Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          o9+BZNYl3+LIP0da1/p1/8iadRPG9/447jLvOsLyEYc=
Subject key identifier:   D6:50:42:74:B3:D4:1B:DF:03:75:BC:42:85:65:8B:04:86:8D:14:82
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       019406EAA014EA4F677725D066441DCF7884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          2F
Signing time:             Fri 27 Dec 2024 07:00:27 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:27 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:27 +0000
Files and hashes:         1: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: bHw7YBd348DEExA4DiUcuCBCk4oMRXlqU6a+AlGvRQI=)
                          2: LCgptrpzPe8uK1pJRAcymqWKltU.roa (hash: J7J4TZjbL7xndjAdEQrBoyK/+nFc7bJUeGgd3fhmiyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:a0:14:ea:4f:67:77:25:d0:66:44:1d:cf:78:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Dec 27 07:00:27 2024 GMT
            Not After : Dec 28 07:00:27 2024 GMT
        Subject: CN=d6504274b3d41bdf0375bc4285658b04868d1482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:43:c6:92:6f:93:6c:8d:57:cc:98:73:e1:
                    d8:32:3e:d5:6f:60:ca:02:26:b8:1c:d7:58:88:9c:
                    1a:63:b2:35:c0:84:d2:a4:87:fb:81:cf:ec:26:e9:
                    cf:33:89:0c:de:c0:35:fd:65:7d:0e:0b:bb:79:e2:
                    17:35:a1:a6:4f:dd:c7:0d:ac:a8:84:a1:87:20:a1:
                    f3:02:42:7f:92:c3:46:34:8c:38:9c:06:b6:ac:04:
                    6d:84:63:a0:57:39:87:0c:dc:84:14:1f:e5:97:cc:
                    e5:1d:90:88:86:f6:b2:40:28:96:c0:97:cc:d2:33:
                    e7:60:05:2e:f9:86:64:23:8d:ad:8e:1d:e2:08:77:
                    ff:9d:2c:4c:02:eb:15:0b:7a:c5:49:94:6a:19:47:
                    42:8e:f8:77:6f:60:f8:70:e1:78:70:69:56:ac:ef:
                    49:74:cd:2f:25:52:c9:2d:d1:3d:cf:d0:46:61:e9:
                    71:ec:a7:f3:31:2b:7e:55:07:82:d1:8a:4f:27:a9:
                    34:40:bd:fb:49:4d:4f:0e:a3:f4:98:4c:eb:d4:78:
                    df:10:91:7c:59:12:35:cc:87:ba:16:54:c1:38:bb:
                    81:fb:fc:0b:51:56:10:fb:01:fa:d2:b8:af:d3:62:
                    16:0b:db:1b:65:0d:36:5c:87:27:0a:20:b0:74:3b:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:50:42:74:B3:D4:1B:DF:03:75:BC:42:85:65:8B:04:86:8D:14:82
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:f7:50:cd:01:75:e2:db:ff:e4:ae:90:04:8d:47:d7:cd:
         5f:c3:a0:ae:50:a4:3b:98:02:87:d2:f5:90:c9:bc:b8:31:14:
         b9:7a:c9:7f:e9:fc:86:27:66:a9:d7:69:e3:43:94:40:1c:72:
         b6:af:89:1a:9c:71:7e:2a:40:4c:71:ad:58:cf:88:3a:9d:85:
         3e:05:18:9f:c8:b9:9d:92:1d:7d:86:da:72:d7:92:5e:73:74:
         34:50:44:d8:ce:26:d8:96:25:0c:16:f8:cb:d9:51:df:b3:07:
         71:0e:32:2f:22:4e:6e:1c:e2:15:fd:e5:a4:90:d9:27:86:59:
         b2:15:a9:ec:26:00:3a:94:16:7e:bc:0b:b0:d9:f4:f3:51:fb:
         8f:c7:a7:fb:f9:ea:60:02:e8:14:23:20:55:86:02:6a:df:2d:
         4e:77:86:d1:15:30:f4:e0:3f:3e:3e:fa:19:87:b5:31:54:3c:
         2c:1e:a4:07:09:e3:d8:b4:05:c8:2d:f7:f1:11:b8:6f:16:d4:
         f7:7b:e5:7b:9e:9a:f5:cc:76:f5:12:61:76:a0:d9:eb:ef:ba:
         a1:9b:9c:c0:4e:21:6e:2e:5c:f9:57:b6:65:0b:42:94:c5:ea:
         1c:d1:cd:98:16:4b:a1:8c:a9:d0:d8:4d:ff:5f:3a:24:a0:5f:
         e6:32:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:44 2024 by rpki-client on console-ams.rpki-client.org