Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          kQgu//YA0tPKCgbBOVREdh/lKSDenUZN84cvHGrK1cU=
Subject key identifier:   14:D1:D3:83:E2:C3:E2:B7:34:BA:4F:0D:21:D7:8D:2F:6F:9F:AB:0E
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       0194BA84AB634DF2E29EC53662FA22B15E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          13B8
Signing time:             Fri 31 Jan 2025 04:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:44 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: 7I2vVN98oXu8yn5TEUECFVNHimjPgkaePBW8roDBXe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:ab:63:4d:f2:e2:9e:c5:36:62:fa:22:b1:5e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Jan 31 04:00:44 2025 GMT
            Not After : Feb  1 04:00:44 2025 GMT
        Subject: CN=14d1d383e2c3e2b734ba4f0d21d78d2f6f9fab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:a5:67:3f:4b:6f:45:88:1e:8e:6e:e0:1b:
                    74:21:c9:8f:d8:79:5a:76:a8:b4:fe:c5:3f:5b:d0:
                    5a:84:1e:9c:b9:db:c4:84:cf:3a:13:30:47:d3:ea:
                    c4:22:71:22:57:be:4a:32:e3:3f:db:6b:6e:0b:9e:
                    ff:db:ea:40:f3:43:89:94:f6:32:1f:e6:18:c0:16:
                    07:da:e4:0e:2a:46:16:58:22:f4:1f:ce:59:53:47:
                    93:db:06:53:3f:65:5b:b5:c5:cb:15:c4:fb:df:eb:
                    2e:17:fb:09:be:dd:ba:50:7e:69:ae:15:45:3e:37:
                    c8:b0:d1:bf:5f:e1:4a:47:53:a3:2c:98:1f:7c:2e:
                    6c:4f:11:2a:42:1e:c1:c5:d6:fd:7e:20:17:db:ff:
                    55:3e:f4:86:43:73:19:a1:6f:92:d2:c4:6d:63:b9:
                    fc:87:ea:43:53:47:70:45:73:79:78:ef:a1:68:65:
                    17:ad:ce:1e:2c:45:05:10:18:51:c1:43:4e:b0:65:
                    78:be:2d:6a:10:e5:dd:dd:31:8c:7b:08:ec:57:cb:
                    ef:e2:4c:29:e0:3f:de:1f:a6:56:7d:e3:29:14:a2:
                    9a:15:36:3e:c2:85:ee:f4:c1:a0:84:ae:47:4f:07:
                    5f:27:86:f8:90:5d:87:b0:53:07:98:72:83:e6:ec:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:D3:83:E2:C3:E2:B7:34:BA:4F:0D:21:D7:8D:2F:6F:9F:AB:0E
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:64:29:e4:f0:84:59:75:9f:ef:aa:5e:c2:c1:45:37:c9:
         25:d1:35:0e:71:a2:e5:20:e7:b2:97:05:c5:9a:68:d1:8b:f7:
         2c:dd:2c:ad:a2:46:73:ac:52:35:d4:7c:09:61:fb:bd:e2:2d:
         f8:02:26:08:c9:2a:08:8f:4d:59:e8:b7:21:6d:df:21:a0:54:
         14:4d:48:f2:30:91:15:2f:01:59:1f:d1:df:f3:25:7c:36:f4:
         d0:13:9a:39:d2:5b:4d:ff:4e:dc:8a:ab:2c:88:f7:96:20:5a:
         b6:e8:32:51:e7:39:9e:d0:6d:83:cd:cc:0e:1c:0d:f2:83:aa:
         88:00:a3:3c:7d:61:71:d1:7c:86:2f:89:71:a7:55:b6:b2:c7:
         cb:a1:bd:cc:a5:11:74:14:c7:8d:12:5a:1c:7e:e6:d1:c8:40:
         1f:8f:89:dc:ef:d7:7c:40:25:ae:72:45:28:78:15:25:d2:e1:
         99:67:d9:97:f2:7f:9e:f9:f1:57:e0:8d:88:39:4f:1b:9e:2c:
         22:3d:e6:8e:1f:25:67:d4:fb:1f:42:70:7c:1d:f3:73:73:9d:
         a5:78:69:b9:46:05:b8:fb:68:d9:97:8a:d0:6b:35:3e:5f:8c:
         bc:73:52:62:32:db:f4:12:aa:a5:32:b3:65:d8:de:ac:37:3c:
         67:09:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:00 2025 by rpki-client on console-fra.rpki-client.org