Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          ox7d8DY8ZxihyzfJTNooQqISeUiqgk/MTijVgUHhuYY=
Subject key identifier:   9C:FC:FB:60:7C:0D:9A:E7:AD:E9:46:36:14:98:23:3E:8A:A6:A5:66
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       0194BAF22F3F951B38287886C48D9EC87024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          06F3
Signing time:             Fri 31 Jan 2025 06:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:21 +0000
Files and hashes:         1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
                          2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: CNTXZlv3/eqWZV496IEg8kcf3u515DFCbbGDknKBym0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:2f:3f:95:1b:38:28:78:86:c4:8d:9e:c8:70:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Jan 31 06:00:21 2025 GMT
            Not After : Feb  1 06:00:21 2025 GMT
        Subject: CN=9cfcfb607c0d9ae7ade946361498233e8aa6a566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:7f:8e:cf:01:1d:d7:55:13:64:2d:92:50:
                    2e:94:ac:92:3d:1e:5e:6e:aa:74:af:0a:25:34:2a:
                    1f:cd:3d:24:b5:ba:a8:c7:f6:79:0c:3c:35:18:1b:
                    29:ff:0b:55:1d:9e:04:26:8b:fe:1f:ba:3e:59:0b:
                    0b:f4:6a:a7:1c:17:80:4b:e6:7e:ea:22:2b:f6:07:
                    8b:2c:2e:3f:d3:9c:6b:c8:67:e0:0b:dd:49:b8:ce:
                    a7:fd:9f:2d:01:dd:28:b8:ba:0c:a2:45:3d:68:01:
                    cc:2f:ce:1e:9d:53:75:cc:15:86:a6:7d:9b:07:18:
                    c9:7c:16:e2:b4:92:4b:9f:d6:62:42:61:79:ae:85:
                    8d:dd:20:c5:7c:bb:83:a6:ed:52:58:fe:c4:0d:8c:
                    6b:5d:37:73:12:16:78:67:eb:4b:94:b8:25:34:81:
                    63:9b:e0:33:a6:f9:cf:e1:61:95:9b:3a:1a:cc:27:
                    7d:2c:b4:2e:8d:6a:d6:22:ed:f3:d1:5b:f2:c0:c8:
                    6e:26:69:93:78:3b:38:38:44:bb:3c:6a:28:35:e5:
                    64:3b:14:c2:d2:62:22:20:ca:f2:30:22:cb:f4:d1:
                    53:d7:0b:1a:b9:29:3a:10:21:46:a6:6b:47:81:fa:
                    47:60:52:e4:2b:b5:ce:0e:2c:96:61:13:57:b1:c8:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FC:FB:60:7C:0D:9A:E7:AD:E9:46:36:14:98:23:3E:8A:A6:A5:66
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:9d:c2:59:02:54:9d:6a:21:5b:f7:bd:e1:0c:81:91:f6:
         05:d1:2c:f4:d5:45:f1:7d:90:85:a5:98:ca:38:d7:4c:7e:5f:
         77:b7:09:bf:3c:82:b9:6a:60:e4:7f:2c:49:75:1e:f6:c4:25:
         1f:f5:1a:8a:57:3f:c0:02:92:a0:93:0b:a8:fb:23:0f:76:fe:
         ca:42:d2:c3:00:9d:36:eb:7a:23:41:d8:48:7b:c9:3c:c4:67:
         2d:00:52:41:a7:8d:ba:5e:3d:7a:d1:96:94:47:a3:07:6b:47:
         48:15:13:4e:a2:fc:11:0d:45:0c:bd:c7:eb:9e:c4:c5:ce:bf:
         72:4c:ac:65:1f:cf:c2:50:94:fe:f5:be:0b:3c:99:c6:02:bb:
         7d:37:b6:06:a3:c5:fe:62:7b:06:5d:2e:af:27:06:cb:7e:3b:
         f6:13:30:bc:52:90:5e:9c:d6:d4:ca:83:63:b1:b5:97:fa:41:
         fb:fc:af:e8:e8:5f:c4:2d:66:76:7c:dc:66:0b:30:0b:0b:a5:
         5b:39:4c:0e:43:0c:6d:c9:33:68:01:20:fb:80:84:95:a3:b6:
         71:91:3e:5b:9c:e0:7c:d9:22:ac:c9:52:c2:37:27:83:0c:87:
         10:86:38:30:7d:69:7e:f9:9f:46:a1:a2:8c:40:27:95:d0:b3:
         ce:36:a4:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68i8/lRs4KHiGxI2eyHAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx
MTgzZjEwHhcNMjUwMTMxMDYwMDIxWhcNMjUwMjAxMDYwMDIxWjAzMTEwLwYDVQQD
Eyg5Y2ZjZmI2MDdjMGQ5YWU3YWRlOTQ2MzYxNDk4MjMzZThhYTZhNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Z/js8BHddVE2QtklAulKySPR5e
bqp0rwolNCofzT0ktbqox/Z5DDw1GBsp/wtVHZ4EJov+H7o+WQsL9GqnHBeAS+Z+
6iIr9geLLC4/05xryGfgC91JuM6n/Z8tAd0ouLoMokU9aAHML84enVN1zBWGpn2b
BxjJfBbitJJLn9ZiQmF5roWN3SDFfLuDpu1SWP7EDYxrXTdzEhZ4Z+tLlLglNIFj
m+AzpvnP4WGVmzoazCd9LLQujWrWIu3z0VvywMhuJmmTeDs4OES7PGooNeVkOxTC
0mIiIMryMCLL9NFT1wsauSk6ECFGpmtHgfpHYFLkK7XODiyWYRNXsciftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz8+2B8DZrnrelGNhSYIz6KpqVmMB8GA1UdIwQY
MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt
ZmZlMjFlZjk4Njc0LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0
LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbedwlkC
VJ1qIVv3veEMgZH2BdEs9NVF8X2QhaWYyjjXTH5fd7cJvzyCuWpg5H8sSXUe9sQl
H/Uailc/wAKSoJMLqPsjD3b+ykLSwwCdNut6I0HYSHvJPMRnLQBSQaeNul49etGW
lEejB2tHSBUTTqL8EQ1FDL3H657Exc6/ckysZR/PwlCU/vW+CzyZxgK7fTe2BqPF
/mJ7Bl0urycGy3479hMwvFKQXpzW1MqDY7G1l/pB+/yv6OhfxC1mdnzcZgswCwul
WzlMDkMMbckzaAEg+4CElaO2cZE+W5zgfNkirMlSwjcngwyHEIY4MH1pfvmfRqGi
jEAnldCzzjakwQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:39 2025 by rpki-client on console-fra.rpki-client.org