Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
File:                     6JeVIBx9PZPNKghd42ku3XG3cm0.mft (raw, json)
Hash identifier:          spBcjKhCHw9xavwO3sg6Q9XHfaxWZ1geIqhBf7mOSaQ=
Subject key identifier:   B4:FE:95:BE:4F:2D:03:87:D2:A7:F1:53:21:9A:8C:24:62:06:84:63
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Certificate issuer:       /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial:       019407220E958C8E266DD0C91D5F43569FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
Manifest number:          074C
Signing time:             Fri 27 Dec 2024 08:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:59 +0000
Files and hashes:         1: 6JeVIBx9PZPNKghd42ku3XG3cm0.crl (hash: 4roiwNfkLw4OanmQjSpy70pNyqH3dzIvjP8PU3t/40w=)
                          2: dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa (hash: gbcvdfronOruPG3G21DfZaZeAbqKh9zWKtT5U/1z8G0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:0e:95:8c:8e:26:6d:d0:c9:1d:5f:43:56:9f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
        Validity
            Not Before: Dec 27 08:00:59 2024 GMT
            Not After : Dec 28 08:00:59 2024 GMT
        Subject: CN=b4fe95be4f2d0387d2a7f153219a8c2462068463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:02:7c:a7:3a:c1:e4:30:ac:bd:28:c0:d0:
                    2b:54:b5:be:2d:4a:fc:9a:4c:11:ad:bf:b4:a4:05:
                    af:b4:26:fa:3f:c3:48:87:33:a5:11:92:d9:57:0d:
                    f1:bd:74:b2:99:1a:d6:aa:9b:bb:65:4c:4a:64:b8:
                    8b:09:25:2f:9b:92:b8:4d:76:ea:ba:c7:37:d6:00:
                    79:ea:31:a1:ae:3c:99:00:f5:78:a2:62:59:e1:0f:
                    db:1b:cb:14:69:03:dd:8f:a0:bb:5d:c0:4e:2f:87:
                    73:1a:bb:5d:39:b7:0c:b3:a4:15:26:96:75:85:c6:
                    60:2b:c9:ff:be:7a:18:6d:1e:85:aa:77:33:74:26:
                    3f:c8:2d:0a:b2:35:0c:1b:01:1c:81:8d:81:de:5e:
                    d6:4b:41:0d:8f:9f:8e:e0:da:e0:0b:56:35:1e:95:
                    4d:13:a5:51:ad:89:2c:8a:68:3a:08:2c:94:50:6c:
                    13:7c:0d:e3:a0:08:71:56:ec:c1:71:19:98:b8:27:
                    30:3c:77:a0:38:1a:90:b1:e5:4a:8c:47:05:0b:9f:
                    6f:18:1e:15:53:5f:f3:56:07:04:ed:e8:51:bb:dc:
                    3f:5c:8d:7e:5c:b5:04:7a:8f:ad:09:be:56:fc:22:
                    fe:de:6c:49:0e:1c:ec:fa:1c:d2:9d:53:00:87:98:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:95:BE:4F:2D:03:87:D2:A7:F1:53:21:9A:8C:24:62:06:84:63
            X509v3 Authority Key Identifier:
                keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:30:75:43:25:a6:f9:0b:ee:66:fb:e2:29:de:09:ae:b2:c3:
         b1:ac:f4:74:74:79:25:0a:c1:74:ac:d9:c5:79:10:e8:41:e0:
         7d:07:5b:58:20:67:e7:33:5d:2c:ed:74:89:e6:b1:60:2c:5a:
         0a:bf:42:0b:08:6b:41:8c:03:96:d3:dd:70:b5:40:48:dc:90:
         c5:4f:49:c5:cf:a9:fe:21:b8:48:7c:45:fa:57:89:d4:90:bf:
         c6:df:2e:35:e8:d2:a9:49:c6:b0:d2:32:67:44:36:c2:c1:84:
         26:b2:ae:5d:d3:d3:72:e1:57:7d:2a:b0:48:c1:30:6d:5c:39:
         a9:6e:69:dc:68:8e:39:70:2a:6e:90:b4:fa:cf:67:49:dd:6d:
         21:9c:9d:c7:4b:06:21:74:17:ef:9b:d1:d7:0c:ae:fe:01:c1:
         07:6d:00:08:f1:af:0d:b6:da:da:58:28:51:df:37:d9:27:1e:
         d3:e8:63:06:cc:ab:75:64:ae:73:f0:17:3c:8e:54:02:62:2d:
         09:ba:d1:43:5f:d3:1a:29:bc:b1:91:b1:9e:c1:e5:63:19:5e:
         37:6e:54:83:c9:a7:2e:54:62:0b:6b:f2:20:46:7b:8b:ad:63:
         b0:a6:99:a2:6d:0c:2d:f6:fa:41:d7:d8:e2:b4:36:a0:b9:95:
         b8:24:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:28:11 2024 by rpki-client on console-ams.rpki-client.org