Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          UkcOb2JMJlLTAm5DZStAsEG9V2AVnm40TtIi4TDRBOQ=
Subject key identifier:   E5:A6:76:26:80:92:8E:20:C2:92:BF:28:FE:90:0C:FF:5E:34:0A:4B
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       01936AB437E830B82B34404E6A2967280CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          04F5
Signing time:             Tue 26 Nov 2024 23:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:15 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: v6H5nzwjnqcDNrbPTtfeNSY1P5aQ3bcRF5bA6/mzw44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:37:e8:30:b8:2b:34:40:4e:6a:29:67:28:0c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Nov 26 23:00:15 2024 GMT
            Not After : Nov 27 23:00:15 2024 GMT
        Subject: CN=e5a6762680928e20c292bf28fe900cff5e340a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:c6:bb:1c:0e:2c:22:34:88:66:02:24:dd:
                    b9:68:01:ef:b3:88:97:4b:3c:80:2b:80:94:9e:e3:
                    db:15:06:13:0e:31:22:53:48:79:76:db:06:74:37:
                    6d:bf:ab:93:24:6a:35:34:9d:fa:7e:ae:42:2d:28:
                    24:78:b4:48:85:32:aa:72:06:99:4a:4e:dd:9a:30:
                    39:61:c2:6a:4d:23:64:a3:40:8f:82:b3:88:2d:d8:
                    b1:0d:ca:cb:12:f5:2d:c2:84:1f:05:96:8f:79:b8:
                    e9:d7:45:7d:61:ef:59:9a:ca:85:e3:48:5d:d6:d0:
                    0b:e6:8f:4d:08:09:e9:79:de:da:91:b6:da:67:5d:
                    5b:8c:6d:0f:9c:9c:61:14:ba:88:f6:cf:1c:d8:e0:
                    dc:7d:3c:9d:2f:59:a3:58:13:f8:87:a5:0b:fd:d0:
                    30:17:53:15:fb:8e:e6:29:0f:56:c1:67:32:e4:d5:
                    a9:1e:8a:4c:1e:c0:eb:4d:f5:ac:11:1b:36:7e:63:
                    92:3d:4d:9d:a3:51:86:1e:9c:39:16:98:aa:bc:20:
                    c5:e9:82:58:ad:44:2c:a0:34:d5:45:69:54:1d:3a:
                    27:37:65:25:55:b4:11:59:44:23:f0:56:f5:81:63:
                    44:ea:0d:b0:01:20:1a:74:43:d0:06:be:23:17:fd:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:76:26:80:92:8E:20:C2:92:BF:28:FE:90:0C:FF:5E:34:0A:4B
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:9c:5a:32:99:4c:43:19:70:ae:57:b6:38:62:1b:63:9f:
         cc:5a:d2:f8:c5:bd:6e:a8:b7:6a:eb:25:95:de:fb:f0:b0:4a:
         e4:2a:b2:ec:5d:1c:01:9c:f5:0e:47:89:2e:89:53:e8:5b:cb:
         bb:bf:8d:86:a0:8c:aa:46:88:19:27:0a:70:3d:cc:ed:df:cc:
         56:b9:77:2a:8a:28:ce:eb:93:5f:00:83:83:56:79:9e:84:35:
         7e:f4:ac:8b:e8:af:ed:c1:a2:17:6d:10:5a:9e:25:93:70:37:
         16:cb:90:ee:74:5c:e3:33:60:0c:f1:a0:22:e4:8a:cf:e9:30:
         3f:de:a2:66:bd:5d:09:b8:77:67:7e:1f:b8:8b:d4:4e:16:aa:
         52:02:96:ae:11:15:33:46:3a:d2:ec:ab:6a:1b:91:60:ad:0d:
         a6:32:77:38:28:b3:fe:8a:f3:de:7f:05:15:f4:44:9e:e9:6f:
         a6:67:66:f2:bd:c9:c1:f7:cd:63:e4:d8:44:33:e7:26:ea:91:
         96:0e:c8:d4:12:11:61:a3:77:83:32:a5:ed:e0:af:0e:47:a3:
         4f:b2:7b:74:46:c6:69:68:fa:e1:e3:cc:db:5d:48:c9:df:27:
         3e:a2:16:2d:81:1c:24:d4:48:b7:05:af:7a:dd:57:a8:98:90:
         69:b3:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:53 2024 by rpki-client on console-ams.rpki-client.org