Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          paKdMyHCiXlMNtpIQ8/dlw71uYPup+LxxsNOiPnkxng=
Subject key identifier:   71:37:9F:AF:83:74:68:AC:6E:D0:4E:17:F7:97:B3:B1:FA:24:AF:C1
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       0194BB290A409E47053433A50850BA22E12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 07:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:16 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: tPTaHPM1jcr8W0BQpiSUWu3g/Bj2GRYYQ6DFzFW1/xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:0a:40:9e:47:05:34:33:a5:08:50:ba:22:e1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Jan 31 07:00:16 2025 GMT
            Not After : Feb  1 07:00:16 2025 GMT
        Subject: CN=71379faf837468ac6ed04e17f797b3b1fa24afc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:ce:87:04:f4:63:f7:02:ef:0b:be:8a:0f:
                    89:e0:6f:ad:13:47:06:01:92:80:f5:e3:1c:6f:dc:
                    f0:0d:a2:16:38:4d:ca:f0:29:7c:7d:a9:62:58:92:
                    3c:ac:2a:d1:54:4b:76:9b:0f:d0:83:af:64:05:a6:
                    fd:72:2b:cd:d7:ef:47:b8:f1:72:64:b4:74:25:46:
                    88:c2:4d:55:6c:ff:72:da:64:a2:ef:c7:d4:ca:79:
                    cb:1e:0a:c4:04:bd:f3:ba:41:cc:b3:98:3a:13:70:
                    2d:4e:5d:2b:42:63:17:38:03:0b:75:68:cd:5b:4d:
                    a3:dd:51:8c:44:94:c4:9b:52:62:64:76:0c:03:69:
                    f4:88:96:23:1c:a2:fa:4e:f4:49:1d:74:59:65:32:
                    69:38:13:f9:cf:7f:6d:d3:c1:84:a5:e7:20:3a:51:
                    4a:ea:64:85:e2:2e:fd:48:91:cc:28:30:77:b7:83:
                    10:80:34:df:26:f5:1a:37:f1:79:75:cc:05:a3:76:
                    84:94:87:ef:cd:5c:94:16:62:92:10:81:df:d1:6b:
                    cf:df:c5:48:42:8c:9e:82:57:f9:ef:a5:01:75:3c:
                    4f:d1:63:91:33:36:8d:c2:5b:67:14:96:0b:e5:58:
                    41:37:cf:e5:a4:43:fa:d6:18:dd:b4:ca:98:7c:71:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:37:9F:AF:83:74:68:AC:6E:D0:4E:17:F7:97:B3:B1:FA:24:AF:C1
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:35:fb:d2:a5:7c:f8:42:76:bb:25:c8:b8:5e:30:d0:04:
         c2:eb:1c:1d:c1:24:c8:ef:67:55:c7:49:cb:99:fd:cf:8b:91:
         bc:cd:ae:cc:83:93:de:62:e0:83:45:af:6f:f9:3f:d4:bb:6f:
         66:dc:66:a4:ec:60:44:f4:bc:07:f1:15:d6:0e:48:f2:3c:e2:
         9b:9b:d8:21:8b:86:27:09:67:0d:7a:de:85:1e:ac:30:e7:1a:
         a3:e4:c9:93:b9:28:70:f1:a6:0d:7c:15:74:97:f5:20:10:a2:
         af:b8:f4:93:75:b5:e8:4d:fb:38:8d:f1:14:36:65:01:20:a9:
         c6:73:2a:04:63:f5:7a:0f:24:02:c9:d5:2c:b7:7f:2a:8f:6a:
         00:a1:4e:7e:73:5d:50:f1:3c:2d:48:6a:77:f7:bc:64:a8:e7:
         c8:52:53:6f:26:65:e2:02:73:ff:d1:e7:97:d0:60:9c:9b:ea:
         b5:3c:b1:8d:b4:e4:53:33:07:9d:7a:fb:1e:2e:b2:40:26:dc:
         ae:5b:1a:b8:2b:63:48:3a:82:2c:99:82:e3:f3:65:43:5c:45:
         19:04:62:33:e1:3e:31:4b:b3:30:ff:08:d0:df:4c:1a:4a:82:
         cf:4e:16:ba:c2:8b:bd:8b:86:cf:c0:62:c2:90:28:82:21:4d:
         87:be:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:19 2025 by rpki-client on console-fra.rpki-client.org