Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File:                     6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier:          6hjSst8Sa7jmmMbLyn/StAYdb+dWiG+y4EHJ6+unISU=
Subject key identifier:   91:82:3E:E0:72:08:7A:E5:1D:91:67:E5:B8:44:AA:64:05:58:34:15
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer:       /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial:       019406B404338F61F4C30C52F246C8B647FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number:          13CE
Signing time:             Fri 27 Dec 2024 06:00:48 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:48 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:48 +0000
Files and hashes:         1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: 9f976cN1u2UmG0QCmtV+erMlEIdy10zvuuSQFBG26Qs=)
                          2: 8JMJv6V3KzA9fHhc3P5949EGqrc.roa (hash: yRdkXWZ6PXeM8AnRM3SseqGW1hi0ITi14dLzFhLOykw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:04:33:8f:61:f4:c3:0c:52:f2:46:c8:b6:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
        Validity
            Not Before: Dec 27 06:00:48 2024 GMT
            Not After : Dec 28 06:00:48 2024 GMT
        Subject: CN=91823ee072087ae51d9167e5b844aa6405583415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:36:05:83:6a:40:2d:eb:7c:c4:15:ba:e4:
                    cf:07:d5:54:50:c2:6e:b4:97:c5:8e:70:5d:46:e0:
                    14:b5:66:d2:02:80:be:82:41:69:6a:49:02:0b:eb:
                    05:d5:a0:86:11:e3:23:c0:0c:37:2f:98:38:da:ee:
                    de:4f:61:a6:14:32:55:11:35:f4:75:be:02:a1:14:
                    37:d2:1a:65:db:cd:33:15:18:5b:2e:ee:81:88:2a:
                    f7:dc:a7:18:8e:04:2b:a6:e3:04:0a:b7:64:8a:02:
                    51:8d:99:2b:92:de:24:ea:c6:bd:07:44:2f:b6:7a:
                    b5:38:37:a7:9b:e2:4f:2d:fe:fb:f6:9f:54:a4:e3:
                    2c:e3:1a:a2:4f:04:53:82:2b:67:46:97:c5:7c:fe:
                    35:dd:77:6a:0b:1f:54:3f:0d:76:40:89:e0:5a:8b:
                    aa:6c:89:a0:22:14:7b:44:37:95:a1:f8:c7:b0:3f:
                    63:0d:b9:a1:49:e1:9a:5c:41:04:39:03:c6:fb:33:
                    de:c6:44:c7:ac:16:0f:f1:bc:cb:96:bb:14:32:f2:
                    5b:d6:7f:a2:06:d9:fb:a2:08:77:6d:f3:0f:dc:ad:
                    eb:14:da:f7:56:38:c5:81:a8:a2:33:ad:06:17:1b:
                    84:97:26:23:55:f5:72:f5:c2:2c:68:5b:36:92:a9:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:82:3E:E0:72:08:7A:E5:1D:91:67:E5:B8:44:AA:64:05:58:34:15
            X509v3 Authority Key Identifier:
                keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:45:ea:c8:c7:c4:98:90:55:54:54:a4:00:6c:6c:3e:c3:fb:
         30:05:39:cf:6e:91:fa:55:38:78:af:bf:42:39:19:06:1b:24:
         b6:37:6c:e8:c7:61:d5:dd:07:02:56:c6:9d:b7:5f:b6:b5:1b:
         66:49:d5:ae:e1:c2:c3:16:8e:ad:a7:85:1d:7c:9e:4b:5f:b2:
         95:3e:02:48:75:b0:95:d2:0b:bd:81:bf:51:e9:3e:00:cc:0d:
         93:c8:9f:0d:e2:c7:29:93:d8:31:26:f2:5f:68:48:a1:6e:14:
         a6:a2:b2:34:4d:5c:d3:4c:90:c6:46:6b:49:fe:c4:b1:b4:d1:
         2e:92:c8:88:f8:f0:5e:13:0a:27:80:15:8f:0b:85:6e:28:52:
         8b:ad:2b:ac:57:91:89:2c:4c:a2:08:12:9f:f7:10:dd:08:6d:
         7f:4e:f0:df:8a:a3:c2:42:fc:2a:17:a9:ae:47:21:94:52:ef:
         e4:b3:74:94:29:08:27:43:db:de:e4:67:24:e6:da:b9:ea:be:
         ad:cf:db:02:4a:90:14:31:8d:b2:13:40:61:32:43:54:9a:fe:
         63:5e:8d:43:d5:b0:26:0d:36:e2:50:18:d7:90:ac:94:90:4a:
         97:22:14:28:9d:93:35:4b:d0:63:18:34:6f:1a:19:a9:07:d6:
         76:7d:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:25 2024 by rpki-client on console-ams.rpki-client.org