Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          QPu7hxESJdzb7e8Rd7bcd/J11Iy72AKZ8gglPfmvKVg=
Subject key identifier:   C6:EF:8D:8E:B0:8F:9E:B0:FD:C4:00:9D:DE:D7:64:EF:DF:62:20:11
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019405A16E6DE66FEF16B8E845910B74E1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 01:00:53 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:53 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:53 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: HaMWTaXFbHScZhrCn3JZfHMB/UP1zUor4L5XABDTI58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:6e:6d:e6:6f:ef:16:b8:e8:45:91:0b:74:e1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Dec 27 01:00:53 2024 GMT
            Not After : Dec 28 01:00:53 2024 GMT
        Subject: CN=c6ef8d8eb08f9eb0fdc4009dded764efdf622011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:39:7c:e4:08:af:88:2d:0b:2f:2a:17:de:
                    b5:bd:58:68:64:c7:94:df:73:5c:d4:be:58:7e:53:
                    60:04:48:10:30:9d:e8:8c:97:6d:42:f7:cb:9a:4c:
                    9d:04:1f:e1:b8:88:c4:55:64:27:25:d3:41:5e:b2:
                    99:11:99:13:94:e6:27:4d:77:33:6d:4a:4c:e5:62:
                    22:53:5f:98:04:31:75:d0:ee:c9:b2:92:6b:f7:6a:
                    2f:e3:4c:a1:19:48:e8:98:aa:88:a0:4d:f8:1b:72:
                    c9:1b:4a:7c:17:25:2b:4e:5a:51:e6:ff:82:3b:9f:
                    e9:82:37:97:6b:18:fe:19:e8:fa:0c:cc:ca:f8:f2:
                    71:5c:de:dd:54:1e:9c:c8:65:25:0f:4e:b3:8b:de:
                    11:da:10:a0:6f:90:c4:f7:a2:79:09:f1:c0:c3:c0:
                    76:4f:36:e3:51:91:f4:70:71:ec:2c:a1:ae:6d:2f:
                    75:40:b6:95:96:30:60:39:57:e0:78:bc:d5:41:55:
                    03:5a:4c:ce:bb:e2:af:b9:1c:ee:a5:72:cd:1d:0b:
                    62:78:47:1f:70:68:7f:f6:67:24:b3:ab:25:7b:8c:
                    9c:73:de:19:db:c5:b1:73:c7:9c:6b:d9:83:0a:d0:
                    21:8d:d5:1a:92:a3:6c:b2:60:3b:92:5f:39:c9:c2:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:8D:8E:B0:8F:9E:B0:FD:C4:00:9D:DE:D7:64:EF:DF:62:20:11
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:f2:9d:53:1f:a7:35:74:8d:54:a2:46:1a:c5:c3:6c:62:
         c3:db:73:85:d8:53:23:76:86:ca:61:15:27:21:0a:18:03:48:
         c4:82:19:a6:20:2b:59:68:3c:08:d8:74:a6:82:c7:db:be:36:
         02:a0:83:c5:72:99:9e:7d:44:7c:00:b6:f5:cb:7a:e9:13:6c:
         50:79:2c:58:66:68:b0:20:8d:dd:d2:8d:da:9d:25:7e:bc:a5:
         b2:8f:48:9c:bf:eb:5c:c0:af:76:b0:16:02:25:6b:ae:0c:74:
         36:41:4e:33:c3:3a:a7:43:d9:4e:c9:81:95:11:b7:e0:83:0b:
         25:8f:c2:78:51:f1:82:cc:d4:30:a0:7f:be:e0:4f:71:47:6c:
         66:a8:69:75:39:8f:ce:30:d2:e4:cf:b3:f1:1a:7d:e5:83:c5:
         6d:7a:0f:10:9f:61:d8:31:e9:9f:2f:91:91:f1:03:20:16:4d:
         60:7b:68:da:13:e1:6c:da:ce:9c:eb:3a:36:8e:fe:22:03:f5:
         33:23:ea:95:fb:3d:19:a5:01:57:98:6a:e1:53:97:3e:97:25:
         2b:fb:4e:2b:55:a5:6d:91:bd:a0:48:00:3b:39:bc:2b:fc:22:
         8d:b1:f2:68:4e:0a:87:05:6d:58:85:18:21:5d:e5:d2:e9:07:
         68:47:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:24 2024 by rpki-client on console-fra.rpki-client.org