Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File:                     h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier:          Y0418IlULhPStOAGUz65ODQQ1GL02O73oSeC3StlxNg=
Subject key identifier:   DB:68:BB:70:6A:EC:42:70:A9:76:40:F3:62:9D:93:36:0D:11:C7:FF
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer:       /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial:       019356896A4EDC812D9F8CDCA59F9919DF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number:          0AE7
Signing time:             Sat 23 Nov 2024 01:01:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:06 +0000
Files and hashes:         1: WtnuAKhWC_VhXzT39FOhtKJzrgc.roa (hash: 3qOeXt7ocAgY14Cllhi7BOnczc1aHBvUhhMcdTPLsG8=)
                          2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: q9sDeI4VElcIriTIEpaYkptzu9+hwDKlc5e4uQVyw1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:6a:4e:dc:81:2d:9f:8c:dc:a5:9f:99:19:df:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
        Validity
            Not Before: Nov 23 01:01:06 2024 GMT
            Not After : Nov 24 01:01:06 2024 GMT
        Subject: CN=db68bb706aec4270a97640f3629d93360d11c7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:c5:6c:30:e1:ad:a9:b0:76:b1:a0:2d:c0:
                    f5:c2:70:74:9a:73:24:78:9f:9d:5d:b8:49:7a:05:
                    78:4c:cc:fd:29:d0:fc:67:a3:85:4a:8b:2e:9b:a1:
                    a6:40:a2:30:3f:b8:71:66:a2:e1:75:87:b9:de:a6:
                    48:a1:cf:b1:d8:b5:90:97:0b:a9:4c:9d:ff:14:31:
                    3e:26:e9:19:a1:18:d2:d5:da:2e:40:85:d8:41:6c:
                    bd:dc:8a:b0:c5:1c:13:6a:2e:34:de:01:ac:ca:f4:
                    21:e4:12:84:21:71:3f:60:bb:73:ab:6e:ea:63:60:
                    a8:10:52:4d:d6:c2:b2:ab:34:9f:e7:f2:a7:d5:72:
                    ff:c0:62:f6:8d:5f:86:9a:f0:3c:a0:6f:aa:21:a8:
                    74:1b:ca:0a:d2:af:fc:33:71:10:ff:c3:10:1b:b2:
                    44:79:7c:bf:95:66:f4:47:2d:1d:63:fe:28:f6:14:
                    69:25:0f:bd:05:16:bb:9a:0d:42:15:6b:f4:b4:a9:
                    21:f3:bb:0d:04:46:f9:db:99:4d:b4:a0:7d:da:12:
                    ce:39:8f:49:03:dd:1d:12:e8:ef:7b:17:cf:38:2e:
                    b6:ef:67:9e:74:0d:ce:29:2e:7c:fe:7e:48:b2:3a:
                    b5:d2:72:b7:a4:cd:5e:a0:d7:60:49:28:7f:9a:b2:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:68:BB:70:6A:EC:42:70:A9:76:40:F3:62:9D:93:36:0D:11:C7:FF
            X509v3 Authority Key Identifier:
                keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:49:54:43:58:88:6f:72:a4:d0:7b:e7:a2:ec:30:34:9f:
         f7:76:0f:99:7e:2c:2c:d8:e9:b0:be:88:0b:7f:fc:02:5a:6a:
         bb:a4:d6:e5:d0:7a:ad:e9:d9:3a:45:50:e5:63:85:68:bd:06:
         9c:0e:04:ce:f3:c6:ad:a1:34:11:bb:2d:71:74:4a:02:4c:98:
         26:b7:87:96:0f:9b:fd:d1:67:ff:7f:00:cc:b0:ee:21:37:8b:
         d1:f9:ed:f7:3a:2c:ce:8e:74:65:ce:49:72:2b:5e:e5:3c:e1:
         ee:72:56:4f:50:b8:e9:44:38:46:2b:7f:bb:1e:a6:00:93:76:
         41:fc:53:41:7a:7b:4a:3c:7a:9b:32:23:ac:99:52:bd:62:1c:
         de:ce:ad:11:0f:d3:fb:f0:e8:86:03:45:36:52:d8:cb:c6:cd:
         0d:84:a7:05:17:57:66:74:68:12:96:38:12:91:cb:ba:81:bc:
         e4:c2:e7:00:01:ae:79:f5:f1:4b:1c:1a:4f:5b:21:8b:2d:49:
         3d:38:73:76:3a:df:0a:32:d9:50:2f:fb:92:6c:01:c2:35:d5:
         71:c0:ba:df:2a:8e:9e:08:ba:da:c5:a6:63:28:20:62:35:a3:
         f4:84:cc:5d:af:40:31:c1:9f:f4:c3:36:78:7c:ca:8a:39:44:
         0a:ad:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:20 2024 by rpki-client on console-fra.rpki-client.org