Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.mft
File:                     6bLRRuWGYzFv0W0zRrXmI_7o62o.mft (raw, json)
Hash identifier:          iZSgv9+PfYuhrIZnDcUzck/xTzJuknYMFwmqgenZd8s=
Subject key identifier:   90:24:6D:77:B0:36:F5:7B:8B:3B:44:8E:6A:48:23:EF:EC:8D:1D:A0
Authority key identifier: E9:B2:D1:46:E5:86:63:31:6F:D1:6D:33:46:B5:E6:23:FE:E8:EB:6A
Certificate issuer:       /CN=e9b2d146e58663316fd16d3346b5e623fee8eb6a
Certificate serial:       0194BB298872BE3871A2C538A24A47DA4B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bLRRuWGYzFv0W0zRrXmI_7o62o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 07:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:48 +0000
Files and hashes:         1: 6bLRRuWGYzFv0W0zRrXmI_7o62o.crl (hash: cGOIzfcxQAbMyBX3UFEuLVihEPWZ1H4pfOzuznYTUgI=)
                          2: khHultJCFa3nBly7QTF7zo9naB4.roa (hash: /naXDZk2skS2PhGpa7/4jGbmXTrs9w04D97umrofRsw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bLRRuWGYzFv0W0zRrXmI_7o62o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:88:72:be:38:71:a2:c5:38:a2:4a:47:da:4b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b2d146e58663316fd16d3346b5e623fee8eb6a
        Validity
            Not Before: Jan 31 07:00:48 2025 GMT
            Not After : Feb  1 07:00:48 2025 GMT
        Subject: CN=90246d77b036f57b8b3b448e6a4823efec8d1da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:90:05:40:a9:01:3d:7c:93:fe:45:fb:79:
                    56:e1:60:21:fd:86:18:d5:5e:bd:df:94:bb:a8:6d:
                    42:50:2b:db:dd:42:ab:a5:45:68:31:7a:3e:86:aa:
                    88:96:6d:7e:86:65:94:5e:86:b7:33:38:a4:a6:4c:
                    04:0c:1b:41:9e:3f:28:c3:87:c0:8a:47:32:82:0b:
                    c1:23:99:03:97:cf:db:03:35:39:9a:44:2a:56:72:
                    3b:db:cd:f2:c5:de:21:cb:c8:99:aa:c3:52:0f:9c:
                    0f:1f:6e:ac:e1:40:6f:a2:df:bc:52:40:e3:0f:d6:
                    6d:ae:85:d7:5e:61:55:b9:43:4c:66:be:5a:5c:11:
                    55:97:0b:47:fd:62:8a:86:89:a5:9f:79:38:2f:9e:
                    a5:07:46:65:d5:4e:38:94:06:ff:92:0d:db:4b:1f:
                    ce:d4:dd:59:45:25:06:84:2b:f0:75:ab:83:8c:a1:
                    81:97:64:44:cc:bb:48:d9:c2:74:2c:45:5f:09:06:
                    4f:34:06:80:e0:76:fe:42:21:83:7c:9e:b3:7c:a4:
                    19:77:39:6e:73:09:14:8f:5b:a5:4a:16:70:43:52:
                    a3:0d:0b:5e:b7:ef:37:7c:e2:d7:68:fe:98:6e:02:
                    68:7b:e7:d0:23:66:0a:f8:ae:64:93:29:77:db:82:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:24:6D:77:B0:36:F5:7B:8B:3B:44:8E:6A:48:23:EF:EC:8D:1D:A0
            X509v3 Authority Key Identifier:
