Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          ATuwww+x3mGw7CfO0EJUNJH+7WnZ/DjhvKYr9fMlZfQ=
Subject key identifier:   CA:B7:6C:88:E2:6D:1F:84:93:09:00:4E:9E:74:47:F3:86:FB:99:61
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       019406B3FCEEB172A5E3BAE13E30CDD5F1EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          0230
Signing time:             Fri 27 Dec 2024 06:00:46 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:46 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:46 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: 0idbssfWwBMv4Z12h91hEEp9R1JY/ZpxJURzK+ZpLeQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:fc:ee:b1:72:a5:e3:ba:e1:3e:30:cd:d5:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Dec 27 06:00:46 2024 GMT
            Not After : Dec 28 06:00:46 2024 GMT
        Subject: CN=cab76c88e26d1f849309004e9e7447f386fb9961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:72:e4:2d:66:2f:7e:80:85:ca:12:46:96:
                    ac:61:5d:2c:d8:a8:61:a1:9b:66:29:06:9b:45:63:
                    ea:96:5b:25:da:9a:04:06:58:35:4f:e4:a2:52:b4:
                    c0:13:14:60:bc:42:a6:fc:10:ea:75:8e:66:15:db:
                    30:53:3d:11:4b:35:d6:02:de:7a:32:73:3b:30:78:
                    c3:6d:92:c7:61:c2:2b:90:58:2f:46:6a:ed:aa:0b:
                    c9:b2:4a:89:b2:f1:e8:11:35:6f:54:f5:93:78:8c:
                    46:80:4b:ab:f2:12:e0:21:51:89:35:b0:4a:90:bf:
                    3d:e0:06:14:ea:5c:1a:3e:65:1b:99:9c:f3:1d:34:
                    36:a2:e8:bf:01:9e:d9:e9:c8:7c:2c:7f:ab:ca:01:
                    fa:44:60:eb:1a:ec:63:29:9c:07:9c:d4:89:e0:cd:
                    a7:d7:f6:d3:ef:70:29:c3:f1:6f:eb:af:07:90:c9:
                    ae:03:27:86:cc:08:b3:ce:cf:ac:6d:ed:49:53:96:
                    4d:80:d2:30:12:2e:86:77:c4:38:49:da:da:8b:4a:
                    66:58:4d:e2:d3:fb:12:fd:86:ed:a0:7f:72:7f:13:
                    e6:18:f3:1c:ee:09:34:e8:3c:95:a8:6b:ec:60:22:
                    7e:b1:b5:b3:b5:47:57:d7:53:f3:53:de:bf:3d:ff:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B7:6C:88:E2:6D:1F:84:93:09:00:4E:9E:74:47:F3:86:FB:99:61
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:28:21:97:58:6c:db:e5:6d:37:c4:89:37:36:c5:d9:fb:
         98:7c:8b:55:e8:35:6e:10:46:f4:46:a3:e5:06:92:0e:da:e2:
         e9:9b:44:fc:78:98:6f:30:76:26:ff:0f:8e:23:05:c7:2a:60:
         09:03:42:be:c6:f3:92:2a:28:97:cc:61:47:af:bb:e2:e9:85:
         8f:bf:d5:87:a0:d6:5a:a3:89:b5:59:9d:d0:55:9f:31:38:aa:
         0b:e9:7f:33:de:1d:7f:c9:49:c3:e5:86:3e:6e:21:87:e1:96:
         47:92:2c:d7:f8:20:e0:51:f4:55:86:23:4f:d1:c0:00:7d:25:
         5c:31:c7:75:b6:a6:98:7d:3d:d5:de:ae:89:74:53:ca:2f:66:
         f2:f7:4b:bc:e9:78:68:76:0e:8e:e2:5c:af:c1:41:fe:33:14:
         1a:00:99:af:cb:34:79:12:96:d6:d1:22:c2:1d:e8:1c:21:c6:
         a0:69:ee:85:43:6b:f4:38:ff:7a:0b:bc:86:2c:c5:6d:0a:ae:
         86:87:54:33:e3:7d:10:11:39:f7:e5:8d:93:cf:4f:fa:7c:e6:
         a7:fe:30:e6:d7:72:23:b9:c7:05:38:d7:42:b2:63:fc:e1:c3:
         e1:2b:12:aa:74:f1:ac:0d:03:f3:b9:c6:d4:1d:19:5f:6c:aa:
         6c:f7:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:40 2024 by rpki-client on console-ams.rpki-client.org