2:f7:02:bc:8f:3f:b3:66:75:d9:69:74:3f:
                    4d:cf:e6:e1:23:fd:25:f6:c4:45:91:73:77:73:06:
                    79:aa:5f:8a:27:4a:26:c3:8c:29:68:ee:db:63:6b:
                    23:6d:15:27:ec:e0:1d:66:41:51:48:5b:32:f4:b4:
                    a1:91:8c:29:b6:f7:76:c1:6a:0e:1c:09:fa:fe:09:
                    4c:75:25:dc:9c:61:9c:3d:96:db:74:15:17:07:7b:
                    8c:58:64:b4:a4:5a:83:3c:03:42:55:0c:8f:08:b0:
                    8e:ae:b9:d0:b4:b2:0f:01:79:a1:49:3d:ab:64:17:
                    e7:21:72:6e:2e:10:66:c0:15:8f:39:c1:8f:3c:8d:
                    e7:9b:a6:d4:34:08:9a:96:4c:d7:46:4f:d8:f3:6f:
                    03:3f:e9:95:c9:25:4f:a9:97:b2:1a:57:54:84:d1:
                    f1:cd:e8:e4:dd:ed:6a:e7:9a:29:87:6c:38:8e:95:
                    1b:15:06:77:3f:2a:c4:59:92:51:f4:21:86:22:8f:
                    54:e3:67:30:14:99:b7:30:20:d0:f2:92:1e:12:a9:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:7E:52:87:B4:3D:FA:03:5E:60:5E:06:13:16:10:19:B0:50:E7
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:c8:5c:ad:5b:e9:33:c6:53:7f:aa:41:b7:65:93:51:34:
         3a:28:0c:40:71:ac:06:1a:a8:a7:9c:bd:b7:32:90:53:b3:d6:
         5d:d0:72:9e:6e:4c:7a:16:f5:d4:49:73:8a:6d:a8:47:1f:18:
         0e:49:0d:8a:0b:78:49:08:39:1d:c5:cf:3d:a0:ca:ec:6a:55:
         73:43:47:39:48:b4:df:7c:cd:a6:e2:8f:e9:6f:e3:7e:6c:17:
         60:88:0b:b9:a5:a9:04:57:07:52:fe:37:1c:72:27:f1:af:74:
         b1:46:d5:2c:54:19:4e:ce:1b:b5:6f:c7:06:1d:81:fc:36:36:
         e9:b2:2c:dc:12:ec:aa:fe:4a:17:64:c2:71:cb:f0:aa:97:2f:
         e4:ba:d8:99:f6:98:83:b7:7a:36:83:88:e1:cd:8d:33:fb:b7:
         ca:52:d0:12:1f:13:9a:3f:8b:94:94:fc:0f:8c:aa:95:a0:5f:
         4d:e5:15:cd:d2:7e:35:f4:d4:1f:66:f1:74:36:4b:bb:c3:a9:
         7c:72:8e:b9:7f:79:20:5e:51:6b:e8:89:9e:90:ad:25:b3:0a:
         d0:5a:d0:09:3d:94:0b:c1:81:be:cd:cf:26:5e:d6:a6:0e:9b:
         d2:43:41:e6:08:5c:cc:04:7b:75:2b:49:10:2c:b5:a7:dc:f5:
         0b:29:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:42 2024 by rpki-client on console-ams.rpki-client.org