Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File:                     0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier:          nqR1X4Q6EaHrsiSll8XSFLG7wGlbIWvAB4OtA8qyu28=
Subject key identifier:   9F:96:A6:CF:77:88:CD:BF:A0:47:24:1B:AA:E1:51:38:EC:C8:42:95
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer:       /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial:       01940647DD70395CE5F3ACEA5C3BBD36FF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number:          04FB
Signing time:             Fri 27 Dec 2024 04:02:40 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:40 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:40 +0000
Files and hashes:         1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: cszUCtO+CG1Mo6+OcXKQ1s8sNUbEzOuDUDjTWkxsImQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:dd:70:39:5c:e5:f3:ac:ea:5c:3b:bd:36:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
        Validity
            Not Before: Dec 27 04:02:40 2024 GMT
            Not After : Dec 28 04:02:40 2024 GMT
        Subject: CN=9f96a6cf7788cdbfa047241baae15138ecc84295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:25:f8:e0:7c:a7:f6:25:2a:98:60:12:67:
                    f2:3b:9d:70:cd:13:f9:ca:d2:c5:4b:b1:74:0f:2d:
                    42:62:86:f4:49:51:51:da:22:98:31:1a:3e:bc:fe:
                    1b:e2:bd:17:3a:86:e3:20:fb:8b:03:19:63:e6:0b:
                    48:f5:c4:97:11:07:ab:f3:a9:e0:f4:85:2a:87:6a:
                    df:62:8f:2c:79:d8:09:61:50:0f:8a:05:80:ea:8b:
                    bb:48:7b:dc:fd:33:6b:a5:9e:5d:ed:59:c9:83:61:
                    54:4a:d4:ed:1e:bf:7f:43:45:f7:d0:3a:46:5f:11:
                    19:3a:e0:f2:0c:d4:f2:6a:06:0d:4e:39:14:6c:e6:
                    ab:ba:55:cd:a3:22:99:4c:79:ba:96:fa:f3:e7:5c:
                    5e:3c:d9:76:e6:65:7e:64:20:73:66:64:dd:9a:25:
                    97:e1:62:15:42:93:59:b9:bd:c2:f4:37:4b:c7:79:
                    18:5e:e5:a9:9d:70:25:7a:f1:e9:ed:a4:f1:f6:7d:
                    20:e3:02:f7:e3:2d:f9:7e:ba:07:c7:50:1c:c0:63:
                    3f:dc:31:63:94:85:1a:e9:ad:d4:b3:17:66:32:8c:
                    c4:ec:5b:47:e7:07:d1:c2:68:de:24:86:e6:82:2b:
                    c9:b4:f0:99:5d:70:94:a2:a0:f1:5a:ff:f6:5a:f5:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:A6:CF:77:88:CD:BF:A0:47:24:1B:AA:E1:51:38:EC:C8:42:95
            X509v3 Authority Key Identifier:
                keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d3:41:1d:77:d5:55:dc:fb:87:cc:de:cd:cd:8a:84:2f:49:
         46:64:6f:3c:d4:9f:7a:bd:98:e4:0d:47:60:21:fc:87:ad:64:
         e1:28:0b:2f:bb:07:b4:1b:bd:76:c2:13:6e:a5:30:41:31:55:
         3b:8f:5d:22:18:6b:25:b5:4c:28:9a:3d:09:9d:c8:f0:51:8c:
         f6:0f:da:c8:e8:0e:07:34:6b:76:9c:86:30:9b:ff:1b:80:fd:
         6c:ac:b8:17:c0:85:e7:ee:73:8f:f7:e2:c3:f0:b1:fa:85:27:
         f4:02:8c:e1:04:c1:9f:d3:ca:bf:c4:0b:d4:f3:06:00:03:e4:
         b7:54:6f:7e:d2:fb:72:5d:fb:82:9a:60:64:1b:9c:26:8d:59:
         a9:a2:bc:74:ce:41:15:2d:5c:b4:60:de:06:ad:9c:86:e0:b2:
         2c:7a:90:8f:81:b5:16:bf:74:9d:53:3b:bb:43:85:62:0b:a9:
         cd:9a:26:bf:b4:ac:45:d4:10:61:56:08:85:b5:50:0b:72:fd:
         44:8e:69:2b:69:0a:b6:a5:f2:4a:0d:b6:32:b0:d9:a3:66:49:
         b3:94:65:43:41:19:e7:3d:db:6c:d4:81:a6:60:5b:3c:0c:68:
         2e:e2:82:a7:f9:ae:51:cc:e9:5c:ff:b6:7b:55:3d:18:4e:77:
         7a:1b:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:49:56 2024 by rpki-client on console-ams.rpki-client.org