Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File:                     ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier:          yHHe/XQYN/Hgu+JmCligJhjLxV4wCI5qFMaOB04RGrY=
Subject key identifier:   72:EA:44:AA:4D:E2:F4:E1:EB:5A:05:51:6C:67:5A:95:A2:87:85:D4
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer:       /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial:       019405A16FA48DFF317DD45E90428D32BCEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 01:00:53 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:53 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:53 +0000
Files and hashes:         1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: M3p3L1Ac6/AVusfpJTNCW57vS0xr9F/ZTzkzHlmSx84=)
                          2: f3vp-XeU3SZ1fw82LHUjTUBjhiQ.roa (hash: lh6vTMSQkRtxuGGj91T6sQH+U75qss+pGMNmAwTtS88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:6f:a4:8d:ff:31:7d:d4:5e:90:42:8d:32:bc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
        Validity
            Not Before: Dec 27 01:00:53 2024 GMT
            Not After : Dec 28 01:00:53 2024 GMT
        Subject: CN=72ea44aa4de2f4e1eb5a05516c675a95a28785d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:ed:b5:dc:4b:93:b7:f1:1e:22:16:e1:3c:
                    e9:5d:c2:e9:bf:72:c4:68:9c:32:7c:91:b0:91:b2:
                    da:87:1e:c7:a7:21:05:66:24:e3:76:cf:a3:b0:8c:
                    5a:49:bc:af:f9:58:18:f9:40:49:0d:ea:e1:73:76:
                    c4:ed:d2:4d:15:52:29:c9:60:16:f3:8f:32:18:c5:
                    d4:e8:7f:a2:fa:f1:ee:4b:21:82:21:bd:9a:c9:c6:
                    d1:eb:8b:d6:ee:e0:ec:67:1c:ce:da:fd:b7:f2:03:
                    9a:ef:ca:c3:b0:8e:f2:97:eb:54:07:24:a5:1d:d8:
                    21:dd:78:4b:61:86:e4:0e:cd:37:01:ec:6d:0a:de:
                    85:cc:c4:03:ce:a0:76:fe:d6:f5:78:89:16:83:6d:
                    62:fd:10:03:7c:ca:9c:3d:90:0e:32:5e:c8:d5:61:
                    c0:e5:ad:4e:be:59:fe:0a:6f:7c:17:87:3f:96:df:
                    2c:c5:0c:40:5c:b3:d7:8f:6c:82:08:60:08:48:d4:
                    0d:ab:0c:eb:67:f2:5f:96:1d:64:29:50:b6:d9:d6:
                    4a:ab:fc:df:1c:cd:b9:bc:7e:80:e5:15:ad:c4:aa:
                    5f:5a:47:24:36:3e:16:7e:82:b5:df:4e:26:27:aa:
                    8f:5d:60:ee:d7:11:b1:74:cd:2a:d0:7c:dc:c6:95:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:44:AA:4D:E2:F4:E1:EB:5A:05:51:6C:67:5A:95:A2:87:85:D4
            X509v3 Authority Key Identifier:
                keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:07:4f:c6:ea:53:97:79:d8:4f:da:cf:94:29:b2:a2:d6:f2:
         77:32:8b:ec:5d:79:04:9e:4c:06:f2:5e:5b:a9:0d:23:83:0a:
         c9:70:2b:57:1c:23:fd:dd:d2:c1:f2:49:e8:88:33:21:b5:39:
         98:85:8d:bc:a0:31:54:6b:bf:ab:0d:a5:26:8b:37:24:58:a3:
         8d:39:2b:18:cf:6a:14:9a:ee:2b:71:41:96:75:1a:bd:9f:aa:
         17:d8:a0:97:60:e9:5f:53:38:a3:e2:59:2e:d3:ad:83:d1:c8:
         b7:36:58:7a:53:84:cd:11:0e:7a:7e:fe:1d:3f:05:0f:78:2e:
         38:59:0f:be:b3:f0:ae:8f:af:73:a4:87:1a:c0:70:f4:c6:2d:
         84:e1:67:61:5f:fb:ba:0c:42:16:b5:cd:13:a4:4e:fa:95:d2:
         90:43:6f:e2:44:fe:5a:89:00:9e:ab:87:f6:ab:53:99:65:b7:
         a3:f8:a0:37:c9:7b:e2:50:ed:6f:0a:0c:f6:85:d8:c5:96:17:
         ae:51:91:42:dd:2d:bb:a9:60:ba:47:39:d3:91:85:42:63:40:
         25:b8:f9:4b:77:63:32:67:f9:84:c9:6c:52:5c:e9:be:2d:4b:
         b7:9b:55:59:7a:d7:1a:67:82:68:80:b1:56:e2:fa:c9:64:f3:
         78:e7:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:11 2024 by rpki-client on console-fra.rpki-client.org