Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File:                     a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier:          oGm3YjoerYUikY/59Y+sw6BWCZLnHtEWQKMVJYPY17Y=
Subject key identifier:   6D:6B:A4:01:A9:03:EC:0A:B3:AD:6C:CA:A9:52:7F:AC:98:51:12:BB
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer:       /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial:       0194BB297CF22A9184531DE6455EB888820F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 07:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:45 +0000
Files and hashes:         1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: rSntRsJSbcnc64q6UtDs6YiFPUOnBTXFmfQE7xgIUXA=)
                          2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:7c:f2:2a:91:84:53:1d:e6:45:5e:b8:88:82:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
        Validity
            Not Before: Jan 31 07:00:45 2025 GMT
            Not After : Feb  1 07:00:45 2025 GMT
        Subject: CN=6d6ba401a903ec0ab3ad6ccaa9527fac985112bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:f4:8d:73:5e:64:88:07:50:ea:87:85:0f:
                    7a:5a:80:4b:88:3b:e1:bf:6c:60:90:3c:8f:eb:f3:
                    2f:d0:eb:68:eb:6e:9e:49:bb:3c:bf:9a:a7:80:61:
                    2b:af:f8:c8:f7:b2:96:ce:9b:27:57:ce:cc:4c:6a:
                    ab:3a:9c:42:e4:32:0a:18:52:f9:81:3f:e9:96:3e:
                    49:13:e7:ec:f9:48:ef:f2:13:ab:17:b9:4c:b6:05:
                    5e:a2:0c:c8:ab:e2:bf:c4:3f:fe:85:81:e0:b5:cd:
                    7c:13:c9:01:7c:bc:12:49:eb:04:05:23:32:59:59:
                    8f:ba:41:ce:d1:38:df:55:8c:bf:29:0a:54:bd:e8:
                    ab:70:df:9c:75:53:e0:d5:dc:d1:1f:4e:43:be:51:
                    2b:f7:7f:67:74:bc:c3:0b:56:28:21:af:35:d7:2e:
                    c1:9c:bf:70:27:31:24:d3:aa:21:79:66:9d:b7:69:
                    5d:c1:5f:36:ad:94:38:57:e5:68:54:d4:ff:8f:48:
                    7a:9d:2b:46:01:a1:99:fe:ce:a9:7f:e3:10:25:d3:
                    76:3e:86:c2:b4:ba:0c:f9:a3:8e:a7:e7:7e:26:89:
                    45:b4:6c:48:5f:32:f0:20:fe:e2:60:f6:b3:c9:9f:
                    b7:2a:a2:6d:ee:3a:ea:31:0b:bb:ad:dc:c6:3f:99:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:A4:01:A9:03:EC:0A:B3:AD:6C:CA:A9:52:7F:AC:98:51:12:BB
            X509v3 Authority Key Identifier:
                keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:00:82:8e:03:7c:9f:62:61:42:66:f8:5f:00:03:9b:77:b4:
         09:99:57:14:4f:f2:c2:bf:08:f2:06:2a:57:66:ff:63:25:d8:
         82:2f:08:55:85:e0:f2:8f:93:73:e7:44:25:7e:8c:2c:ee:a4:
         92:00:64:25:6e:54:c2:88:45:ff:08:cc:cb:16:6a:48:1d:9a:
         5a:be:4b:f6:92:e9:ff:93:a1:3f:59:e3:07:7a:a9:c3:b2:36:
         33:28:38:9f:11:43:88:fd:33:1a:bc:71:de:6a:76:b0:88:b2:
         93:31:38:93:04:e4:aa:ab:cf:6a:9f:86:8c:d4:26:f3:94:3b:
         1e:89:28:71:e7:61:58:82:68:21:c7:f7:f2:2d:3f:64:fe:85:
         18:be:64:fb:51:d7:e2:5f:4f:95:16:9a:20:a7:18:60:d6:f5:
         fa:75:f9:8a:1a:3a:d9:97:71:c2:e5:64:f7:df:36:7e:cc:7a:
         6c:88:e2:d3:42:be:0f:94:d9:55:8d:21:ac:e4:3a:e2:d0:be:
         44:0d:55:c3:bd:ad:d3:ca:55:79:99:9b:d0:69:15:69:6e:0b:
         83:e8:af:13:1c:f4:2f:4a:fc:d0:bd:df:bf:88:60:af:d2:c6:
         b8:4b:9d:bb:a5:da:9d:ce:d1:e0:26:0c:72:4e:d0:5e:bf:e9:
         6a:90:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:33 2025 by rpki-client on console-fra.rpki-client.org