Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File:                     bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier:          rhzNwan+V1tmCRw5c8GYEFFpibotxbpCXW07tZomSNk=
Subject key identifier:   F0:B7:69:99:D7:F3:62:55:CF:8F:59:A8:AE:E3:59:00:54:7B:F5:4F
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer:       /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial:       01901EFD8B84A9C094DA2BBED6B30914AC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 03:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:51 +0000
Files and hashes:         1: U8exogbXmh0pspjX2P2PCr7Jrqg.roa (hash: aLfYvJPLerhyKOI4hRBk9uzzv8WBUTqbZ3grEOEIAwo=)
                          2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: kQnY3bdP26fwBKMeCYT/je8F3pMczyJVFVlpLBPXDqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:8b:84:a9:c0:94:da:2b:be:d6:b3:09:14:ac:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
        Validity
            Not Before: Jun 16 03:00:51 2024 GMT
            Not After : Jun 17 03:00:51 2024 GMT
        Subject: CN=f0b76999d7f36255cf8f59a8aee35900547bf54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:67:3c:16:cc:0c:a2:0a:b6:74:ac:e8:fd:
                    ca:8d:ae:0e:97:aa:74:67:06:26:8d:8e:ac:29:5c:
                    72:9e:3c:9d:00:9e:76:ca:ba:c6:98:6b:b0:2c:47:
                    35:bf:71:31:e1:45:cf:0d:0e:d8:cf:bc:2c:00:61:
                    fb:fd:a2:fa:4b:60:83:e4:bd:d9:38:72:0a:fa:43:
                    38:b6:5d:7a:c5:0d:1c:0a:f9:b0:0a:e2:7e:39:0c:
                    4d:ca:c1:e1:d3:da:ec:ee:65:90:21:65:f1:31:21:
                    94:8c:27:83:94:1b:c7:20:3c:eb:4c:73:6a:b6:ba:
                    b1:4a:de:24:e2:31:7d:50:8f:c2:ca:a6:36:e7:a4:
                    eb:8a:9f:06:33:ac:74:2e:ac:af:e4:9b:29:da:48:
                    d6:9f:4f:a6:5b:c2:fc:c3:ba:fb:ad:86:14:3a:4c:
                    eb:6e:a3:b3:15:c8:d2:c9:e7:44:14:98:39:98:01:
                    af:d1:7c:f4:d1:c2:72:67:34:d0:58:cd:f0:69:2e:
                    13:54:7b:27:36:60:ab:2e:c2:73:c2:24:68:3a:d5:
                    1e:6e:cd:a0:70:36:f8:d8:83:45:74:84:32:f4:5f:
                    d1:c9:7c:42:d4:d5:e6:f2:f4:b4:77:96:8f:13:15:
                    61:86:c1:9f:ca:15:d2:ac:45:41:2e:e6:81:37:e6:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B7:69:99:D7:F3:62:55:CF:8F:59:A8:AE:E3:59:00:54:7B:F5:4F
            X509v3 Authority Key Identifier:
                keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:52:fc:64:98:d9:fc:81:5d:4e:dd:18:00:16:db:0d:b6:
         02:7a:0d:97:38:5a:02:0b:0d:22:03:af:4c:b6:9e:ee:90:8e:
         e1:db:a3:1f:40:71:77:0e:a5:6f:0b:9f:9f:0f:c3:14:cc:19:
         51:47:e0:74:1e:bd:10:a4:d5:0a:9c:fe:8d:39:2a:f0:49:75:
         ba:97:5e:98:2a:c1:a4:7e:8a:8e:8b:f1:b3:c5:c0:b3:48:3d:
         c2:1e:b7:56:61:37:bc:4d:cc:56:ca:74:f6:2b:05:43:82:2f:
         19:5d:d6:65:0e:a3:79:83:92:dc:5a:da:cf:c0:81:ba:eb:6a:
         21:6b:61:47:b5:fc:30:aa:8e:4e:0d:80:ca:a7:54:4b:d5:3b:
         9c:72:f8:27:f4:e3:60:a8:03:b2:e6:27:f3:5b:29:03:91:7f:
         88:51:2f:b4:52:27:92:a1:74:03:00:21:67:43:d6:fe:25:2e:
         a5:05:a8:9a:a0:23:0b:ba:bc:9a:94:50:30:23:19:6a:45:10:
         bc:a1:e8:9d:00:79:9e:a1:90:ca:07:03:56:71:ac:b2:65:a6:
         21:a8:33:8c:00:30:9c:de:8d:cf:53:70:f9:62:c1:b4:b5:c1:
         cf:8f:68:de:3b:27:9a:5f:d6:b1:32:17:a6:c6:8b:01:77:44:
         9d:c9:c8:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/YuEqcCU2iu+1rMJFKx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNjZkNWNiMmY5Y2FkM2Y0ODQzZjcxNGE0ZGM2MmQ3MjEz
ZGViZTgwHhcNMjQwNjE2MDMwMDUxWhcNMjQwNjE3MDMwMDUxWjAzMTEwLwYDVQQD
EyhmMGI3Njk5OWQ3ZjM2MjU1Y2Y4ZjU5YThhZWUzNTkwMDU0N2JmNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yZnPBbMDKIKtnSs6P3Kja4Ol6p0
ZwYmjY6sKVxynjydAJ52yrrGmGuwLEc1v3Ex4UXPDQ7Yz7wsAGH7/aL6S2CD5L3Z
OHIK+kM4tl16xQ0cCvmwCuJ+OQxNysHh09rs7mWQIWXxMSGUjCeDlBvHIDzrTHNq
trqxSt4k4jF9UI/CyqY256Trip8GM6x0Lqyv5Jsp2kjWn0+mW8L8w7r7rYYUOkzr
bqOzFcjSyedEFJg5mAGv0Xz00cJyZzTQWM3waS4TVHsnNmCrLsJzwiRoOtUebs2g
cDb42INFdIQy9F/RyXxC1NXm8vS0d5aPExVhhsGfyhXSrEVBLuaBN+bO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC3aZnX82JVz49ZqK7jWQBUe/VPMB8GA1UdIwQY
MBaAFGxm1csvnK0/SEP3FKTcYtchPevoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEt
NmNmMTMxYzFjYWFjLzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEtNmNmMTMxYzFjYWFj
LzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxRS/GSY
2fyBXU7dGAAW2w22AnoNlzhaAgsNIgOvTLae7pCO4dujH0Bxdw6lbwufnw/DFMwZ
UUfgdB69EKTVCpz+jTkq8El1updemCrBpH6Kjovxs8XAs0g9wh63VmE3vE3MVsp0
9isFQ4IvGV3WZQ6jeYOS3Fraz8CBuutqIWthR7X8MKqOTg2AyqdUS9U7nHL4J/Tj
YKgDsuYn81spA5F/iFEvtFInkqF0AwAhZ0PW/iUupQWomqAjC7q8mpRQMCMZakUQ
vKHonQB5nqGQygcDVnGssmWmIagzjAAwnN6Nz1Nw+WLBtLXBz49o3jsnml/WsTIX
psaLAXdEncnIeA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:30:48 2024 by rpki-client on console-ams.rpki-client.org