Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          ERsjJ7t0OLASlntU7CURvPwv2MNC6iJztyJQgbOzWV4=
Subject key identifier:   68:65:5D:F8:9A:9E:02:D9:DF:16:A9:E0:D7:53:A2:81:90:C4:6E:C0
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       019405A14F3155A2FA3614B59D6D3664D534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          02A3
Signing time:             Fri 27 Dec 2024 01:00:45 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:45 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:45 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: QZMrauJaZXxU3v/q4pGycYwd68RFWihV741PxvSHDu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:4f:31:55:a2:fa:36:14:b5:9d:6d:36:64:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: Dec 27 01:00:45 2024 GMT
            Not After : Dec 28 01:00:45 2024 GMT
        Subject: CN=68655df89a9e02d9df16a9e0d753a28190c46ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:c1:9a:e0:3c:c6:fd:ef:3d:a3:96:ec:41:
                    43:71:e6:8c:0d:20:72:87:de:aa:4b:79:44:6a:53:
                    53:4f:63:32:85:d4:f7:20:fb:17:09:75:70:b7:f5:
                    ab:44:f3:b4:e9:03:c0:8d:9a:4e:db:d6:1b:e5:d3:
                    1e:20:37:29:d9:a4:de:67:b9:67:b2:89:e3:e3:25:
                    55:eb:47:2d:99:e1:21:77:11:b3:1f:34:7c:1e:00:
                    47:3d:73:ee:37:e8:b6:ad:09:3c:71:53:5d:09:b8:
                    16:7d:15:42:e4:6d:df:81:9d:d9:3a:c5:01:d5:11:
                    47:8b:ce:8c:3b:ac:f4:ec:69:1c:f3:4b:49:9d:d2:
                    d8:f4:3a:70:9a:44:1a:d5:1c:38:85:d8:2d:ce:7e:
                    88:57:d5:a1:fd:34:49:9a:ee:bf:09:93:26:c0:6c:
                    04:92:9e:4e:a8:4b:f8:60:7b:db:f9:07:08:26:c6:
                    58:da:8b:94:30:57:89:ba:31:1a:a0:ad:ff:87:f2:
                    c1:c5:e5:9e:a7:72:b6:7f:c0:3d:f2:90:79:6f:6f:
                    18:20:49:5c:55:2b:7d:50:36:45:53:a5:9b:f4:6b:
                    ef:bb:8a:3c:7b:e8:b6:74:e5:3e:c8:7b:41:e4:6f:
                    de:8d:93:6d:e3:bc:a0:5f:66:c0:fd:53:5d:9d:3a:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:5D:F8:9A:9E:02:D9:DF:16:A9:E0:D7:53:A2:81:90:C4:6E:C0
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:78:17:ae:d0:71:b7:4f:31:c8:b9:c1:8e:23:0f:5a:ae:b2:
         95:c7:7d:e0:85:97:29:4b:e1:8e:0d:59:40:c4:1b:90:7b:2a:
         5b:97:09:4a:83:27:d9:69:52:30:da:57:1e:19:85:6e:74:43:
         ce:23:0b:87:5e:a9:c2:7b:e3:7f:cd:80:0c:9b:3d:93:25:95:
         9f:3c:4c:2e:86:38:c5:dd:f1:eb:5d:5e:0e:8a:eb:17:00:05:
         97:ab:0b:0b:a1:1e:41:13:a1:45:86:58:0c:92:d1:76:7f:b4:
         5c:1a:25:40:c9:06:d2:77:2f:ed:52:a9:d4:27:7d:d1:5d:68:
         13:23:30:b5:f0:5c:b4:61:f9:b1:d3:39:a3:83:e2:d7:3c:eb:
         33:d4:65:69:08:0e:3a:83:26:f8:bd:4e:4f:10:4c:98:f9:d7:
         0f:57:4e:fc:f5:e1:f6:a6:c6:a1:61:e3:8d:25:17:d9:5a:69:
         95:14:d7:f5:53:65:ca:f6:d7:fc:b3:5e:d2:21:ed:2c:38:08:
         8e:77:cb:69:b0:c5:a5:54:7a:56:ce:4c:c3:15:63:87:bb:a1:
         86:8f:9e:2b:da:b3:5c:f9:db:b6:ba:99:86:6c:7a:27:ef:96:
         61:82:83:77:ec:07:e7:33:60:b0:6b:24:d0:6e:32:2b:22:83:
         ce:73:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:46 2024 by rpki-client on console-fra.rpki-client.org