Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File:                     0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier:          XJkPjMMpWEUspxS8AANahbsU+7mX+CYRbE5hc4i/jos=
Subject key identifier:   46:9A:7D:D9:EA:DD:4D:C0:74:D4:F3:23:D8:C2:F5:25:9C:B3:DB:33
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer:       /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial:       01940721A48133F9B21B83C49F7B4756F507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 08:00:32 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:32 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:32 +0000
Files and hashes:         1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: DyfW1fIma0YduSXggcdOhG7FTRSzAdTdcNutD0KfJYA=)
                          2: ixWVJ0EBFpJEY9INGQcSm8_Q6xk.roa (hash: aPox4aVr0Yn0oi8P04UoPHAgL3jhX3emiLGVOWoAxHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:a4:81:33:f9:b2:1b:83:c4:9f:7b:47:56:f5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
        Validity
            Not Before: Dec 27 08:00:32 2024 GMT
            Not After : Dec 28 08:00:32 2024 GMT
        Subject: CN=469a7dd9eadd4dc074d4f323d8c2f5259cb3db33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:37:01:8c:04:04:80:6d:36:da:4d:0c:e0:
                    d1:9e:45:29:f1:4d:42:39:85:2c:11:5e:49:d3:33:
                    72:93:ce:dd:77:48:3c:8d:7d:90:92:7f:73:b1:09:
                    cb:40:d8:74:75:98:12:70:b8:df:23:da:16:a2:35:
                    57:65:37:f2:bb:27:e2:55:12:53:8d:a5:05:d9:5b:
                    a2:34:16:51:0b:53:f4:e4:20:9e:21:06:93:d3:14:
                    e6:76:e2:47:06:44:18:65:72:d7:66:02:e5:c8:69:
                    cd:2f:3d:8e:dd:f8:87:d4:56:68:30:22:9a:7c:4f:
                    40:18:ca:1c:87:b9:0d:07:b1:43:69:02:3b:53:3a:
                    5b:3b:40:0d:2d:ca:74:66:a0:ea:72:10:28:28:25:
                    98:36:41:e0:b8:32:5f:63:a3:e7:9a:0b:07:02:cf:
                    5a:95:45:c3:f8:23:6d:2e:cb:90:f4:84:14:4b:b7:
                    30:fc:67:ea:50:47:f2:3a:11:6b:92:0a:8d:82:9f:
                    fa:4b:6b:0b:7c:0f:27:62:8b:de:a4:25:cc:61:65:
                    ef:fc:f7:65:20:b4:fc:77:1f:d0:a1:c2:c4:11:36:
                    95:b1:57:2a:bb:f9:05:c6:2a:63:80:31:02:7f:bd:
                    8b:c3:8b:8b:92:b4:38:55:4e:17:59:05:17:a6:b4:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:7D:D9:EA:DD:4D:C0:74:D4:F3:23:D8:C2:F5:25:9C:B3:DB:33
            X509v3 Authority Key Identifier:
                keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:56:54:f6:c2:6c:60:bc:a4:5a:0d:d5:87:08:23:a9:59:
         33:b0:3b:c6:d0:8d:ad:ea:2c:19:b6:e3:18:c6:29:da:a5:78:
         0d:51:bc:1a:6c:f8:21:a6:85:07:8d:98:00:55:95:75:eb:03:
         14:78:a8:d0:ca:8f:a9:a6:1a:2d:06:9e:31:a8:e7:35:0b:67:
         03:21:07:97:dd:e4:b9:ff:bf:0e:cc:fb:77:74:75:9c:a3:67:
         47:ca:25:bc:0a:7c:b1:28:b1:06:01:39:93:b4:3b:80:18:44:
         26:dc:56:1c:24:00:16:7f:43:12:ab:f3:82:eb:6b:23:c1:05:
         cb:3f:b4:4c:89:5a:88:37:03:3d:4f:03:2f:3b:b9:b8:f6:3f:
         13:18:91:93:3f:c8:51:44:9b:86:a6:62:67:73:ed:d2:81:8b:
         a4:ca:1e:db:2a:ab:6e:5a:ba:e3:7a:eb:dd:14:83:ac:6b:a5:
         88:d4:08:38:96:c4:a3:51:be:64:a4:ae:12:7b:0a:91:4a:45:
         e1:cf:57:66:d0:6a:1b:a9:7d:d6:40:24:be:a6:3a:7d:a4:8a:
         59:5d:88:88:c1:ab:f9:cc:dc:68:3f:3b:59:3d:8d:91:20:15:
         ba:17:b6:0e:65:28:13:57:54:30:60:93:36:2a:6e:83:40:87:
         3a:41:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:57 2024 by rpki-client on console-ams.rpki-client.org