Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          9YmwIDfPIsTlYac1jqxRF4Wg2v4Jq10/zL1XFGmgYIM=
Subject key identifier:   71:E3:A8:CA:E3:7F:CE:56:26:EF:B9:77:A6:CD:2C:3B:F4:2C:1E:39
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       01935764B1D22A2B25DEA2A6F0AD59C33578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          12C6
Signing time:             Sat 23 Nov 2024 05:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:37 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: umZeaRuIpiVhfcPqBiQ7iJpkRSOd+Rf4/hTxgHMGr4k=)
                          2: FyS3VR9T2lVFQapPeSUyfqN8mqI.roa (hash: 1vu/ceqFFRlvjM+pR3uGHQikziBg+mT6zocoA6SJxOs=)
                          3: HSUCHWanzBwcVuI7vksUIR2ORao.roa (hash: OgQtF0D7yJYNoPyT6yjV5dHlw54J4tYPfP+mhfkcnh4=)
                          4: ivT9LCeqKU1XBfscMqCXY89DyEo.roa (hash: 0qOw9VMDRdYHRmp/t0meUrVXla/yRCkrJrbgxclFaB4=)
                          5: yHnhP1AmUTTVVg_geQHx-nqESEw.roa (hash: AcpM+1spkfIwm5B87iNqHse1WNGJAEy1uspr8vqiZKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b1:d2:2a:2b:25:de:a2:a6:f0:ad:59:c3:35:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Nov 23 05:00:37 2024 GMT
            Not After : Nov 24 05:00:37 2024 GMT
        Subject: CN=71e3a8cae37fce5626efb977a6cd2c3bf42c1e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:5b:6f:7b:ab:68:fe:16:ad:e6:b8:6f:86:
                    69:9f:0f:90:5c:28:b7:51:34:4b:d0:e6:c0:a6:fd:
                    66:a6:e7:6a:93:fc:ca:5d:b1:12:fd:78:2b:f0:ee:
                    dd:4f:80:12:d3:f3:f4:e4:fa:45:e8:f0:dc:e3:33:
                    fe:52:ec:36:3c:5f:5a:1a:6a:73:38:a7:db:3a:68:
                    90:09:b8:49:8e:3c:c4:be:2e:b1:4a:8a:04:9e:e5:
                    99:46:b2:ee:f5:d8:19:3e:75:28:37:ef:4e:70:2a:
                    6f:cc:17:d0:0c:1a:79:91:27:0d:3f:64:34:b0:b3:
                    06:d5:79:ff:48:dc:c2:25:50:b1:72:a1:c7:9e:17:
                    08:4a:9b:c4:a9:17:c3:9b:dd:5e:b8:93:d6:ad:21:
                    5e:f4:fb:52:24:2f:a3:f0:74:38:ff:da:ba:ad:37:
                    dc:2f:82:24:4d:03:9d:e7:e5:d5:f4:b6:96:d4:ad:
                    04:b7:d1:a4:91:9f:86:82:b0:a3:2f:de:0e:41:b1:
                    97:c6:a0:27:51:22:68:89:b7:90:ca:f5:b1:91:76:
                    e5:b7:fb:5b:9f:0c:17:2b:b9:59:00:fe:d9:5b:7d:
                    ad:87:8b:fc:ea:ca:88:54:a5:be:8b:a5:23:09:31:
                    8f:02:0e:cb:70:6f:fb:9a:b9:1e:20:33:25:b0:13:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:A8:CA:E3:7F:CE:56:26:EF:B9:77:A6:CD:2C:3B:F4:2C:1E:39
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:18:eb:8a:87:48:6b:07:c9:6f:60:aa:b4:28:0b:79:95:
         89:2b:ba:5f:c2:a3:39:3b:55:6a:b4:19:c9:a1:83:87:37:80:
         7b:63:a1:f1:78:17:b1:af:da:25:b7:6c:56:a6:07:1e:3e:44:
         55:b6:39:7b:b9:a3:b1:61:62:04:43:5c:dc:95:b2:a3:ca:12:
         b7:81:fe:f5:d7:81:48:b4:7c:08:79:53:bd:b7:80:8d:81:34:
         2a:85:6f:e3:d5:ff:0b:bb:77:53:30:8c:93:d4:53:03:6d:1a:
         cb:5a:18:8e:01:38:96:12:73:88:97:46:6a:d8:59:ab:18:6a:
         ee:93:9c:83:20:8d:a2:cf:70:50:4c:ce:94:08:c7:6c:50:b7:
         a0:5b:6a:a9:67:be:b9:c1:ab:a5:e6:7f:e9:49:68:f0:b4:2e:
         8e:2b:31:2d:20:ab:2d:60:0b:e8:a7:8a:fe:cd:1b:8d:c1:a5:
         f7:af:82:f9:a9:e6:42:89:d2:2c:47:66:a3:db:d0:f5:f8:53:
         f6:26:fc:ae:f2:1c:83:66:73:fe:e2:e2:c7:4d:07:cc:2d:48:
         a7:e4:17:f7:94:90:71:32:72:c0:53:ce:e0:7d:46:29:75:b3:
         3c:c9:7e:a7:b8:8b:1e:87:02:4a:19:13:05:da:82:62:dc:e0:
         3e:97:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:52 2024 by rpki-client on console-fra.rpki-client.org