Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          86HqzlmERr4y7X1A9J8fpqJ0mQcXsUXSsP3syLmYKc4=
Subject key identifier:   6D:34:BE:A0:98:F0:EA:1C:17:E2:B6:26:C7:65:D3:57:B5:6C:F1:AD
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       0194C3F59582DA4AA25960799EFA068AA95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          10C6
Signing time:             Sun 02 Feb 2025 00:00:39 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:39 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:39 +0000
Files and hashes:         1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: SsBol4OoUKzhPXeB+T6zrFAbrg29MFhJ3ZxYDu67bYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:95:82:da:4a:a2:59:60:79:9e:fa:06:8a:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Feb  2 00:00:39 2025 GMT
            Not After : Feb  3 00:00:39 2025 GMT
        Subject: CN=6d34bea098f0ea1c17e2b626c765d357b56cf1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:6f:9f:cd:be:2a:88:1d:71:65:5a:32:4c:
                    24:3a:d0:f4:78:02:ed:e3:3d:b9:7d:bc:57:9f:59:
                    99:d5:25:f0:d2:c9:45:24:92:96:47:37:1f:a8:0e:
                    fc:a9:77:58:77:7f:04:c6:60:95:98:e7:25:de:99:
                    ea:e8:9e:e1:fc:f3:fb:97:e6:16:f6:a5:fc:a6:d9:
                    58:f3:47:97:b6:27:58:34:69:c9:8e:90:1d:85:63:
                    b9:8e:c5:40:00:3d:c5:48:a3:5b:87:79:e7:f9:73:
                    47:e9:70:6f:18:57:5a:ef:7e:78:42:08:1e:1c:b9:
                    fa:8e:ec:3d:98:b3:80:3c:85:00:b7:a5:b3:5a:bc:
                    bf:eb:49:d7:c9:9c:76:21:e6:49:26:6e:e4:74:18:
                    94:e2:7e:bf:b6:34:04:3a:27:d3:95:9d:cf:28:d4:
                    3e:65:d6:f5:cd:f5:fd:c6:29:29:61:02:8b:ab:5f:
                    7e:ec:6e:ee:85:c3:41:70:0d:f0:38:91:89:a6:9a:
                    84:f5:f7:6b:8b:af:4e:fd:93:24:d7:94:30:77:06:
                    a1:64:c1:8e:6b:40:27:6e:cd:63:3a:3d:ac:d9:66:
                    a4:26:c1:87:b2:9a:0d:a7:87:ea:e3:d8:94:77:a4:
                    2e:a8:06:d9:c1:62:30:30:b8:eb:3d:16:52:b4:ad:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:BE:A0:98:F0:EA:1C:17:E2:B6:26:C7:65:D3:57:B5:6C:F1:AD
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:de:78:c8:6b:bc:9e:62:55:52:a8:93:6e:85:35:90:82:91:
         bc:50:b0:84:79:98:52:b5:d1:c0:87:a4:44:7c:d6:ca:f1:8b:
         72:87:2f:ef:ef:7b:11:d6:68:2b:91:17:64:ea:12:e1:d9:06:
         28:e1:6f:0c:11:78:94:8e:b9:00:8f:fb:b8:f4:5a:35:15:bc:
         38:90:e2:5f:1c:ac:8f:b0:b6:8e:5d:cb:86:c0:97:c2:9d:78:
         44:83:bc:e0:26:5a:51:e5:56:06:69:a1:04:df:2c:e2:24:fd:
         7f:95:dd:00:f5:e0:43:ae:85:9f:39:31:50:75:04:04:e1:1b:
         b5:6c:cf:2e:b6:04:fb:dd:5e:ef:ad:98:d9:c7:4f:06:2e:dd:
         55:b5:a2:7f:f5:c3:96:ca:a0:d6:c1:12:c3:5e:7f:83:89:38:
         f0:65:77:60:e6:cb:2d:7e:5e:80:ed:6b:6b:60:f3:b6:03:c1:
         a0:c4:d4:72:b3:b3:f3:00:92:fc:4f:af:d1:91:3e:5c:f6:89:
         f8:61:c1:94:6c:eb:d9:ed:7f:82:8b:12:92:8a:91:53:b6:c0:
         11:a9:3f:de:9c:3c:37:8f:2e:7c:11:15:2d:87:0a:e2:1e:a3:
         48:4a:41:a2:db:c0:8f:e5:98:23:ff:8c:1a:29:42:57:a8:9c:
         58:80:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:16 2025 by rpki-client