Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
File:                     s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json)
Hash identifier:          DgIDJwkRMicfSrq5v2rUKVcGNayg8Uv5UDob+kpWfs8=
Subject key identifier:   9D:58:5F:32:BD:87:94:7B:75:DB:F4:24:82:06:71:56:B5:B6:EC:A5
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Certificate issuer:       /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial:       01901D7CDE8531580868778CB39BFD994924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
Manifest number:          11D4
Signing time:             Sat 15 Jun 2024 20:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:40 +0000
Files and hashes:         1: 1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa (hash: nEbeoF/yoY3jvmxeIbw39Q0G57SQQ7egaIsnOj5XR8w=)
                          2: 3R-lm5lhuiPbeCwLqsFM9qeTCTM.roa (hash: E1LyXkRAmF3nDR8bBXxYJB7oiojghx6Yhx/2QRC8pXU=)
                          3: BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa (hash: OQITac9AherGb72sUGcK8Cs2Z8KQFS7mmKbQfWEJd04=)
                          4: PbkJxqA5PmNFabqTw1fKGFVkjV0.roa (hash: mDjtZOTD8H5hXGsyS+GZVD0fycZ0nmfA1pzJGIv3NDE=)
                          5: PhsDfVgJ05TgrB6k6mu5W8_N2sE.roa (hash: u+zxxe+PxRzw33Mn85UddaUXLK2cPj4E/cvYptSUOBk=)
                          6: QdHm7On3zoGKrTv3CU4gY5CT5VU.roa (hash: InPHpksy4nUT4Nu+mpJO4rs7QCEoVmiu6cReok/9aNc=)
                          7: TR7Lfe9EIldCywvzm10EkRJwmBg.roa (hash: vx+d21f2ENm4TogU8IhlCECITu67YSg5fHdHLXGFAo4=)
                          8: UoA72pGEBpbhKyRmV5SX18ctcVs.roa (hash: m9zr0+RVKcPRIg+rWIHpkfFG95gevfP36Ptu3FNSTnM=)
                          9: V6cR19X84nxLG7BpHxSvQUosV98.roa (hash: 9EcE69J6jodQ2yyXbKBeUrLPhsNHz/c19W39iLokXJI=)
                          10: Zp3KAal3f6WKmETAbcxlobAMEdY.roa (hash: QGJGC0rr7QvcZjqcd5D0ZOqM8urbipuq5WJFGFMjMH8=)
                          11: d7E4iyie1l75_Naeqjb8ufmcPc0.roa (hash: ubzg9pOBWpUGlN5MjZvWpnhkC0mO3ymuJ5OSt+ll3/o=)
                          12: jDMNkLbwU_r5bJFRwIsnJdTDAEg.roa (hash: vB6tP6FoX9/9v0Lwpiz67K6uHA0agYCMcD88mPQcMmA=)
                          13: mlPY7JS-letkF0iIiKCI6QtG_0Q.roa (hash: 3p/5VBIGN+vR53WtRYMk0Ni+YzJ6xx2dmKEitWK1Nfk=)
                          14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: S+Z6O6Ss48vygzUzqnw4wd5q7TmxeTcwAQXGjsUdQU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:de:85:31:58:08:68:77:8c:b3:9b:fd:99:49:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
        Validity
            Not Before: Jun 15 20:00:40 2024 GMT
            Not After : Jun 16 20:00:40 2024 GMT
        Subject: CN=9d585f32bd87947b75dbf42482067156b5b6eca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:30:e7:a2:72:50:27:2e:78:d6:e5:a4:bb:
                    b0:a9:94:6e:93:ff:7b:02:dc:4e:66:01:b8:27:12:
                    e9:2b:67:d3:ce:52:55:a5:fe:9f:e6:6b:a0:50:9b:
                    6f:2e:3c:f9:ae:db:e9:f5:cf:5b:a3:c5:39:12:33:
                    28:bb:17:b8:a7:b6:57:9e:f0:71:48:b2:43:10:bc:
                    c9:a2:74:1e:b9:f9:b1:11:9b:68:96:3b:ca:05:93:
                    b8:bf:d1:70:d6:00:2b:00:28:e0:e1:10:0c:be:2f:
                    e8:ab:48:97:a1:02:ef:9c:68:96:8a:d0:26:40:a8:
                    be:e1:c9:4c:aa:a7:cb:f8:21:cc:75:3a:08:59:e9:
                    a7:be:fa:4f:03:b8:fa:59:3f:a8:90:fe:7c:47:8e:
                    24:41:91:99:8f:72:c4:45:09:65:41:ed:e8:48:39:
                    84:ec:98:4c:ec:09:99:d5:50:f8:a0:74:24:72:4c:
                    5d:6c:8f:a4:26:45:23:a7:c8:b4:f7:d5:af:40:39:
                    8a:ab:b8:7d:c8:8c:71:3f:34:f4:4d:7b:db:90:50:
                    73:7f:a7:e1:5f:de:d3:a1:4a:ee:67:ed:56:d0:bf:
                    60:95:7c:ee:74:a2:7f:70:b8:37:d9:7b:ad:d9:c3:
                    30:8a:58:67:36:43:70:33:f4:96:f3:2d:a6:93:7e:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:5F:32:BD:87:94:7B:75:DB:F4:24:82:06:71:56:B5:B6:EC:A5
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:6f:7b:5c:9a:a4:f8:15:3f:28:22:2a:f3:20:82:fd:54:
         56:1d:b7:e2:c0:2b:c2:d4:f2:5a:fb:e1:04:8d:18:ed:cb:b0:
         eb:78:38:03:20:4c:93:5d:c6:ed:fb:62:4a:ff:a0:f9:95:b3:
         47:5b:70:6e:15:3e:34:40:a7:66:a2:94:dd:02:bf:92:33:4c:
         38:5a:9a:cd:30:dc:f9:82:7f:b0:f4:f8:ea:99:d7:e6:30:ef:
         6c:78:af:92:cb:bf:43:77:b5:83:dd:de:17:53:75:3d:4c:1d:
         53:a9:6c:42:ae:2f:c8:6e:20:c5:05:a4:de:ea:56:2a:18:c5:
         aa:b1:98:de:84:1c:b0:4b:aa:e4:e4:cc:45:92:4d:5b:6d:f9:
         59:7b:77:39:0e:4c:3c:52:c8:9a:2e:a1:0c:ae:5f:12:92:f8:
         4e:12:71:21:a5:23:db:f5:c4:bd:cb:67:43:9b:2e:a4:72:b8:
         50:1e:c8:52:7c:35:5b:14:17:78:ed:12:18:4d:d2:1b:88:b6:
         8e:56:07:db:7e:7c:ad:d5:7d:93:51:55:8e:d9:95:14:a5:c9:
         5c:cd:ef:e5:46:6d:08:84:d2:92:97:c4:46:f5:8e:7e:33:7c:
         4f:d7:ea:c7:90:60:58:f8:66:da:78:0e:1b:01:79:be:8d:8f:
         06:c6:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:54:22 2024 by rpki-client on console-fra.rpki-client.org