Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          I27kgSA+J+as5ZzsG/fF9YxPrT6vXnNSvOVjXyCE9XA=
Subject key identifier:   99:C5:B4:E2:68:04:BB:B4:0B:E0:78:AB:7C:32:13:A3:09:E9:91:D8
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       01940645F629C277864D60268EC56BBCF543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 04:00:35 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:35 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:35 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: 9O7tR/mZOxuAYQQ71IN0PBSMi8tqOmxBmFZaCPHDLxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:f6:29:c2:77:86:4d:60:26:8e:c5:6b:bc:f5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Dec 27 04:00:35 2024 GMT
            Not After : Dec 28 04:00:35 2024 GMT
        Subject: CN=99c5b4e26804bbb40be078ab7c3213a309e991d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:36:ee:f8:9e:b9:a6:3a:10:86:88:9c:6f:
                    c1:ab:e7:15:b2:43:8a:b8:84:6b:d7:f5:03:63:85:
                    cb:02:b7:e9:18:07:0b:e9:62:d3:6e:e9:b0:f6:8c:
                    d5:96:46:f9:23:df:be:db:d9:51:44:fe:0d:82:93:
                    cf:16:c7:07:e6:38:01:98:41:c3:64:df:23:aa:fc:
                    c6:3a:bb:31:72:53:65:af:29:36:5b:c8:e6:be:c7:
                    90:ee:d3:41:70:0c:43:17:1f:15:8f:eb:fc:8a:f1:
                    2c:04:4e:e6:0e:b9:f4:79:e2:e9:28:92:f4:50:11:
                    02:73:81:38:68:92:9c:5d:f7:1c:42:24:a2:d7:7d:
                    d8:4c:5f:5f:92:c9:cf:c8:b0:ff:98:6c:b2:b4:01:
                    3a:32:a7:24:a1:67:20:b7:98:8d:b3:c1:5a:db:12:
                    c9:2f:c5:79:d7:79:bf:66:5a:38:3d:50:70:3a:f9:
                    81:8d:d2:81:20:e0:8d:f2:74:02:c6:bf:f1:a9:9a:
                    a6:3f:ef:04:c6:55:0e:eb:04:8d:0d:d0:3b:9e:97:
                    2d:da:9e:7b:23:61:a4:f1:ce:e7:70:22:64:35:1f:
                    08:2e:82:69:54:1c:35:56:14:f6:fd:62:c8:63:2d:
                    73:49:9c:7c:b1:e0:ff:da:9b:aa:0e:5b:60:2c:6f:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:B4:E2:68:04:BB:B4:0B:E0:78:AB:7C:32:13:A3:09:E9:91:D8
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:e8:e8:a9:46:03:37:06:d0:65:26:48:66:41:83:cb:48:2e:
         31:3e:0c:5d:ea:dc:e5:5c:e7:1a:b3:5c:21:e7:38:e2:36:d2:
         ca:29:69:b0:6d:08:b2:9d:65:ca:0c:09:21:55:3a:69:72:16:
         85:51:f3:81:68:31:83:25:f2:9e:9d:d4:2b:30:77:b2:02:7a:
         e6:04:f6:30:db:67:eb:83:2c:5d:b3:e0:19:07:7c:d0:42:01:
         11:a0:ba:48:05:c5:dd:36:d7:13:bf:b9:d4:17:14:1d:29:bd:
         76:8a:0c:58:60:3c:c8:25:ee:b2:85:8d:a5:91:ca:db:ca:63:
         ae:4b:21:ac:99:35:70:c8:d8:e3:7c:30:60:7e:c2:37:c1:be:
         84:ae:7a:1e:61:ef:82:61:e0:55:1f:55:d8:c0:c3:22:b8:57:
         f2:4f:bb:90:d3:4d:35:da:76:4f:41:51:3a:92:89:43:02:38:
         40:c5:2e:d3:6e:91:8c:72:e4:25:96:2a:56:ac:71:34:88:2d:
         cf:ac:b9:0f:f2:5c:2b:2f:f0:50:34:6c:c9:d6:64:73:63:f1:
         bf:bc:96:51:52:a9:9a:a2:b5:6d:54:fa:77:8b:53:e5:c3:68:
         71:f1:5e:ab:a8:ae:90:f8:3b:87:49:7f:e0:dc:11:51:2d:54:
         3c:15:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:54:26 2024 by rpki-client on console-fra.rpki-client.org