Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          mDdvlYokWoSerVYWmD1BVJ8pOXlI2L6rR9lcsE6MX2A=
Subject key identifier:   A4:26:18:6A:71:84:D1:67:4C:44:BB:81:87:E8:3B:3A:53:D2:E2:64
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       0193579BF409FE600B3F73101BC8F59E8FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          0EAE
Signing time:             Sat 23 Nov 2024 06:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:58 +0000
Files and hashes:         1: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: kXcyPe0fPaRMcQMBe6J76CJyl6FiggpzGR+lxwavyK0=)
                          2: wn31UFilpeXDBcMwPESpDqZSVzI.roa (hash: AbAera+EBRv856kT/g0nGu91eZnxCnv9QP3cUnGN/kU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:f4:09:fe:60:0b:3f:73:10:1b:c8:f5:9e:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Nov 23 06:00:58 2024 GMT
            Not After : Nov 24 06:00:58 2024 GMT
        Subject: CN=a426186a7184d1674c44bb8187e83b3a53d2e264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:bb:e5:8b:8b:b8:69:24:34:7c:00:5a:a6:
                    c9:7d:38:2a:1a:2b:d1:a4:ad:5b:c8:3f:99:53:4a:
                    06:b3:c2:b2:78:77:d5:e6:64:64:76:eb:a0:dd:e1:
                    24:f5:f4:06:62:44:87:3e:a9:c8:21:ef:18:65:0b:
                    bf:9d:88:a3:8c:fc:f9:3e:18:77:5a:96:1b:20:ca:
                    84:46:43:ca:52:29:d2:f3:69:62:3f:7e:ad:7a:89:
                    1d:bf:c8:0d:f5:47:6a:e5:a5:39:8e:95:31:8f:8e:
                    02:a7:cb:41:d7:58:64:07:d4:38:fd:e8:4b:66:7d:
                    2a:4e:bc:15:7f:e7:e1:ec:7a:88:95:15:13:2f:c7:
                    b3:a3:8c:95:c9:ad:87:f9:8d:61:a6:6f:d0:da:c7:
                    f2:e0:51:dd:39:aa:13:39:46:fc:06:4f:84:b7:7d:
                    a5:59:e7:33:e5:82:2e:eb:6a:1c:c0:dc:4f:1c:34:
                    4a:50:30:2e:1d:bf:b9:98:3e:fe:1d:cb:af:5d:25:
                    22:8f:4b:86:f8:6e:03:01:90:4b:56:a8:55:0c:3d:
                    bd:7e:6e:51:62:fe:16:14:29:ba:e8:52:0e:98:95:
                    f3:c5:03:5d:50:cb:3a:a1:cd:06:36:55:85:37:8a:
                    16:0e:d7:f3:76:3d:ed:78:12:7a:49:f0:b3:92:be:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:26:18:6A:71:84:D1:67:4C:44:BB:81:87:E8:3B:3A:53:D2:E2:64
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:62:54:4f:f5:37:06:26:d0:c4:ae:4c:b7:5a:46:ce:ae:a6:
         d7:7b:9c:66:58:80:dc:19:8b:4a:c4:6d:42:f2:f3:bc:97:4b:
         a7:39:f6:43:cf:bc:38:32:71:f2:1d:a5:13:3d:89:fd:22:e2:
         1b:fb:6f:ff:f9:c3:86:4f:d4:b3:20:c7:1c:b5:02:a3:84:1a:
         3e:0e:6c:d8:77:cf:de:91:02:fd:09:1c:1d:57:78:95:24:df:
         54:20:d7:5b:71:0b:90:a1:61:a2:dc:65:41:a6:83:f0:80:d9:
         42:36:4f:d2:c7:c3:63:ca:f7:3b:a5:26:a7:f4:71:c9:d7:52:
         4a:e0:af:fe:c9:7e:40:9b:c4:60:00:d4:37:85:0b:65:61:23:
         d4:46:04:d3:0f:a8:cb:ce:bd:f8:51:e6:77:ab:72:b2:9a:c4:
         28:bc:66:2d:65:41:c9:c4:69:31:ee:3e:4b:6b:fe:1a:64:06:
         89:bd:86:f6:86:f2:05:d9:e6:82:50:b2:de:63:2c:d5:26:c4:
         ed:11:61:dc:e7:cf:2f:b8:fc:9e:00:7a:03:1a:3d:9c:fa:f9:
         36:4d:d7:15:d7:86:61:6f:e1:e2:22:9f:21:d1:20:81:e1:01:
         99:d1:c2:36:54:04:34:4d:b3:80:4a:ac:13:b0:dc:9b:03:67:
         7f:11:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:18 2024 by rpki-client on console-fra.rpki-client.org