Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          rI5iCLxak+nS6ueHkFiMjnze3THbeYnW8KRgU81PN7E=
Subject key identifier:   2F:B6:2A:10:89:8A:D9:FC:9B:99:CF:89:A7:8D:29:65:B9:9C:D9:5A
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       019358E54565BAA9BF3E1A83EC6522C2985B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 12:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:40 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: QI9XtFSDNA+pzLpGF3QL06dJH5GcmU/cm66JYL9TUsU=)
                          2: xJjO5kcTDHaoLrXVlJiQJEapjp8.roa (hash: 3xq/hsOW7yEK6OripsAmkEXoKX9LDwG3rj/54Q1EMrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:45:65:ba:a9:bf:3e:1a:83:ec:65:22:c2:98:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Nov 23 12:00:40 2024 GMT
            Not After : Nov 24 12:00:40 2024 GMT
        Subject: CN=2fb62a10898ad9fc9b99cf89a78d2965b99cd95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:32:c3:76:63:38:53:bc:e0:e8:47:58:6b:
                    ab:e1:98:ef:60:eb:0f:e0:d2:25:4a:68:92:88:e2:
                    1c:6d:ee:e4:e9:5b:bb:8d:8e:b3:4c:3f:c1:b7:97:
                    48:78:1f:2a:10:ba:f1:e5:a4:48:b5:28:06:56:d8:
                    55:21:67:56:98:bf:67:7f:2e:72:5b:ed:41:20:13:
                    e7:b8:b5:6e:bd:c3:24:a0:2a:d5:90:a6:18:68:d1:
                    48:6e:f3:aa:bd:85:3e:ad:c6:d2:82:78:e3:ea:f2:
                    25:ed:82:3f:7f:cd:bf:91:38:97:11:26:6d:11:e3:
                    9d:e5:2f:e1:5a:64:d4:78:37:9a:69:4d:65:26:a4:
                    99:53:d6:7b:99:e7:b9:8e:9c:62:9d:e6:68:18:91:
                    df:64:bb:16:5c:a1:98:04:29:bf:57:5b:06:d4:1d:
                    84:26:a4:70:c3:be:5a:77:ef:ae:de:9d:49:e8:e1:
                    a7:57:7f:59:1c:35:df:6d:d5:4e:4b:d0:93:f3:83:
                    f7:a3:a0:f9:ad:5e:3c:2a:17:6c:50:b4:ec:88:a0:
                    65:c4:70:94:c9:c2:88:a1:fe:a9:dd:34:d6:47:94:
                    4a:c5:dc:a3:7f:1f:98:72:21:7e:67:86:ed:54:be:
                    79:aa:c8:ce:4d:23:0d:f9:7b:a9:1f:be:ef:db:1c:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:2A:10:89:8A:D9:FC:9B:99:CF:89:A7:8D:29:65:B9:9C:D9:5A
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:eb:2d:35:66:51:93:7f:a3:dd:cc:d6:72:8e:aa:6e:cc:
         35:3f:0c:c6:42:e9:24:e5:e3:ab:2f:71:6b:42:2a:c0:0b:c4:
         6c:88:0d:6a:09:b0:06:a4:64:45:16:ad:37:58:36:4b:83:99:
         7e:e1:c9:8a:bd:79:46:2c:ed:e0:3d:9b:a0:b5:09:bf:fd:be:
         ce:e2:57:a5:7f:13:02:fa:a3:61:6f:a5:ec:c7:99:16:40:56:
         42:b8:03:a2:8f:ce:27:ab:a5:57:ba:17:2b:ec:11:82:2c:98:
         86:5d:84:d0:d5:4b:72:28:47:44:79:c9:24:50:3a:26:b9:9a:
         62:af:cc:a9:42:2d:8d:ad:ae:ba:ea:8f:9d:4a:91:2e:67:43:
         45:dc:77:f5:c7:df:3e:a3:58:cc:51:cd:ae:78:00:6b:94:5c:
         42:40:a6:20:1f:36:2a:3d:00:a4:dd:f6:25:9d:cb:6f:67:96:
         4a:50:9b:1b:c4:83:01:4f:09:01:92:47:78:72:d8:ea:82:36:
         94:dc:cd:a6:3e:b3:4d:cc:21:5b:2c:50:61:f0:80:ca:f5:e8:
         f5:e0:9e:62:a8:78:c8:7b:a8:80:47:6d:fd:98:a1:99:c2:ca:
         b9:bb:c8:f1:fc:79:f0:19:e7:76:d6:21:8d:4e:8f:5d:78:00:
         22:f2:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:52 2024 by rpki-client on console-fra.rpki-client.org