Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          fcPuolTvqB5h2zYnrQpz6kdcAK7WUG5YL+IauAjPjEM=
Subject key identifier:   49:C4:BC:27:68:56:17:78:11:8F:F3:79:8A:ED:4F:AC:BB:80:A7:84
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       01901E90395E4D7C1BDB6B64FD56FA192FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          11D9
Signing time:             Sun 16 Jun 2024 01:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:26 +0000
Files and hashes:         1: 1-Po6XIJm_QWihg4vEG_CqNvU92U.roa (hash: 7B7wGpVxttRIFEDT2NOExj9G5jjP0m01nLIFY+/f308=)
                          2: 44_CYiRYI2lQ3UbvPmPWdwL5kyg.roa (hash: bn7Oh3qAZ1KcLo2g6nutb3s75+yP2S4gRskYXsEhWcw=)
                          3: 61VlCk-Vz2JmwNmlTjV0tKwkJaQ.roa (hash: Tcvrdc7rHYowh7js121tHE39+TZIAhAOXTxh3daMRak=)
                          4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: Fo/KsS3ABdEQWqok70GsaUCFSC+kABwWve+6VnwXxsI=)
                          5: 9IlULI2kwU3pfAa2saeXeUPXk-Y.roa (hash: qiu6vpj3527B+xAxM6in8xvzY7lFy/4HQdLZOt1D0t0=)
                          6: Fq9UYbok09LpN5ou1TNQPJgDicU.roa (hash: A6gadyDiX5+jMGfC7djLws+UJHWa70wqRLWbWtbI/DA=)
                          7: IxgmJijszzL0pVYkFc2u4HLqoA4.roa (hash: puZd6d94O/ocxVX671QXVpie/4zq5lpHVCTisZcbsXM=)
                          8: PTHY3FnSNKL1qGShlQcnArSa6Vw.roa (hash: 22MCtIjTOoVjb+/8ROR7rUF3WXBTnYqIsuSyg3TfbOE=)
                          9: ZlcgNBDs3X-nrWq5JRZwNZrxDJs.roa (hash: mZGLVSMgkg1WSDf/EazAgkOhlbpg5TRMGoF12tKxC2w=)
                          10: _jo1neDOPgBw16JKs3w734c_EQs.roa (hash: QSUqebleAkzzx2IVDYfX2CFKHz6w8bMFKnVWq2lSjoE=)
                          11: bjVVxOfPu4iqFSQ-BYDk-_JwwvA.roa (hash: e7vI8pm9nse9he1enJrWSoe9gs8uXlbPAcTUa/EkHGA=)
                          12: h08WqFQXghLHx2y1uCXP6PwJKx4.roa (hash: jhN/yNwxHhhIogMoXe/kPC8GSqZR3XWw6y18x8dIATE=)
                          13: mPRYdtyLk-KOdptUX2-fkEzxkJM.roa (hash: 01HgMc41TW81cnQ3pXQwm3+r0lhZpx/6lUoJpmR7ud0=)
                          14: pTrcpQZFE3h-VmEdpWPLU4bad5o.roa (hash: Jk2viaI+01Do2IkryDaDW5C4dSDzJPApuo+MJd50x6E=)
                          15: r6CpOc4SoQ-62QLjAdHrCHsLLoo.roa (hash: 2wyVP0ccxdW0URA2e94AfPJwMVPiFO5e8c1Xa0cwYRg=)
                          16: tdyqThyHZ9UfUI7RfxAkjPjCpP0.roa (hash: 33lwhvj8NXSTiyEUhblemoQldOmJVCGannC26ZWMw6w=)
                          17: xg-0vuEzXVuzdiuzwktHQrOJlhc.roa (hash: UnYr7lD0GNxJhvhS7k6elo5bcXBq3WKgu5KoJxG2aU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:39:5e:4d:7c:1b:db:6b:64:fd:56:fa:19:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jun 16 01:01:26 2024 GMT
            Not After : Jun 17 01:01:26 2024 GMT
        Subject: CN=49c4bc2768561778118ff3798aed4facbb80a784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:22:43:f9:09:ad:92:29:ff:14:15:a5:76:
                    92:d1:42:0d:95:48:27:df:3d:2c:d7:40:7e:ad:cd:
                    65:a9:69:db:7d:94:6b:73:b5:03:2e:1f:10:87:b0:
                    b7:4a:f6:1b:a5:f0:70:9d:67:00:4e:5e:1b:6b:e1:
                    56:67:fa:99:6a:5f:32:80:4c:d2:34:ef:de:02:02:
