Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File:                     4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier:          YwnPQfaAn8NW4JjqUgvhzQrY5cDaUMsmdNJER0NzNKQ=
Subject key identifier:   6F:7D:EB:D2:1E:B1:80:9C:C8:1C:82:88:2F:0F:EE:15:FB:EB:18:9E
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer:       /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial:       019406464001140917C3320395BD1EAA132C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 04:00:54 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:54 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:54 +0000
Files and hashes:         1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: z3Q8vfUclkBQZ33qAwUC34Pgb8OTgW8nF/DewamC/Rk=)
                          2: km3qblrC6UOPGcyZiw6FaB6oRWQ.roa (hash: HIVHw+Nm+1/jyf7rnHCyN8y6xriOD7ZiXi+qwCCTE58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:40:01:14:09:17:c3:32:03:95:bd:1e:aa:13:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
        Validity
            Not Before: Dec 27 04:00:54 2024 GMT
            Not After : Dec 28 04:00:54 2024 GMT
        Subject: CN=6f7debd21eb1809cc81c82882f0fee15fbeb189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:d2:c8:ac:d1:27:2b:23:15:a5:f4:b6:f1:
                    ff:40:89:cb:9a:30:8e:15:a2:80:da:94:56:aa:23:
                    66:23:35:24:e3:0c:7c:38:42:55:c6:99:87:5a:f0:
                    a8:fa:61:a2:19:3c:7d:10:07:d8:96:c1:79:94:ab:
                    4a:4e:b1:f3:11:e4:4e:be:30:7e:a9:08:af:2f:a5:
                    4b:49:9e:d5:83:a1:ea:c3:27:0e:5d:10:01:65:99:
                    94:c9:6e:6e:3b:c8:54:4a:b0:9a:a0:3d:59:4e:88:
                    23:33:b1:9b:fc:25:49:b0:25:93:94:ec:5f:d9:e9:
                    09:b5:5f:d6:b2:20:12:b8:b2:d0:5a:a8:da:14:32:
                    f1:11:dc:f5:4a:91:1f:50:d3:65:2b:50:d0:85:05:
                    98:d6:3f:2c:2c:6f:86:93:86:f7:80:07:95:06:a4:
                    34:3a:e8:87:82:40:96:d9:4d:cd:eb:9f:02:7a:7e:
                    b7:de:0a:e7:5a:5e:ab:7e:b7:dd:d0:a6:55:0d:57:
                    c0:4c:be:e0:b9:eb:9c:5b:63:81:0b:2a:c5:68:62:
                    89:8b:d7:c3:82:e2:f1:3c:cc:60:0c:5f:70:32:3f:
                    a1:ca:91:6b:27:cf:47:c0:3b:fe:0c:0d:d9:02:99:
                    95:ab:41:7d:73:3d:1c:56:63:0e:2e:c1:aa:a3:b9:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7D:EB:D2:1E:B1:80:9C:C8:1C:82:88:2F:0F:EE:15:FB:EB:18:9E
            X509v3 Authority Key Identifier:
                keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:dc:5d:a5:48:39:cd:67:8e:87:38:36:29:00:46:db:05:
         6a:61:55:19:0b:d7:19:48:f4:c1:f0:57:98:04:5a:fd:60:fc:
         df:a5:a8:04:d3:64:f7:a9:8b:23:6b:b5:2b:3d:d0:c8:37:c3:
         f0:8b:ab:33:b1:0b:a1:18:10:56:e6:b0:b2:d2:5a:d5:49:67:
         b3:74:5e:e2:f5:ae:2f:f6:11:7e:f2:4d:32:11:0a:11:6a:ad:
         28:56:d4:d3:20:59:a9:2e:af:b0:8e:79:ff:1f:b8:03:b3:d1:
         89:60:67:66:f4:18:2d:80:d3:26:53:cd:69:71:af:92:9d:6a:
         bb:6c:91:2a:58:75:2d:c5:dd:62:16:c6:30:a6:43:e5:f5:8f:
         60:dc:93:01:27:cd:a2:25:18:41:00:fd:51:50:e6:a3:e2:32:
         6e:5e:c7:45:ed:8c:50:95:8d:d4:47:eb:e9:5d:17:39:bc:db:
         26:76:35:50:54:02:1a:ee:7a:95:ce:e1:f0:8e:76:67:02:e1:
         91:76:27:c4:a7:e3:8b:12:a7:c9:53:8e:b2:3d:25:bf:92:20:
         62:c4:45:99:dc:1e:fd:f8:1a:ee:85:dc:a1:b1:65:06:2b:5c:
         06:cf:86:3f:69:0c:4e:fd:3d:2d:ff:1f:02:48:1e:f1:39:ac:
         bb:5d:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:29 2024 by rpki-client on console-fra.rpki-client.org