Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
File:                     6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft (raw, json)
Hash identifier:          3OMMAz6rFqGSHX0Rq+9xXBInrroLnrMijBwhk1h9Z+M=
Subject key identifier:   EE:F0:8B:CF:6B:4B:80:21:98:2E:2E:5B:15:CE:F5:26:94:C9:32:26
Authority key identifier: E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
Certificate issuer:       /CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Certificate serial:       0194BAF21D36914E1A6CE5A88734206892CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 06:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:16 +0000
Files and hashes:         1: 6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl (hash: dnGHIQYJDx0vEOPTiQTd0Urgp5LiNJ1EEB3fudjkKIA=)
                          2: _h_mzD48e8HDzNg5k5LS-QfIKhM.roa (hash: KkcKm266SCOSV6exw0wmCCx2tpiEDOiM8+ZTmV+6A4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:1d:36:91:4e:1a:6c:e5:a8:87:34:20:68:92:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
        Validity
            Not Before: Jan 31 06:00:16 2025 GMT
            Not After : Feb  1 06:00:16 2025 GMT
        Subject: CN=eef08bcf6b4b8021982e2e5b15cef52694c93226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:de:7c:06:48:b1:76:35:44:cb:6c:59:2d:
                    5e:ec:c0:fe:4a:08:18:b9:d1:8f:3d:ed:cb:26:88:
                    da:2b:37:03:de:b0:1e:2d:3b:0a:ca:49:04:7a:02:
                    71:67:c7:9d:7b:7e:62:95:70:70:9e:f7:4a:be:fc:
                    4d:c3:b4:54:e3:af:29:ed:13:cd:ed:ff:82:b0:9f:
                    4a:63:13:a6:8b:21:65:4b:41:3d:70:ef:b0:52:3d:
                    38:bb:8f:6c:89:d4:03:6a:fe:dd:bc:1b:6f:6d:00:
                    48:d3:05:d7:6d:21:f3:f0:36:6c:d4:62:cc:21:f6:
                    54:82:0e:4d:3d:95:58:56:f2:71:62:17:a3:f6:be:
                    3f:30:8d:29:2e:ab:3f:a1:01:ae:5f:c3:d5:80:e1:
                    65:a4:9f:31:47:a0:e2:44:ff:02:e6:ff:44:cd:30:
                    7c:0a:71:d4:ce:35:4a:91:83:1f:c7:cd:aa:6f:be:
                    ae:8d:90:ca:82:4a:0c:12:1a:c0:cd:ea:37:c0:c7:
                    55:af:78:67:82:5b:b6:6a:c8:be:a7:82:c2:d2:d3:
                    41:f3:2b:89:be:d3:38:44:37:90:0f:97:2f:26:ab:
                    0a:31:94:a0:b8:cf:c1:e7:19:3e:d0:32:99:99:77:
                    ad:19:41:ab:d4:c8:97:1c:16:52:02:12:7c:52:b3:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:8B:CF:6B:4B:80:21:98:2E:2E:5B:15:CE:F5:26:94:C9:32:26
            X509v3 Authority Key Identifier:
                keyid:E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:f2:c2:57:3a:ad:49:d9:7a:83:bc:f6:d6:e9:c9:e7:98:
         cb:04:11:ab:cb:61:ee:fe:e6:9e:6d:22:fe:be:62:da:83:75:
         1b:4f:f4:d3:ec:96:35:fe:7e:c5:d3:21:ca:81:b4:49:dc:4c:
         6c:c0:e1:87:8c:50:9f:03:ab:a3:e8:8e:5c:18:da:6b:6d:46:
         ad:9f:5d:30:11:11:75:9f:bb:5f:c4:2c:04:f8:53:f1:82:56:
         d2:62:78:f8:90:55:95:5d:e4:2b:ff:f1:c2:34:c2:2b:4a:68:
         c0:21:2a:9d:50:2d:d2:41:77:9e:72:18:54:46:ea:0e:76:aa:
         00:b4:41:9d:60:b2:52:68:1b:b7:88:00:5e:54:b5:33:ad:93:
         cb:46:0a:a1:82:79:dd:43:11:42:70:aa:37:d2:4e:9e:8e:ae:
         06:8f:7e:49:60:45:f3:67:b0:08:53:28:79:76:f9:e1:46:7f:
         de:a5:7c:2b:bc:8f:89:59:4d:f1:40:a0:d6:df:4d:ca:f5:e4:
         fa:7e:5d:5d:10:56:4d:8a:38:b9:dd:57:80:60:59:f7:4d:fd:
         72:75:4d:64:e2:70:61:5a:e7:4e:df:cf:9c:82:c5:0b:61:6d:
         f5:19:3b:ed:97:3c:32:d5:44:65:23:b1:ed:ba:eb:9b:5d:71:
         d1:7d:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:54 2025 by rpki-client on console-fra.rpki-client.org