Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File:                     CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier:          tHnOweE20SehRYf0qHtUZQfxhuOQ61sGnBVwsxvcfYY=
Subject key identifier:   98:96:EA:38:25:1A:8E:89:AA:2A:03:F2:8A:53:30:EF:D6:DA:5E:DB
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer:       /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial:       01940721DFEF6E8F5EDA91D3E4355613C4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number:          024B
Signing time:             Fri 27 Dec 2024 08:00:47 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:47 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:47 +0000
Files and hashes:         1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: Babcte4c7EQDzxrYeadtivOqlGROWkWLwqqTQzi73AI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:df:ef:6e:8f:5e:da:91:d3:e4:35:56:13:c4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
        Validity
            Not Before: Dec 27 08:00:47 2024 GMT
            Not After : Dec 28 08:00:47 2024 GMT
        Subject: CN=9896ea38251a8e89aa2a03f28a5330efd6da5edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:83:99:09:32:df:61:6f:d8:6f:33:3a:d4:
                    01:c7:47:e4:d2:de:d0:d0:bf:92:1f:8f:9c:c0:c7:
                    c2:9d:93:08:96:7e:62:1a:a2:8d:76:63:42:e9:77:
                    35:6d:e5:8f:49:d8:33:d0:fd:4a:eb:3a:3c:0a:ca:
                    bf:a9:7e:4c:26:c6:4c:f4:ba:50:56:2a:7d:18:31:
                    55:20:56:ab:51:73:db:0a:c5:14:ce:e7:da:ad:c0:
                    33:61:38:33:22:6a:f4:31:01:2f:f9:19:90:41:a0:
                    4a:f8:d4:ed:f6:4f:1d:6a:10:e3:75:0e:c7:9b:f2:
                    a7:7f:77:2a:bc:e6:1c:99:57:cc:e6:98:e2:18:d6:
                    68:67:d3:90:7a:b5:69:26:49:fd:ce:8b:54:d2:86:
                    bd:da:bc:d6:73:80:35:29:62:64:33:26:de:38:05:
                    d4:aa:9a:1e:c8:6e:aa:24:ed:3e:4b:6d:81:77:a5:
                    19:ce:61:71:74:73:f1:d6:60:33:a3:25:17:e0:ce:
                    27:77:19:77:c6:b5:cf:32:8d:ee:74:c8:2a:0a:3f:
                    bb:f0:83:4b:72:2a:fc:ea:e2:f6:a8:08:a7:fc:79:
                    0a:f8:6d:06:20:7b:bd:6a:82:13:65:66:38:38:45:
                    fb:cf:34:a5:8d:03:0f:23:10:42:ed:6b:85:ac:68:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:96:EA:38:25:1A:8E:89:AA:2A:03:F2:8A:53:30:EF:D6:DA:5E:DB
            X509v3 Authority Key Identifier:
                keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:4d:7c:cd:c6:1c:01:55:7e:4e:0d:b9:cc:1e:6a:3d:ac:
         c2:4b:22:99:1a:51:d2:df:c2:26:ab:cf:0b:17:c5:ff:61:13:
         de:ad:07:15:4b:e7:0e:fc:a4:41:11:7d:a0:bf:9b:ca:55:b2:
         d4:0b:13:6f:cc:ea:51:b7:df:de:96:2d:7f:de:97:c1:43:6b:
         b8:f2:6d:ae:de:6d:5f:ca:8d:9c:9a:a6:ad:a9:2a:6f:0b:a3:
         f7:e7:6e:d1:78:88:31:c5:00:1f:71:71:f4:c2:fe:f0:ab:6d:
         28:1a:0b:f3:66:b2:1a:00:07:4e:79:c3:76:86:5c:ca:98:da:
         3c:dd:1a:90:5d:11:6a:48:4b:69:ae:11:b0:dc:1d:f1:19:19:
         90:56:95:f9:84:63:c1:31:da:9f:1a:cf:1c:38:36:f7:28:21:
         c4:48:70:f3:81:dc:86:63:67:f2:3e:cd:b0:a8:87:aa:f6:c9:
         f7:5f:ae:4c:2f:45:eb:87:c7:f8:38:5c:b3:ad:c8:a5:eb:0b:
         d0:23:1c:5b:e0:89:14:0c:ee:f5:78:00:5f:8d:94:bb:83:ce:
         46:e8:8e:3d:b1:ce:f8:76:d6:f0:14:da:6c:30:5a:a7:5c:c8:
         dd:a0:57:63:92:ce:14:26:d6:91:cb:49:c8:08:e9:06:30:82:
         9f:bf:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:21 2024 by rpki-client on console-fra.rpki-client.org