                    ac:1a:a7:ae:fa:2e:2e:43:50:d9:e5:3b:2c:7a:ad:
                    bf:0a:19:23:2c:65:7c:ae:90:aa:17:67:80:ca:3b:
                    7e:08:ff:eb:4d:86:f2:6c:00:c3:eb:cc:1a:03:d6:
                    93:1a:da:8b:08:f4:99:59:a0:b2:c2:93:f1:a3:20:
                    2f:58:22:63:2b:ce:03:3a:52:b3:f4:5e:31:b1:e4:
                    67:49:ab:60:c1:f1:fb:15:e2:99:8c:9e:b0:69:07:
                    5b:ae:ab:dc:2e:30:a0:13:56:2a:db:d5:5e:47:9a:
                    e4:c9:4f:e4:4f:a5:88:01:88:e2:c4:02:a5:14:eb:
                    14:e0:df:0d:d4:fd:4d:92:45:6c:b4:e4:b0:cf:8b:
                    5a:76:25:c0:c3:9b:2b:42:ff:01:47:4d:61:32:68:
                    47:71:23:18:9b:97:82:03:33:a0:fc:f9:84:9c:80:
                    37:6f:f2:79:85:cf:31:75:72:ef:d7:09:86:32:b1:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:BC:27:68:56:17:78:11:8F:F3:79:8A:ED:4F:AC:BB:80:A7:84
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:0d:43:f2:1a:70:17:bd:59:d2:ae:54:1e:70:93:f5:98:
         24:f0:79:72:e1:72:df:7f:3a:99:fa:99:49:2f:6a:32:15:89:
         75:7a:d3:4d:e5:2a:27:27:f4:00:d8:9d:98:0d:f4:d0:e4:39:
         9a:cd:ed:28:a1:4b:8a:7b:bc:6f:0d:f2:a8:13:f7:69:d4:f4:
         3b:d9:11:ce:6c:44:9e:25:4f:37:23:b5:40:e6:05:9e:4e:80:
         ab:a8:57:53:81:34:d6:41:16:c6:f6:b1:64:36:d5:f9:3d:be:
         62:44:51:e9:dd:c3:67:18:1e:07:b5:36:fd:79:96:83:1b:f0:
         d6:a2:b3:43:23:c9:7c:8a:8a:2c:f2:89:85:db:6d:53:60:3a:
         e0:cf:bf:a8:f5:c4:50:4b:9d:b1:88:a1:bf:e4:cc:a7:d7:1b:
         89:31:55:dd:2a:eb:af:46:b2:04:ed:05:4c:c3:da:00:43:db:
         b3:75:e9:d9:e3:1c:38:0b:2a:0e:2f:09:8e:2e:a2:95:be:71:
         c9:03:c5:ee:71:f0:09:1d:7c:52:b4:27:56:ca:73:9b:ab:f6:
         82:45:41:66:a8:48:1f:73:ba:77:5e:68:13:87:fa:6c:de:00:
         ca:02:d0:28:79:2f:df:ff:1a:ad:bc:be:8c:4e:3e:1e:1f:cd:
         b5:45:51:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekDleTXwb22tk/Vb6GS+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjQwNjE2MDEwMTI2WhcNMjQwNjE3MDEwMTI2WjAzMTEwLwYDVQQD
Eyg0OWM0YmMyNzY4NTYxNzc4MTE4ZmYzNzk4YWVkNGZhY2JiODBhNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwiQ/kJrZIp/xQVpXaS0UINlUgn
3z0s10B+rc1lqWnbfZRrc7UDLh8Qh7C3SvYbpfBwnWcATl4ba+FWZ/qZal8ygEzS
NO/eAgKsGqeu+i4uQ1DZ5Tsseq2/ChkjLGV8rpCqF2eAyjt+CP/rTYbybADD68wa
A9aTGtqLCPSZWaCywpPxoyAvWCJjK84DOlKz9F4xseRnSatgwfH7FeKZjJ6waQdb
rqvcLjCgE1Yq29VeR5rkyU/kT6WIAYjixAKlFOsU4N8N1P1NkkVstOSwz4tadiXA
w5srQv8BR01hMmhHcSMYm5eCAzOg/PmEnIA3b/J5hc8xdXLv1wmGMrEhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnEvCdoVhd4EY/zeYrtT6y7gKeEMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWsNQ/Ia
cBe9WdKuVB5wk/WYJPB5cuFy3386mfqZSS9qMhWJdXrTTeUqJyf0ANidmA300OQ5
ms3tKKFLinu8bw3yqBP3adT0O9kRzmxEniVPNyO1QOYFnk6Aq6hXU4E01kEWxvax
ZDbV+T2+YkRR6d3DZxgeB7U2/XmWgxvw1qKzQyPJfIqKLPKJhdttU2A64M+/qPXE
UEudsYihv+TMp9cbiTFV3Srrr0ayBO0FTMPaAEPbs3Xp2eMcOAsqDi8Jji6ilb5x
yQPF7nHwCR18UrQnVspzm6v2gkVBZqhIH3O6d15oE4f6bN4AygLQKHkv3/8arby+
jE4+Hh/NtUVR0w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:33 2024 by rpki-client on console-ams.rpki-client.org