Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          GU7hTkPmqnrK8QbDsp6Eo//JYM/7nAhc161kD0fW0KQ=
Subject key identifier:   FA:1C:7B:7C:F7:4B:AD:48:88:AF:27:E7:89:D1:DA:DA:03:2E:67:F4
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01935877849E88E82FEACA8F53B0D43BDE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          12F9
Signing time:             Sat 23 Nov 2024 10:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:47 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: rmwgLR2fwNYjKydx7u/XJecRGe6ZRlJlgeW9/E6BmAE=)
                          2: HdjQUa57Z007bGgwM2AC07zC5OE.roa (hash: +k/8vcyG2cjFaNiheelNXyJzON4H5TK3SYgJ/4+UfY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:84:9e:88:e8:2f:ea:ca:8f:53:b0:d4:3b:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Nov 23 10:00:47 2024 GMT
            Not After : Nov 24 10:00:47 2024 GMT
        Subject: CN=fa1c7b7cf74bad4888af27e789d1dada032e67f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:ab:e9:62:1c:97:5f:65:19:2f:8f:42:df:
                    a2:1f:d6:37:41:8a:ab:79:95:db:17:d2:2d:31:80:
                    36:f1:d3:61:7c:d2:67:8d:65:ce:50:bf:a1:d6:f3:
                    d2:dc:c4:49:c7:8c:e3:b1:a1:3b:65:9d:08:1e:87:
                    67:96:a3:19:b0:b8:b9:72:c6:9d:1b:4a:db:64:b0:
                    8c:e3:3b:57:2c:4f:90:69:40:31:8d:ff:ee:1c:e1:
                    af:aa:14:e9:a4:a4:20:df:a4:0e:2b:0c:5b:a0:c1:
                    5a:2d:3c:ec:72:eb:1d:cd:75:07:9b:b4:45:48:19:
                    b6:ce:82:92:8c:97:5a:d4:b7:aa:5e:47:81:ac:39:
                    61:ac:4a:e1:4f:e8:e0:9e:d9:01:4c:3c:55:ba:d3:
                    2d:9f:13:69:ce:e4:64:60:bf:1f:1c:18:a6:49:2d:
                    8c:12:de:bc:ef:c6:37:9a:b4:ce:fa:94:7b:0b:6f:
                    a6:93:da:3c:9e:ef:c0:c8:78:5b:96:0b:73:69:19:
                    dc:1a:9f:e9:0a:7b:37:3a:2f:c3:e0:e7:39:da:3b:
                    b0:47:de:22:91:ae:99:88:d4:4e:3b:c1:04:87:3c:
                    8f:64:f1:e2:ef:2b:7a:53:10:06:3c:b0:46:95:55:
                    d7:aa:8b:dd:16:b5:db:5d:aa:b0:82:07:73:0f:c5:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1C:7B:7C:F7:4B:AD:48:88:AF:27:E7:89:D1:DA:DA:03:2E:67:F4
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:bb:ea:87:9c:18:2a:40:9a:90:dd:35:3a:40:0e:c5:40:
         e6:47:64:72:88:06:70:d4:48:8d:06:74:bc:46:10:9c:d2:59:
         60:81:29:82:29:59:4e:b5:42:14:98:47:1c:4a:b7:2e:d9:b2:
         d6:cc:61:87:a3:04:9a:29:38:fc:7d:77:ba:4b:e0:67:b8:3e:
         db:97:79:ae:34:35:72:9f:d1:c3:aa:c0:1b:77:f3:d4:ce:25:
         b4:e5:34:2b:3c:f6:4d:03:a0:59:3e:4e:96:0c:c6:6d:a5:24:
         04:3a:ae:48:dd:8b:c7:08:ab:af:27:ac:1f:b5:8d:00:56:91:
         b0:97:b3:78:f2:d6:ac:e7:c2:c7:c9:14:b9:18:fc:54:a8:ed:
         2d:36:ac:97:c8:a2:fd:2f:15:19:89:a9:49:17:22:63:5e:a5:
         3f:5a:c4:c6:f3:f3:89:56:c9:3f:a5:9d:a1:aa:4c:06:77:b0:
         35:aa:c4:aa:1e:6f:72:42:c9:59:bb:a4:f7:97:97:a4:30:4e:
         de:6a:9b:07:4a:7e:b6:c8:46:c1:30:a4:23:78:9f:7b:25:74:
         01:8f:2b:11:88:e3:8f:c8:11:3e:8c:7e:81:54:0a:5a:fa:26:
         4b:95:6a:de:44:bd:dc:66:7e:48:c2:03:06:3e:1a:c8:64:87:
         e2:40:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:18 2024 by rpki-client on console-ams.rpki-client.org