                keyid:E9:B2:D1:46:E5:86:63:31:6F:D1:6D:33:46:B5:E6:23:FE:E8:EB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bLRRuWGYzFv0W0zRrXmI_7o62o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2f3eda-7c73-4675-8e42-052452ddff33/1/6bLRRuWGYzFv0W0zRrXmI_7o62o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e1:d0:2b:83:68:34:86:24:71:6b:89:a2:b4:b3:cd:54:7f:
         1b:81:b5:72:ef:38:06:e8:42:94:59:59:24:dc:94:7d:3d:0b:
         4f:d5:9e:4e:9f:46:b9:19:2e:5d:af:0a:18:51:0b:85:2f:2b:
         46:96:4e:78:51:d8:5a:a1:e8:14:ac:30:cb:10:e4:97:ce:02:
         55:cd:7c:5b:f6:f8:bf:83:23:b8:86:c6:21:99:09:3e:b7:19:
         36:01:c1:31:54:f7:67:ec:99:53:aa:6c:7d:b0:2d:ba:47:15:
         8e:3c:d9:55:55:c7:f6:85:ae:e0:e7:ed:9e:8c:28:cf:77:1e:
         0a:f3:93:79:92:c3:e6:f5:eb:b4:16:ad:4c:9c:2c:e7:b3:f7:
         65:28:d3:86:7b:bf:a3:d5:2a:14:12:a4:90:0c:6d:92:11:83:
         5e:a2:86:ac:1f:83:3d:9b:0a:6a:e8:2b:cd:16:45:d7:ef:b9:
         f0:1e:d6:be:27:7f:92:16:ef:6b:2f:1d:75:1d:e1:e4:ce:6e:
         2a:df:5e:dc:a5:ea:5c:c6:d1:98:c9:71:53:8f:15:d4:18:b1:
         2e:09:c4:b3:40:79:49:6f:07:a0:20:6c:9b:1f:56:6c:18:7f:
         9e:9f:87:9a:5a:74:9a:d8:71:32:a9:3e:46:32:3b:b0:3e:5a:
         3b:af:fb:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KYhyvjhxosU4okpH2ksuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjJkMTQ2ZTU4NjYzMzE2ZmQxNmQzMzQ2YjVlNjIzZmVl
OGViNmEwHhcNMjUwMTMxMDcwMDQ4WhcNMjUwMjAxMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg5MDI0NmQ3N2IwMzZmNTdiOGIzYjQ0OGU2YTQ4MjNlZmVjOGQxZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu2QBUCpAT18k/5F+3lW4WAh/YYY
1V6935S7qG1CUCvb3UKrpUVoMXo+hqqIlm1+hmWUXoa3MzikpkwEDBtBnj8ow4fA
ikcyggvBI5kDl8/bAzU5mkQqVnI7283yxd4hy8iZqsNSD5wPH26s4UBvot+8UkDj
D9ZtroXXXmFVuUNMZr5aXBFVlwtH/WKKhomln3k4L56lB0Zl1U44lAb/kg3bSx/O
1N1ZRSUGhCvwdauDjKGBl2REzLtI2cJ0LEVfCQZPNAaA4Hb+QiGDfJ6zfKQZdzlu
cwkUj1ulShZwQ1KjDQtet+83fOLXaP6YbgJoe+fQI2YK+K5kkyl324KV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAkbXewNvV7iztEjmpII+/sjR2gMB8GA1UdIwQY
MBaAFOmy0UblhmMxb9FtM0a15iP+6OtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJMUlJ1V0dZekZ2MFcwelJyWG1JXzdvNjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yZjNlZGEtN2M3My00Njc1LThlNDIt
MDUyNDUyZGRmZjMzLzEvNmJMUlJ1V0dZekZ2MFcwelJyWG1JXzdvNjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yZjNlZGEtN2M3My00Njc1LThlNDItMDUyNDUyZGRmZjMz
LzEvNmJMUlJ1V0dZekZ2MFcwelJyWG1JXzdvNjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOHQK4No
NIYkcWuJorSzzVR/G4G1cu84BuhClFlZJNyUfT0LT9WeTp9GuRkuXa8KGFELhS8r
RpZOeFHYWqHoFKwwyxDkl84CVc18W/b4v4MjuIbGIZkJPrcZNgHBMVT3Z+yZU6ps
fbAtukcVjjzZVVXH9oWu4Oftnowoz3ceCvOTeZLD5vXrtBatTJws57P3ZSjThnu/
o9UqFBKkkAxtkhGDXqKGrB+DPZsKaugrzRZF1++58B7Wvid/khbvay8ddR3h5M5u
Kt9e3KXqXMbRmMlxU48V1BixLgnEs0B5SW8HoCBsmx9WbBh/np+Hmlp0mthxMqk+
RjI7sD5aO6/7rA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:32 2025 by rpki-client on console-fra.rpki-client.org