Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          z+bskkNxo8Iea8PUQH/7WDgzOKzcLsfeewGWt4GcYkA=
Subject key identifier:   AB:B3:4A:20:D6:10:3E:4D:7A:D6:63:ED:A0:1A:8F:97:22:6A:33:D0
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       0193568924D47D6B30EAFF8B95031734691A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0854
Signing time:             Sat 23 Nov 2024 01:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:48 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: xWX0XPdiouSuSYKdTjPilUKyqimHFzLrRsKpdod9D6s=)
                          2: kwnFvChmyTSmLl2lQ-ry4exqTcQ.roa (hash: 9yd5t6OlZJVeNAzKIdELunWUrOsC17gV1LMcptq9FNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:24:d4:7d:6b:30:ea:ff:8b:95:03:17:34:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: Nov 23 01:00:48 2024 GMT
            Not After : Nov 24 01:00:48 2024 GMT
        Subject: CN=abb34a20d6103e4d7ad663eda01a8f97226a33d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:ca:b3:1c:52:83:13:c9:99:91:8e:56:83:
                    77:92:37:da:df:50:6f:bc:8e:6c:0c:0d:ad:12:9d:
                    5b:23:af:af:b4:04:6f:80:fa:bd:73:02:f8:13:4c:
                    70:ea:06:fe:07:5e:c7:c7:b6:d3:88:d2:6c:16:c5:
                    af:94:5f:56:4b:02:d3:51:41:4f:70:e8:9b:ef:ae:
                    fc:5b:54:94:64:30:b9:fe:5e:2a:a6:a9:87:7d:2f:
                    e1:83:4b:3c:bd:b6:05:49:e1:13:a3:c0:17:b1:a3:
                    56:b1:fd:18:1e:2d:cd:9a:71:df:22:e9:d5:c6:50:
                    1f:f3:ad:35:07:24:89:43:e2:70:cb:4c:29:1d:1a:
                    37:f9:a7:5a:05:92:ee:65:85:51:58:a7:33:d3:5b:
                    bb:1b:6c:34:46:ad:f3:77:64:0a:1a:e8:62:78:38:
                    bc:98:54:ff:02:8d:67:f3:0d:cc:51:00:9f:09:ce:
                    f4:bf:76:90:64:25:1c:7a:34:5d:ba:a5:48:70:a9:
                    08:60:c3:0e:ae:02:9f:12:b5:42:e4:a6:d2:1b:5a:
                    bb:2f:f8:94:dc:eb:f2:fc:f4:8e:e7:e9:c9:7c:8f:
                    e1:3d:fe:ea:1c:ca:fc:8c:c9:58:24:6e:a8:ef:ff:
                    81:6a:09:57:f7:6f:dd:02:a5:10:b9:30:d4:f6:e2:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B3:4A:20:D6:10:3E:4D:7A:D6:63:ED:A0:1A:8F:97:22:6A:33:D0
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:7a:1b:42:02:60:bb:c3:bb:45:7e:af:20:63:6a:36:dd:
         41:d7:bd:2c:98:e6:92:be:06:96:9c:fc:1b:bc:d3:ea:86:cb:
         53:57:6a:50:f9:5c:78:5c:6f:e9:22:73:88:6c:69:79:7c:73:
         1c:e5:93:5e:be:14:fb:9a:e2:98:30:9d:ce:eb:fb:b4:5c:cf:
         21:45:e3:1a:fd:29:64:43:93:b4:ff:b8:c0:7d:4b:70:26:47:
         f3:20:69:0a:64:fa:82:cf:d6:80:0a:6c:82:21:a2:b5:fa:08:
         18:22:43:37:c5:f0:03:ee:f8:a8:d7:46:b6:ee:f5:1e:84:9a:
         5a:cc:c8:fb:5a:1b:30:a4:b7:72:31:3c:6b:15:dd:50:38:89:
         fc:36:94:d5:b6:97:8c:09:3a:9b:0a:86:04:be:5b:a7:c5:c9:
         f0:5a:1c:a9:03:0a:6b:6c:6a:46:83:94:16:90:9b:5a:1d:ab:
         78:c4:a7:f8:b9:53:1f:96:ee:2d:d8:1f:4f:31:e5:5c:36:a8:
         8a:88:c5:c7:92:24:db:ea:b2:d2:e4:08:a5:d9:4e:bd:05:f6:
         0e:ef:74:c5:bd:15:3c:3b:53:28:e5:0d:9f:da:55:b0:d2:a8:
         da:4a:d8:6a:00:0e:7c:f5:62:75:a9:86:93:e9:09:c2:f0:30:
         69:ce:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:27 2024 by rpki-client on console-ams.rpki-client.org