Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
File:                     6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft (raw, json)
Hash identifier:          vznxRIRlOc4e376s5kRAUoSvBf72lOjIhw+uCMdCSOA=
Subject key identifier:   90:0F:47:19:A8:44:D2:52:5B:45:E4:B1:D7:44:C6:67:A6:84:96:2A
Authority key identifier: E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E
Certificate issuer:       /CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
Certificate serial:       019405A0EB4C68EDDFD9897CB8D56ABF49E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
Manifest number:          032C
Signing time:             Fri 27 Dec 2024 01:00:19 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:19 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:19 +0000
Files and hashes:         1: 6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl (hash: aX0zUbemy52AjHXQbIM89VaubNyS/nJAPjfzdGznq+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a0:eb:4c:68:ed:df:d9:89:7c:b8:d5:6a:bf:49:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
        Validity
            Not Before: Dec 27 01:00:19 2024 GMT
            Not After : Dec 28 01:00:19 2024 GMT
        Subject: CN=900f4719a844d2525b45e4b1d744c667a684962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:9f:db:87:ee:96:9c:84:9b:6e:3d:2a:0f:
                    81:64:99:ed:f1:74:3a:e0:c8:6a:f0:81:7a:ba:2a:
                    60:93:ff:2d:1c:79:f6:03:82:85:c1:41:08:90:1f:
                    46:14:7d:69:dd:91:80:3f:b5:bc:cd:89:ba:cc:1b:
                    c1:64:6e:b0:09:b4:56:8c:6e:ba:40:24:b7:1e:34:
                    dc:2e:71:f1:ec:29:61:b2:91:e5:35:f4:91:b2:04:
                    aa:39:c7:34:62:a6:77:61:00:72:81:1b:b0:53:1b:
                    a4:0e:46:c8:9e:3c:a4:74:a8:f3:bb:0f:03:21:d9:
                    a5:7b:d6:6d:82:c4:0c:34:ef:81:80:0f:85:ee:af:
                    30:c2:bb:1c:16:06:72:76:2c:fe:f8:ee:7c:d3:58:
                    fd:0c:62:50:ec:6d:39:55:80:0c:ee:be:9d:e9:33:
                    81:4d:a3:46:19:b3:08:b3:a6:1f:bd:72:c8:ed:af:
                    f8:76:a6:67:cd:a7:c7:14:bb:08:5a:f0:e3:d0:d6:
                    58:36:f1:07:6d:64:7d:19:9f:17:98:a2:8f:a4:50:
                    4a:77:6b:66:49:11:98:8b:fd:07:80:78:4f:ce:68:
                    83:be:46:9e:ef:dc:57:42:ca:d4:c1:77:a8:09:51:
                    35:d8:43:40:ce:63:ce:c8:aa:8d:ad:7a:9a:20:7c:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0F:47:19:A8:44:D2:52:5B:45:E4:B1:D7:44:C6:67:A6:84:96:2A
            X509v3 Authority Key Identifier:
                keyid:E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6e:9b:a4:b4:38:80:fd:fe:43:88:a4:b7:bd:00:e1:11:cf:
         b9:8b:e3:b8:bc:e2:e5:e2:be:87:1e:d4:35:5a:d4:f2:30:32:
         91:94:9b:ec:e6:40:b8:ad:73:93:41:f5:c0:31:52:ce:18:09:
         8b:5a:e4:37:af:60:f3:84:f6:f9:ec:f5:48:45:ea:75:df:67:
         9b:2e:4b:a7:4a:7f:27:64:c9:05:36:c9:30:29:6c:36:40:21:
         49:f4:b9:40:1f:b1:60:db:df:23:30:a2:64:d0:e2:ad:fc:86:
         6c:6e:2a:3a:59:46:95:1e:59:6d:f6:27:52:fd:98:f5:09:27:
         ef:c2:52:11:39:3b:58:71:95:62:a6:93:85:b6:ad:5d:47:4b:
         5d:6d:a8:f5:9d:eb:c8:75:31:bc:be:48:01:2b:6d:e2:c6:f3:
         cd:80:8c:2d:eb:d8:6b:21:16:d9:7f:2a:79:54:80:91:55:7f:
         87:c5:0c:d2:64:92:6a:35:cc:6c:00:41:cc:27:e8:da:7a:19:
         ad:8c:b6:3b:52:87:71:8a:31:7b:51:93:f7:f0:12:87:ed:11:
         01:bc:b6:64:fc:ce:a9:51:19:c7:d1:69:3b:52:f9:19:60:70:
         6a:0b:02:d9:7b:42:67:37:a3:af:93:bf:3c:fc:1f:5c:60:fa:
         7a:87:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:02 2024 by rpki-client on console-fra.rpki-client.org