Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File:                     6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier:          Wu5agjZRvGS/GUxEWMk2xcbKUnMABKifmx2sig9BvKY=
Subject key identifier:   1C:86:ED:17:3A:95:22:6D:7E:67:CE:C5:78:02:C9:F4:0E:32:83:67
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer:       /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial:       0194BABB6AA93D126ADDA0F4C62F6D322095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 05:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:32 +0000
Files and hashes:         1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: emDR1y3pvd5ubj46r7Bxs7rJrS7Lwp0OBNxT89anGtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:6a:a9:3d:12:6a:dd:a0:f4:c6:2f:6d:32:20:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
        Validity
            Not Before: Jan 31 05:00:32 2025 GMT
            Not After : Feb  1 05:00:32 2025 GMT
        Subject: CN=1c86ed173a95226d7e67cec57802c9f40e328367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:df:33:bd:bf:7f:49:48:ad:26:76:30:ee:
                    14:cb:e3:6e:79:7b:85:1f:c1:66:1c:c6:eb:66:f5:
                    98:59:bf:7d:a0:04:ce:85:bc:88:5d:1a:36:d9:80:
                    5c:ff:e9:17:f0:bb:a1:7d:5d:d2:44:63:d2:05:39:
                    c1:56:ac:1b:4a:45:8b:89:c3:7f:c1:df:c9:7f:a8:
                    21:ed:c1:05:d1:32:25:98:8e:57:e6:85:21:13:ce:
                    da:12:c9:43:cb:56:66:2f:8a:1b:bf:d7:ce:7e:b4:
                    6b:5b:39:7c:59:e6:6e:c7:f0:e0:17:07:98:17:b5:
                    9a:ad:aa:32:10:cf:5a:4f:45:13:78:1b:cb:62:4d:
                    72:cb:64:4f:b9:91:9d:c5:6f:2b:7c:d2:82:14:cc:
                    88:d4:af:b2:07:9f:40:a7:f4:cd:36:59:0b:72:f4:
                    5f:4a:23:4a:11:e4:48:da:99:e5:6e:d4:17:79:6e:
                    97:87:f1:38:f3:bc:4e:bb:01:f4:32:a4:33:ec:ac:
                    d6:71:13:b8:59:6e:52:dd:95:94:d9:36:68:23:85:
                    2a:33:31:c5:b8:43:25:5a:c4:41:25:d3:68:fb:e9:
                    70:84:35:fa:38:c2:1d:e5:54:6d:84:ba:75:da:3d:
                    ad:b6:09:82:1e:d1:5a:a0:38:6d:1e:fd:3e:ef:26:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:86:ED:17:3A:95:22:6D:7E:67:CE:C5:78:02:C9:F4:0E:32:83:67
            X509v3 Authority Key Identifier:
                keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:60:12:60:0f:c5:59:c8:c7:bf:78:a4:c1:50:8a:bd:cf:
         27:f1:16:7a:f9:89:dc:51:a0:5f:43:38:63:6a:20:1e:7c:e8:
         0e:60:16:e2:58:3c:3d:76:b7:70:ae:2f:0d:99:d0:45:e4:fd:
         e9:03:96:a8:a1:c5:37:21:c2:b8:cd:6a:d8:c6:cd:b4:5d:6a:
         ec:7c:9e:74:95:26:c7:d7:dd:54:03:94:59:eb:d8:5f:7a:fa:
         b7:2d:bd:65:bf:9e:b0:26:82:be:8b:45:8d:26:96:c9:9c:d0:
         52:8e:9f:5a:78:ec:50:7d:9a:b3:2a:ac:1d:3d:b2:56:fa:10:
         72:00:6f:17:d3:f5:4a:da:c1:01:18:55:34:ee:90:f8:80:18:
         0a:5b:ca:11:46:e8:c7:05:9c:38:b8:ae:6b:2e:cf:7b:b0:fa:
         50:f6:0e:75:ce:61:8b:67:fe:6d:43:2e:84:93:06:10:9c:f0:
         28:0a:7e:d4:05:55:25:27:12:a3:30:b2:4e:d6:07:86:72:77:
         0a:7b:d7:7c:cb:9f:74:4d:3e:3e:18:50:c0:65:90:ac:18:7f:
         37:05:96:31:99:a6:79:58:56:1a:60:3f:c1:b1:ae:32:36:ee:
         be:4a:44:68:a3:fa:52:76:6a:25:93:7c:f8:e5:e2:a7:12:3c:
         44:5d:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:57 2025 by rpki-client on console-fra.rpki-client.org