Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File:                     0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier:          uzqLIf+SPzuKjscK4faB8v/J00nIQEOJL8NEiy80O0E=
Subject key identifier:   EE:82:FC:ED:33:88:0B:63:A5:5B:29:80:6B:3B:87:56:60:CF:98:5A
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       019406EACECA85E89D31B142DA104D8ADA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 07:00:39 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:39 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:39 +0000
Files and hashes:         1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: XByJxTV7gm7XGmN8uLvkXs8E2B98F0FOePl8/jImzMY=)
                          2: D7OSoUl5-I2sFo3_4FA9nhLAGio.roa (hash: QeXE0zZM4AvsvXbuE7NbCYPi0T2tBcpSq53SQdBRnTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:ce:ca:85:e8:9d:31:b1:42:da:10:4d:8a:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: Dec 27 07:00:39 2024 GMT
            Not After : Dec 28 07:00:39 2024 GMT
        Subject: CN=ee82fced33880b63a55b29806b3b875660cf985a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:85:ad:d1:34:56:62:50:05:71:fa:37:ee:
                    58:00:d5:a0:5d:49:2b:d4:c4:a5:7f:c9:03:47:2d:
                    7b:90:82:2f:4a:2d:e6:f9:4e:1b:65:34:a5:be:7d:
                    72:f4:02:ec:17:20:f1:b8:9b:ff:f2:1d:a4:ba:2b:
                    be:68:8c:8e:5d:69:5b:f9:f7:64:5a:4c:b2:b3:27:
                    45:86:e6:e1:d2:30:20:ac:7f:ff:ed:2d:09:6c:8a:
                    72:c7:96:06:97:2b:2b:33:46:57:58:65:29:e9:60:
                    7b:66:5e:41:34:a9:45:d8:c7:cb:62:9b:64:40:06:
                    3e:2c:b9:c8:75:23:ae:6b:5a:3b:50:88:5f:d7:a7:
                    a0:c2:d4:1e:fe:f4:de:f5:3a:1b:31:34:22:8f:5d:
                    66:7b:7b:06:d5:3a:d5:20:ae:66:f6:7d:93:3f:6b:
                    8e:5a:cf:55:72:23:e8:0f:b0:3b:79:e8:4e:e4:e3:
                    50:3b:22:59:12:ab:a5:26:2e:30:67:bd:d2:49:a4:
                    5c:47:8e:12:d5:45:af:2c:e2:5a:e1:22:1d:3c:b0:
                    b2:d8:a0:3d:33:d0:79:a8:58:02:d8:f0:6b:f0:8c:
                    df:36:78:3e:2b:c5:e3:38:9c:08:b6:7d:85:7a:80:
                    19:51:7d:9f:16:bb:2f:78:cc:dc:c7:59:27:b8:69:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:FC:ED:33:88:0B:63:A5:5B:29:80:6B:3B:87:56:60:CF:98:5A
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4a:8e:31:ee:3e:8b:1c:ce:5e:48:3d:f0:d3:55:64:5c:13:
         79:e6:69:fe:75:b1:e7:46:a7:52:8f:f6:7b:28:33:6d:13:02:
         35:6b:f2:4f:36:1e:40:e8:b5:05:59:94:de:ae:61:a6:84:62:
         1a:38:f7:83:01:b1:ba:bc:5c:56:8f:56:82:7a:6f:b1:3c:71:
         a8:85:68:7f:cf:db:94:07:c6:d9:ab:d0:a2:e7:ed:9e:eb:ee:
         71:75:08:1c:05:e1:a5:77:a2:09:fa:e7:24:df:a9:d3:80:81:
         9b:fb:ea:1a:93:67:8f:3b:5b:de:55:66:56:ac:8d:f3:27:15:
         42:69:d6:6c:04:51:e3:22:6f:ab:5c:ff:f5:80:4d:f3:49:ef:
         56:1b:8a:50:1d:8e:a3:ed:56:f6:a0:6a:d2:27:28:4c:40:23:
         f5:17:2b:aa:06:39:1d:d0:04:aa:65:c7:94:fc:5e:8e:77:9f:
         a4:79:f1:de:17:c3:a9:96:62:b0:da:66:86:3b:55:5e:b6:a2:
         10:9d:92:72:f5:80:f6:fa:be:fa:9e:1c:59:72:7a:83:cb:e6:
         4a:d2:01:f5:9a:b6:23:46:f2:b2:cd:f1:bb:04:22:be:6d:31:
         f4:56:37:09:ea:bb:76:c1:20:c1:27:f0:f0:6d:32:0a:0c:62:
         cd:b4:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:21 2024 by rpki-client on console-fra.rpki-client.org