Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File:                     E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier:          BcSsFXpNRGSxWM0dhLTasQVQSr7ASJYcG8dISfXtukw=
Subject key identifier:   60:AD:93:B1:BD:75:2A:A1:14:B3:CC:96:C8:60:5C:98:84:2C:37:EC
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer:       /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial:       0194072219AE7AC3605397A058B3CD168DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number:          0EDE
Signing time:             Fri 27 Dec 2024 08:01:02 +0000
Manifest this update:     Fri 27 Dec 2024 08:01:02 +0000
Manifest next update:     Sat 28 Dec 2024 08:01:02 +0000
Files and hashes:         1: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: UdIKlNp3yG54KQdfXZBTqV7UCLtIrRi3CfPnZj+DC00=)
                          2: _Oj3V4e0ORmYmSIMvHju7x2Zbj8.roa (hash: RC2RGhuyQVU1FEEhYcAjY2Vfdd/l5Elat1hy15qF5ss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:19:ae:7a:c3:60:53:97:a0:58:b3:cd:16:8d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
        Validity
            Not Before: Dec 27 08:01:02 2024 GMT
            Not After : Dec 28 08:01:02 2024 GMT
        Subject: CN=60ad93b1bd752aa114b3cc96c8605c98842c37ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:95:9e:0e:45:79:93:21:62:e3:0f:77:3f:11:
                    ab:8b:4a:fc:59:3f:27:a8:09:74:3e:53:72:bc:5d:
                    97:9b:08:9d:fe:63:ff:d2:93:b6:16:8b:a7:91:cc:
                    2c:51:46:f1:ad:9c:d4:e3:b8:9d:70:77:f2:ab:44:
                    37:92:da:c7:91:f8:ea:59:fd:b6:a8:fd:2c:27:70:
                    a2:67:c3:6d:db:f0:49:53:b3:0a:86:f6:1c:bd:84:
                    ab:c8:fe:1a:70:89:11:1c:0b:12:de:4b:c4:f9:a9:
                    fa:66:bc:35:74:a3:f7:fe:0c:f3:c5:0c:41:ec:82:
                    cd:1a:e2:6e:e9:d8:4c:25:82:6e:aa:91:0f:d4:26:
                    49:4a:2a:d4:cf:e7:9a:da:a3:11:0d:ba:38:f5:df:
                    b6:b6:33:00:f0:fe:09:99:cf:29:e4:27:91:b3:b4:
                    e2:bd:5f:f6:1c:78:a9:7c:b3:09:ca:68:15:ab:bc:
                    d0:20:ea:5a:24:d2:d4:e8:9a:d4:eb:aa:90:fd:a2:
                    38:cc:23:25:6e:ea:c4:58:46:ec:c4:29:2f:fb:f8:
                    ea:fd:92:e2:d5:84:32:02:9f:4c:90:d2:9f:af:70:
                    d6:ed:03:47:03:f6:b1:7a:aa:cc:7c:24:f5:3e:71:
                    cf:d9:f8:02:a7:41:27:1f:ae:81:5a:ad:3b:91:c8:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:93:B1:BD:75:2A:A1:14:B3:CC:96:C8:60:5C:98:84:2C:37:EC
            X509v3 Authority Key Identifier:
                keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:97:05:ef:32:59:44:69:f1:49:5e:f9:65:fc:e3:84:8a:d1:
         94:7a:74:82:f8:a8:dc:c2:5d:a8:67:05:8f:81:f1:17:15:67:
         68:a9:f3:20:10:d4:c3:3f:aa:e1:d6:08:6e:22:fe:1d:35:ff:
         bd:31:c9:ab:8f:74:cb:c6:79:43:67:67:59:2e:58:fd:70:d0:
         b8:3c:f6:cf:9f:7b:c2:57:09:16:23:7e:25:ae:35:49:d6:7f:
         70:e8:0b:fa:d6:9c:7d:60:e6:4e:63:35:1a:e1:b6:83:a7:bc:
         3f:7e:4b:d2:db:37:62:8d:2a:c9:7b:bb:2b:0a:4d:0b:58:e7:
         f5:c6:93:a6:39:35:a7:f7:03:fe:30:ac:67:3b:cf:6e:b6:23:
         14:78:f1:77:25:6a:1c:a8:47:06:0c:b7:57:f2:54:f0:5a:c7:
         cc:af:16:ee:fe:7d:42:f2:09:16:dd:54:9f:c0:aa:cb:03:87:
         9c:5c:39:21:71:a9:fa:ec:7f:02:c2:c2:f6:59:a3:af:85:a9:
         5b:a3:79:fa:2b:83:44:b3:df:51:c9:c7:44:1c:ec:45:72:30:
         12:0d:07:82:40:46:22:1d:52:43:f9:4f:48:57:d7:98:3a:54:
         4f:1b:67:63:3a:44:2e:fa:95:d7:44:82:df:97:ee:65:f9:5b:
         d5:64:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:51:33 2024 by rpki-client on console-ams.rpki-client.org