Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          fQwt8HwXOK7fGd2mBtrIsrx7X5TyE4W2KPs15kCFwv4=
Subject key identifier:   5A:EC:EF:87:AB:F8:56:85:B1:F3:E1:12:D0:9B:B3:6A:C6:70:09:83
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       01901CA1A768D9AE9364923354DF8E613435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 16:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:14 +0000
Files and hashes:         1: 8cUBNmosKNwSESOMqk4TGHsM4WI.roa (hash: b6YsZciffhtEXiR20xF11TavRx0x05Ye1wifdADOfpE=)
                          2: JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa (hash: cV6raQ+lqWJ2zuWqmq3bL4K1p1kt1zZFxeNFNGsxvJ8=)
                          3: WopWO5Q1e4T34Azz4Qtnqs7pMSg.roa (hash: bsQSTjGwPEQ4zd9yG4mOvqARd0vU/BLZH4C2BG/ZaUk=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: 18duOHsxRZ/DXI0y4FuOriE9TZ5kv+gPbio8tI3whoE=)
                          5: bOF3pLP6zcSfAeHWNwGQ7rT8jrU.roa (hash: 40nszCitwbjs72LDOpPtaiRFi26EjPTQCnnRRCPlrl4=)
                          6: pArtkAZCHrgWZcrBKNIoPWNa_LQ.roa (hash: qxgrQ3z1vcqTGCZffrwux1wZjUvishxEAtEFzrEW1Mk=)
                          7: xGTB59bWIq2FOsizUgIzb73X3lc.roa (hash: 2DvGaThSAv/jTZnfY012DIi160OYW0ZL7D66E+e1tDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:a7:68:d9:ae:93:64:92:33:54:df:8e:61:34:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jun 15 16:01:14 2024 GMT
            Not After : Jun 16 16:01:14 2024 GMT
        Subject: CN=5aecef87abf85685b1f3e112d09bb36ac6700983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:38:29:b4:1d:26:6b:1d:dd:e9:d8:c8:cd:
                    ea:d3:d0:01:0e:77:b9:58:70:6c:d5:b7:de:4d:02:
                    fc:dc:62:5f:09:6f:d8:32:9e:ec:e4:f3:b3:ca:31:
                    1c:7f:58:38:e3:d0:7b:cb:cf:22:af:4a:38:89:7e:
                    90:6c:4e:ef:8d:21:2e:4e:d4:6a:a6:6f:6d:48:41:
                    0a:25:33:ba:3b:52:ae:a4:db:bd:b3:ec:53:af:43:
                    b9:39:aa:43:60:aa:45:76:69:41:58:8a:e0:1d:30:
                    0c:a4:4d:ee:bb:d6:95:94:79:1f:07:4b:09:fd:60:
                    e9:76:8b:b0:1e:e3:04:a8:16:00:e8:ba:d0:e4:a2:
                    c1:8e:47:cc:65:24:9e:f1:b0:dd:d4:a2:c4:40:9d:
                    be:aa:1a:15:04:3f:8b:fb:a6:51:ff:15:1b:0e:90:
                    b8:b9:dd:00:ce:01:24:c2:f7:2f:64:85:2e:7c:d4:
                    bf:64:d9:54:10:d8:b8:c2:ae:2b:ce:6c:f6:8c:47:
                    d5:ed:2e:93:5b:c3:18:0e:fa:81:2e:a6:e7:ff:d9:
                    e6:63:44:bf:18:d5:47:74:eb:ca:21:6f:50:bd:ea:
                    6b:99:67:36:35:88:bc:94:03:63:c6:1a:c5:79:de:
                    18:86:8a:cd:60:79:c0:44:c5:88:25:2b:55:1e:7c:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:EF:87:AB:F8:56:85:B1:F3:E1:12:D0:9B:B3:6A:C6:70:09:83
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:0c:5f:52:92:74:17:7a:2e:88:5b:fb:e1:ce:7f:dd:65:
         ac:ed:d1:7e:b5:ea:50:6e:01:6c:2e:9d:48:a7:72:e6:aa:07:
         44:3b:1f:6e:cb:4e:87:76:d1:1b:68:27:f1:c6:f4:c7:ac:24:
         54:d0:04:d0:ff:e6:69:8d:9f:7a:c6:3d:db:02:18:94:13:c3:
         70:7b:9b:10:7b:75:49:e7:5e:eb:44:04:3e:f2:30:f2:be:88:
         4e:93:2e:69:43:d5:e9:1f:f9:1e:6d:d1:80:09:d1:43:a3:75:
         80:06:1b:e4:f5:9b:16:a5:af:d9:2e:9d:60:57:b9:13:01:60:
         b3:40:54:6b:17:ee:8a:d5:30:1c:42:43:9e:40:9f:5c:fb:a7:
         26:91:cc:66:d5:49:87:25:f6:24:94:10:82:e3:c9:7d:99:d3:
         b9:6b:7d:2f:06:c4:57:c5:b5:54:f3:db:6e:46:90:ed:11:71:
         21:b4:35:02:f4:24:35:0a:35:2b:fc:f7:2c:49:56:c8:a3:c5:
         41:64:ee:ad:97:cb:ae:97:0c:54:ad:f5:4d:22:3a:5b:05:fc:
         77:22:46:b9:02:e1:4f:8b:51:27:bf:f0:50:06:94:d3:50:a0:
         c5:dc:cf:eb:24:0e:69:37:94:84:64:3a:7a:56:88:a8:15:97:
         49:1b:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:31:28 2024 by rpki-client on console-ams.rpki-client.org