Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          /PjZFZ33EUveO0Am3BHIs+1D3hTiktL2+WgWo+woCD4=
Subject key identifier:   01:2A:6D:F9:B5:76:B9:6D:89:DC:98:A8:4A:F7:13:94:7D:A4:B2:B3
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       0193568939D04EAA332D1D50236041603C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0A66
Signing time:             Sat 23 Nov 2024 01:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:53 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: Et/wHCHTot9pQX00a2L/rbfRgCS3pS8K5JYKRhdxRRI=)
                          2: f-lyAlfRJhEJz3Klz_HhwIkkkM8.roa (hash: NJy4koiRrunP6ZOIRXeB5v+pLWAKHwTVw40T//ydpbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:39:d0:4e:aa:33:2d:1d:50:23:60:41:60:3c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Nov 23 01:00:53 2024 GMT
            Not After : Nov 24 01:00:53 2024 GMT
        Subject: CN=012a6df9b576b96d89dc98a84af713947da4b2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:78:a5:41:f7:d0:cd:79:14:d1:f0:56:b6:
                    64:76:6f:be:44:16:b8:59:51:b7:f3:e1:aa:b8:76:
                    50:f9:e3:7b:3f:7b:0e:65:ab:4c:12:38:4f:c0:66:
                    e4:29:84:02:33:82:56:55:ec:10:67:39:6d:b4:c9:
                    41:3a:aa:aa:44:fd:81:07:ad:12:ed:6d:42:34:5f:
                    cf:2c:66:85:fd:fc:25:8d:60:b0:9e:66:83:06:22:
                    49:91:1d:b0:9a:a9:2e:fd:89:23:09:17:c3:c7:eb:
                    01:36:44:75:63:26:8e:58:a1:09:ab:b9:55:2f:32:
                    b5:b8:70:df:10:66:5e:71:d7:df:a7:e6:09:c0:b8:
                    72:6f:a6:5d:e5:20:3e:ca:a8:a9:f9:6b:72:0d:19:
                    46:41:f7:d9:1e:34:23:22:4b:62:a0:3e:bf:19:5a:
                    ba:03:49:5c:5f:b6:9e:3d:2f:c0:4a:42:7a:92:ca:
                    7a:b6:5b:81:df:ce:e0:20:f7:4d:d7:eb:cb:01:4d:
                    b3:3f:7e:d6:61:44:0f:36:b5:0f:a1:84:9a:42:43:
                    af:57:75:e5:2c:68:19:58:ea:6a:ec:ce:b1:04:fd:
                    0f:77:db:80:8f:d0:a1:99:fb:d7:3c:1c:46:3c:16:
                    a8:d8:64:37:bc:a4:62:34:a0:1c:90:c3:75:31:72:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:6D:F9:B5:76:B9:6D:89:DC:98:A8:4A:F7:13:94:7D:A4:B2:B3
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ef:53:86:83:b1:8f:1f:53:78:17:5d:88:d1:61:45:c6:e8:
         8d:8c:28:76:9f:0d:12:d1:4c:b9:37:0d:14:57:de:cc:09:99:
         b7:20:e6:d2:a1:d1:66:e5:e3:cf:5d:ce:b5:53:42:8c:da:e2:
         4e:31:5d:ec:fc:57:54:55:87:bf:91:1a:f3:ae:d3:af:69:df:
         f9:8c:0e:b8:36:c4:ba:10:97:26:34:b8:88:88:32:fd:f0:be:
         21:fa:5b:f3:8f:71:f6:48:e1:32:d0:46:14:31:3c:07:bd:f5:
         2b:e2:d4:7a:a3:f9:93:18:c7:db:7c:5e:97:09:84:09:5c:6c:
         e7:c5:be:a9:49:b4:bf:96:5c:49:9f:3f:5c:1e:65:b0:4d:e9:
         1a:ea:51:74:e0:d7:e6:ef:88:d9:d8:36:be:34:25:1d:e2:79:
         db:41:0b:c7:4b:ab:5b:07:33:52:ed:59:19:37:b7:45:3b:59:
         89:68:7e:b9:48:cf:79:a9:9f:ce:c6:b1:59:c8:a4:e6:24:37:
         00:04:bf:c3:61:b8:b9:6e:85:7c:9e:3d:62:77:bf:69:c0:f6:
         ff:20:63:fc:3a:35:91:9e:10:c3:7c:83:48:e5:c4:35:0f:47:
         64:e8:e5:44:ea:c3:91:54:16:d9:0a:8c:3d:74:4e:e8:38:10:
         6c:13:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:02 2024 by rpki-client on console-fra.rpki-client.org