Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File:                     CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier:          lQ2M19I8qh2p4/+XJ/PfuhO0AJcngDbUNIPDDHKxjCI=
Subject key identifier:   C6:37:9D:49:DA:AD:7A:77:6F:00:C4:48:7F:D2:B3:82:82:74:66:A7
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer:       /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial:       019406B41D75CC12784FCC7AD8805C9D109F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number:          110D
Signing time:             Fri 27 Dec 2024 06:00:54 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:54 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:54 +0000
Files and hashes:         1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: kVwcoydshEdw2/seN8MVDiLAewa0twGY8aC9XEcwmao=)
                          2: g24F8Llst1sNUigDfQWGFU0I9IQ.roa (hash: c83GucemRIepkpNjRZ45/8/pFwlicGwynHf5Pkz88xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:1d:75:cc:12:78:4f:cc:7a:d8:80:5c:9d:10:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
        Validity
            Not Before: Dec 27 06:00:54 2024 GMT
            Not After : Dec 28 06:00:54 2024 GMT
        Subject: CN=c6379d49daad7a776f00c4487fd2b382827466a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:c4:02:66:f7:40:c5:3a:2e:df:5f:a0:e0:
                    7e:01:38:81:d1:90:cf:bf:f2:e5:8c:61:36:53:ec:
                    db:1b:9f:ed:71:fa:96:97:c8:8d:24:08:ce:be:bc:
                    42:eb:82:fd:49:16:00:f2:57:f5:5e:03:e6:31:a6:
                    2e:49:37:64:c5:ed:aa:81:07:bc:07:67:b2:46:e5:
                    33:e2:02:82:8d:4e:24:b8:a4:ea:ff:e3:08:39:c4:
                    cb:d1:70:ec:71:40:ef:de:ad:02:e7:48:06:e4:b7:
                    2e:ee:a3:a0:f2:a5:17:8c:e4:ae:bd:4a:ed:d5:87:
                    ed:3e:b9:3e:ef:42:03:01:de:d9:0d:34:5c:5a:aa:
                    09:5f:4b:7f:e6:a1:a7:f2:09:17:1c:fc:87:bd:5a:
                    1f:2f:9e:13:46:d9:d0:3a:cd:a2:86:d9:98:3d:b5:
                    f1:46:45:d2:c1:89:eb:3e:06:9b:3d:9b:3e:16:e6:
                    05:c7:69:f0:3f:82:66:5f:98:d8:4a:1f:53:1b:4f:
                    f1:51:92:1d:8c:5f:91:16:1c:3c:6c:5e:cf:81:1f:
                    00:4a:37:d9:83:71:69:42:6d:97:49:20:fd:52:49:
                    dd:ba:6c:61:e1:0a:72:b6:5b:8e:b1:05:2f:8f:f2:
                    8e:c7:d9:29:22:04:23:8a:1d:22:85:e4:69:e8:d8:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:37:9D:49:DA:AD:7A:77:6F:00:C4:48:7F:D2:B3:82:82:74:66:A7
            X509v3 Authority Key Identifier:
                keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:60:04:30:5b:ae:c4:78:2d:e3:54:56:c5:2b:b8:15:86:62:
         d2:f8:5f:dc:29:0f:ec:05:e8:a2:8c:35:65:ee:a5:2c:d5:e0:
         40:0b:a8:78:0f:f6:eb:17:91:57:f7:1c:bd:e3:a5:91:74:19:
         9a:55:8c:13:c9:3f:d7:55:42:66:ca:97:4f:2d:ea:87:5b:16:
         c5:66:b8:21:98:4b:a1:28:bd:28:6c:86:8c:68:1d:ea:7b:ea:
         97:77:40:22:af:65:09:7d:06:ce:4f:8e:5a:ad:ca:5e:ad:55:
         ad:e8:6a:c1:90:0f:5c:b2:46:11:40:cc:99:0d:a0:a7:0e:a7:
         20:e2:57:21:0a:c0:d8:dc:dd:57:43:36:70:de:29:fd:83:12:
         77:dd:35:81:39:db:2b:fd:5a:f7:32:0f:70:43:f2:68:3e:99:
         55:b2:43:a2:1f:06:d8:29:48:1b:62:4b:47:fd:aa:81:68:56:
         30:cf:40:42:1d:fe:81:21:ca:87:3f:2e:49:a6:5d:a9:d5:b6:
         97:54:32:0c:5e:05:c7:b2:fd:17:6b:52:73:8c:8a:51:a7:85:
         39:86:ba:c5:c4:74:28:50:a8:77:8e:08:54:46:c9:af:81:35:
         a8:3c:94:a0:59:16:95:6d:d3:48:54:74:9a:44:8a:c2:75:1a:
         8d:9a:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:38 2024 by rpki-client on console-fra.rpki-client.org