Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File:                     qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier:          x5QsJzVBQ/A7KpyL55lLsQpfAQJwWKv9PFS9j8h12dw=
Subject key identifier:   E4:37:43:B1:4F:9F:01:DC:6E:24:28:50:80:2A:05:05:5B:AA:CC:07
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer:       /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial:       01901EC6E7CA5A1DC97A2A637CFE1E3E52E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number:          06EB
Signing time:             Sun 16 Jun 2024 02:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:10 +0000
Files and hashes:         1: V9JEQJdWhtmbVc7Q4MCMRl40LDE.roa (hash: Nln4tY5YLGIT7llhpOgqpH7f8/Nsd5dDFbf87hAdJeU=)
                          2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: yM7ktmW/YXYXIWjB5ztOrDZxpxqe+jb5rPw6JaA/VQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e7:ca:5a:1d:c9:7a:2a:63:7c:fe:1e:3e:52:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
        Validity
            Not Before: Jun 16 02:01:10 2024 GMT
            Not After : Jun 17 02:01:10 2024 GMT
        Subject: CN=e43743b14f9f01dc6e242850802a05055baacc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:13:1b:8f:8b:69:c0:74:44:9a:36:31:b7:
                    75:79:af:1a:e9:51:ff:f9:2c:70:e4:af:d1:2e:e5:
                    ca:da:f8:3f:50:a7:9d:c7:a6:05:76:0d:77:30:d4:
                    4f:bc:35:c7:30:db:fb:60:6a:2b:9b:fb:59:aa:69:
                    cf:00:3c:f8:af:ba:72:73:16:df:ae:0a:fc:8f:c8:
                    2d:b7:07:ea:d3:b9:45:f4:74:bf:58:c9:04:9d:44:
                    bd:3c:b9:35:9f:87:31:66:31:30:f4:bb:21:1a:07:
                    31:11:10:a2:47:bd:0f:db:6d:5c:1c:68:9d:29:b9:
                    51:2c:14:c5:c6:c6:b0:6a:73:9c:19:ef:9d:d4:e8:
                    b7:1f:eb:2a:ed:ac:8f:c5:ba:72:5e:3c:c4:f4:f4:
                    95:61:cb:5d:ac:5a:00:d9:16:68:a0:6b:13:77:6e:
                    8b:9a:60:c9:73:e2:cd:92:ec:26:93:81:b7:23:1a:
                    7c:c9:98:23:26:1e:1a:7f:95:c2:c9:87:17:fa:79:
                    08:e9:17:b3:a8:72:4b:38:a6:db:31:20:4a:0a:01:
                    a2:53:52:0f:5e:53:af:c1:29:75:49:d6:44:df:24:
                    88:0a:a7:d2:af:be:75:cf:b5:8e:c9:b3:52:7d:3d:
                    c2:9f:cd:08:15:45:cb:c9:7d:a9:e5:0d:16:15:ba:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:37:43:B1:4F:9F:01:DC:6E:24:28:50:80:2A:05:05:5B:AA:CC:07
            X509v3 Authority Key Identifier:
                keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:07:ce:9f:38:cc:38:b7:94:29:12:b4:70:8c:8b:40:a7:
         83:88:bc:2e:40:c7:88:42:c3:1b:22:d0:58:89:96:65:8e:4e:
         9b:68:73:27:b8:49:75:83:11:08:79:50:3d:1d:19:bf:ec:1d:
         4d:20:86:45:5d:f1:86:ea:30:d3:8b:c7:c2:4d:fb:a8:1c:83:
         45:e9:5d:18:c8:4f:15:27:c6:c3:25:f1:30:5e:38:00:13:b2:
         df:65:eb:6f:a1:23:a0:61:2a:7f:37:29:50:41:d5:e8:4a:fc:
         13:da:bf:0e:a6:32:a7:46:c8:14:f6:54:0c:d3:f3:ab:6b:61:
         8a:f9:c8:36:b8:6e:52:5a:3f:6d:14:b2:f5:7d:fc:0a:cd:7d:
         2c:de:a2:0c:8a:9e:18:26:30:18:9a:ed:d2:b9:75:07:4c:06:
         5c:7c:c4:75:b8:1f:4e:e8:68:42:ac:d0:6f:05:8c:6c:6d:a8:
         84:fa:80:d0:26:70:81:ec:e7:ea:18:de:2a:a1:2a:81:54:15:
         7c:6d:5f:eb:88:77:45:87:24:03:88:fd:68:5e:1c:a2:28:fb:
         99:46:45:af:51:db:16:45:0a:eb:5c:83:b0:16:ba:0f:85:4c:
         ec:5d:45:9f:9e:33:4c:f3:9c:19:1e:0a:46:97:ec:5d:9f:76:
         48:d9:a0:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexufKWh3JeipjfP4ePlLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2RhODZiNGFmNjBlN2QyOWE1ODdkMDFmY2M5OGI1OTk2
YzQ2ZGEwHhcNMjQwNjE2MDIwMTEwWhcNMjQwNjE3MDIwMTEwWjAzMTEwLwYDVQQD
EyhlNDM3NDNiMTRmOWYwMWRjNmUyNDI4NTA4MDJhMDUwNTViYWFjYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44TG4+LacB0RJo2Mbd1ea8a6VH/
+Sxw5K/RLuXK2vg/UKedx6YFdg13MNRPvDXHMNv7YGorm/tZqmnPADz4r7pycxbf
rgr8j8gttwfq07lF9HS/WMkEnUS9PLk1n4cxZjEw9LshGgcxERCiR70P221cHGid
KblRLBTFxsawanOcGe+d1Oi3H+sq7ayPxbpyXjzE9PSVYctdrFoA2RZooGsTd26L
mmDJc+LNkuwmk4G3Ixp8yZgjJh4af5XCyYcX+nkI6RezqHJLOKbbMSBKCgGiU1IP
XlOvwSl1SdZE3ySICqfSr751z7WOybNSfT3Cn80IFUXLyX2p5Q0WFbrNKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ3Q7FPnwHcbiQoUIAqBQVbqswHMB8GA1UdIwQY
MBaAFKk9qGtK9g59KaWH0B/MmLWZbEbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQyb2EwcjJEbjBwcFlmUUg4eVl0WmxzUnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82OWY2NTUtNjg3OS00MjZmLTliZmIt
M2FlZDRjYzdkNWI4LzEvcVQyb2EwcjJEbjBwcFlmUUg4eVl0WmxzUnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82OWY2NTUtNjg3OS00MjZmLTliZmItM2FlZDRjYzdkNWI4
LzEvcVQyb2EwcjJEbjBwcFlmUUg4eVl0WmxzUnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwkHzp84
zDi3lCkStHCMi0Cng4i8LkDHiELDGyLQWImWZY5Om2hzJ7hJdYMRCHlQPR0Zv+wd
TSCGRV3xhuow04vHwk37qByDReldGMhPFSfGwyXxMF44ABOy32Xrb6EjoGEqfzcp
UEHV6Er8E9q/DqYyp0bIFPZUDNPzq2thivnINrhuUlo/bRSy9X38Cs19LN6iDIqe
GCYwGJrt0rl1B0wGXHzEdbgfTuhoQqzQbwWMbG2ohPqA0CZwgezn6hjeKqEqgVQV
fG1f64h3RYckA4j9aF4coij7mUZFr1HbFkUK61yDsBa6D4VM7F1Fn54zTPOcGR4K
RpfsXZ92SNmg9w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:43 2024 by rpki-client on console-fra.rpki-client.org