Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          dIMoKroyYCGO8Dki3u7Gom0L8WfE219OoO6jjzTl5V8=
Subject key identifier:   10:50:04:03:E0:BE:96:55:16:12:0C:E5:FB:58:11:67:96:70:D1:F7
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       01901DEC31C3308954C775F9E5E39D5B31B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          0B6A
Signing time:             Sat 15 Jun 2024 22:02:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:16 +0000
Files and hashes:         1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: Fv/hNWjJRFyLYjO6sdnBUqjjw/QN5Ho9ZcO3UzMl7lI=)
                          2: b_D16kReGm_BCAFcnaQ7Cou3xe0.roa (hash: O+Nn4dIyYB8h3QIWTX7YCcHWVFrXDMpB7mt38i8SdeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:31:c3:30:89:54:c7:75:f9:e5:e3:9d:5b:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Jun 15 22:02:16 2024 GMT
            Not After : Jun 16 22:02:16 2024 GMT
        Subject: CN=10500403e0be965516120ce5fb5811679670d1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:5a:73:3c:43:f2:98:94:f6:c5:b8:15:92:
                    68:a1:ca:20:7b:bf:2b:5a:f0:18:a8:29:60:92:10:
                    65:24:bc:d0:13:80:a6:f5:7d:32:2b:5b:fd:96:51:
                    fa:70:8b:3e:fb:71:24:b3:ae:61:52:7c:70:11:c1:
                    bc:d7:48:45:b1:e3:8e:0d:b8:b6:c5:5c:c1:fe:e1:
                    38:5b:a7:b9:e1:06:2e:48:21:b9:11:a3:21:d4:42:
                    da:a3:43:46:c6:b3:fe:80:c3:2e:f6:04:08:d9:f0:
                    34:5b:b2:88:1f:58:9b:4d:20:14:2d:65:8b:4a:ed:
                    66:13:07:ec:02:ec:14:d1:67:ec:8b:68:78:88:07:
                    92:5e:d7:f5:c6:e5:28:07:88:5a:f0:2f:40:67:70:
                    d3:22:ad:cc:8e:06:77:d2:c9:7b:cb:93:23:81:4d:
                    d8:fd:e7:82:8e:d7:b8:46:c3:4e:95:7d:eb:7d:24:
                    ee:59:43:cf:5c:7b:f4:6b:80:0a:79:df:77:ac:f1:
                    db:ae:d9:1f:f7:c4:03:2a:61:65:81:0b:61:b5:19:
                    cd:35:b1:70:6f:d5:4b:07:06:6d:d3:5d:e5:83:94:
                    76:d6:78:a2:cd:2c:e3:1b:d0:0d:e9:7b:ef:9f:0d:
                    56:92:86:48:d9:35:56:d1:fd:a0:3b:dc:c2:44:e7:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:04:03:E0:BE:96:55:16:12:0C:E5:FB:58:11:67:96:70:D1:F7
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:0f:e2:64:1d:48:ee:50:36:a1:8b:85:a6:0a:46:d1:b6:
         cc:d6:01:65:e2:61:a9:41:11:0d:d2:fb:93:f9:15:d5:ae:b6:
         30:fa:fe:e0:79:32:f5:91:5a:72:15:dd:bb:83:06:47:f8:14:
         74:e5:d1:d3:96:a8:b3:41:75:bc:f9:2a:12:7f:f4:c4:3a:95:
         03:60:a9:4a:0d:3a:3c:f7:cd:25:7a:70:44:20:e3:eb:a7:1f:
         c6:3f:a5:a9:cd:42:86:82:84:9a:04:e5:85:0c:28:57:8b:fa:
         9e:b5:3a:d8:2e:2c:ce:b3:0b:2c:5a:60:53:16:35:d5:08:73:
         24:30:59:03:06:55:4a:ee:65:54:f7:82:75:2d:d4:1b:a8:a0:
         50:a4:9e:2d:84:59:d5:b6:f0:ae:65:8a:cd:c9:6f:dd:e4:11:
         b4:fd:82:64:cc:c8:97:03:79:bd:8f:08:4d:8a:62:d2:2a:21:
         86:fe:d6:a6:4a:df:db:e6:43:c0:b6:58:5b:e8:fd:11:fb:ef:
         23:98:7f:e8:91:fb:9c:af:68:0a:96:47:c7:19:0e:d8:eb:e7:
         ca:9a:e7:06:32:b1:a4:e4:69:d3:0b:a6:bb:80:0a:1b:a4:9b:
         b1:16:c2:43:0d:0a:69:84:5c:bb:f7:73:27:26:dd:66:0d:00:
         90:71:fc:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7DHDMIlUx3X55eOdWzGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk
ZWEyOGIwHhcNMjQwNjE1MjIwMjE2WhcNMjQwNjE2MjIwMjE2WjAzMTEwLwYDVQQD
EygxMDUwMDQwM2UwYmU5NjU1MTYxMjBjZTVmYjU4MTE2Nzk2NzBkMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqNaczxD8piU9sW4FZJoocoge78r
WvAYqClgkhBlJLzQE4Cm9X0yK1v9llH6cIs++3Eks65hUnxwEcG810hFseOODbi2
xVzB/uE4W6e54QYuSCG5EaMh1ELao0NGxrP+gMMu9gQI2fA0W7KIH1ibTSAULWWL
Su1mEwfsAuwU0Wfsi2h4iAeSXtf1xuUoB4ha8C9AZ3DTIq3MjgZ30sl7y5MjgU3Y
/eeCjte4RsNOlX3rfSTuWUPPXHv0a4AKed93rPHbrtkf98QDKmFlgQthtRnNNbFw
b9VLBwZt013lg5R21niizSzjG9AN6Xvvnw1WkoZI2TVW0f2gO9zCROeXpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBQBAPgvpZVFhIM5ftYEWeWcNH3MB8GA1UdIwQY
MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt
MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk
LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuwP4mQd
SO5QNqGLhaYKRtG2zNYBZeJhqUERDdL7k/kV1a62MPr+4Hky9ZFachXdu4MGR/gU
dOXR05aos0F1vPkqEn/0xDqVA2CpSg06PPfNJXpwRCDj66cfxj+lqc1ChoKEmgTl
hQwoV4v6nrU62C4szrMLLFpgUxY11QhzJDBZAwZVSu5lVPeCdS3UG6igUKSeLYRZ
1bbwrmWKzclv3eQRtP2CZMzIlwN5vY8ITYpi0iohhv7Wpkrf2+ZDwLZYW+j9Efvv
I5h/6JH7nK9oCpZHxxkO2OvnyprnBjKxpORp0wumu4AKG6SbsRbCQw0KaYRcu/dz
JybdZg0AkHH8hQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:46 2024 by rpki-client on console-ams.rpki-client.org