Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File:                     0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier:          M6stM/1kc3Lyk0JFUY3XsouVOyV8AlkLwWZJp31EyyM=
Subject key identifier:   3D:36:2F:A1:38:E5:A1:15:18:A1:AE:8A:6A:41:AF:1C:99:FE:D2:F6
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer:       /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial:       019406B3D42BB9CD4C7E963E9F5DC0FD3428
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number:          0684
Signing time:             Fri 27 Dec 2024 06:00:36 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:36 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:36 +0000
Files and hashes:         1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: jLf2VNLTgf/30vn3UOmAtdSfw1VmfjZphX57KRU2N10=)
                          2: xAiHlevOokX8J0kkdUdsBruDWiM.roa (hash: 7DGaIEXdMHsuGHt/CsRE1f7NYPb9h0HWaEPobFvNBl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:d4:2b:b9:cd:4c:7e:96:3e:9f:5d:c0:fd:34:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
        Validity
            Not Before: Dec 27 06:00:36 2024 GMT
            Not After : Dec 28 06:00:36 2024 GMT
        Subject: CN=3d362fa138e5a11518a1ae8a6a41af1c99fed2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:73:cc:e0:2c:68:e8:53:ee:f8:a9:14:d2:
                    ae:bc:7f:f0:e2:b3:cb:b4:7e:19:88:89:72:bc:f1:
                    69:aa:ad:d3:b8:1a:6c:70:bb:e6:52:6c:a3:a3:d5:
                    a3:4b:eb:62:aa:31:2f:90:ea:e1:fb:64:67:78:95:
                    2a:96:24:95:79:c1:43:a8:0e:cd:d0:d2:a3:8e:50:
                    e1:d3:f6:aa:fa:82:41:8f:39:85:d0:de:81:8a:e7:
                    27:79:de:9b:bb:36:8b:4b:f6:33:d6:20:8b:7f:56:
                    e7:3d:ce:c5:1a:ca:ad:27:e7:eb:ed:26:c6:58:8a:
                    01:92:03:40:80:0e:cd:2b:b3:58:5b:7c:9b:17:21:
                    19:ee:fe:f0:da:d0:a0:a4:1e:06:86:10:65:c0:ee:
                    99:24:e3:2b:c9:fd:95:e3:c0:95:cf:93:62:c8:34:
                    e3:08:f8:85:89:ac:71:37:cd:49:2b:f9:aa:34:d2:
                    d2:e3:ef:0f:ab:39:a8:a4:ff:82:df:6c:4b:54:a3:
                    47:bf:7b:13:85:d5:78:61:d0:b6:07:56:4a:d0:d5:
                    c3:8f:82:0e:1a:f5:b3:f6:fc:0d:c1:ea:21:57:b5:
                    f4:0f:d4:db:3b:a4:47:2b:57:a5:0a:88:43:95:39:
                    d4:59:35:31:b8:3e:e1:ef:9c:d0:62:6a:96:6f:e6:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:2F:A1:38:E5:A1:15:18:A1:AE:8A:6A:41:AF:1C:99:FE:D2:F6
            X509v3 Authority Key Identifier:
                keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:20:5a:05:c1:f3:e5:29:35:a4:69:cd:f0:17:d1:64:7c:
         d9:be:1f:4b:8e:5f:50:44:36:49:a0:22:39:07:46:5d:12:2b:
         3b:9d:ff:d3:be:53:0f:8a:63:0f:0b:1c:24:e2:24:a5:4b:b6:
         1c:a5:c2:b9:dd:a5:7a:1f:28:f9:d9:bd:da:d3:70:4b:c2:91:
         f7:15:21:95:52:e7:f1:5c:ab:75:11:9c:fd:bf:b5:fc:76:a0:
         b8:5c:39:ab:d6:7a:42:3a:5d:f9:ab:60:5e:7d:3c:4c:56:9d:
         15:d7:ea:08:8e:c2:e8:da:28:ca:0d:d2:05:06:46:39:ba:73:
         d7:c5:da:32:85:07:1b:e6:a4:92:de:72:9d:0a:91:b6:5e:4c:
         cb:41:67:ae:50:55:09:f0:53:a9:62:47:6e:85:79:c3:7f:2d:
         50:6f:4c:72:59:16:7c:ac:0c:5f:14:f4:92:76:2c:16:86:23:
         cf:5e:b8:78:f2:92:07:ac:47:0b:cf:42:5f:1d:c7:de:71:1c:
         7e:b2:cc:3a:24:1d:7e:f9:df:f7:92:05:0f:cb:97:12:98:da:
         bc:4d:3d:2a:b9:b8:0e:26:41:8a:86:97:2b:9e:13:d8:d7:1f:
         1b:bb:52:9e:f9:28:f6:b9:f6:bc:ac:d1:06:d3:99:7c:4c:d6:
         2e:a9:fc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:20 2024 by rpki-client on console-fra.rpki-client.org