Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File:                     DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier:          Uyk/waqZSunO/2ESc0WoQGe0G6s1+7r6Dl8Bas/5azU=
Subject key identifier:   C6:97:1F:DE:C7:9F:14:D5:40:EA:AB:28:B9:C1:DB:EB:FD:D2:F5:4A
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer:       /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial:       01901D0F59FCD107A06455B7BD25DCE911A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 18:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:03 +0000
Files and hashes:         1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: tIMfrB9XME37hQaT9Ejl+aRv75fMxPE3jICZk/U/MEc=)
                          2: N-HpEEVpye8n335HcX1VtISlNLE.roa (hash: afvfGJ6Cnc6Bxa6YnLRT3EMMq6VF66p6jKbm5TdbobE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:59:fc:d1:07:a0:64:55:b7:bd:25:dc:e9:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
        Validity
            Not Before: Jun 15 18:01:03 2024 GMT
            Not After : Jun 16 18:01:03 2024 GMT
        Subject: CN=c6971fdec79f14d540eaab28b9c1dbebfdd2f54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:c4:34:52:fb:02:c1:94:20:df:73:21:92:
                    29:66:63:3d:08:92:26:92:df:80:55:60:40:4b:3a:
                    18:b6:b1:f2:4f:47:e7:15:c6:f4:2a:9e:8e:84:af:
                    d6:aa:68:df:67:01:01:92:61:ec:39:29:05:85:64:
                    6b:04:54:99:d7:eb:7e:ee:15:86:c4:ed:7f:33:bb:
                    a7:bd:87:7c:42:5d:ac:76:57:b0:f7:08:79:b7:9b:
                    ef:2c:d6:91:9a:62:8d:cd:30:89:e0:0f:e5:dd:35:
                    eb:4d:42:cf:15:8c:0b:7d:26:7b:08:b7:20:4e:58:
                    84:59:50:08:2b:b5:dd:cd:03:9c:5f:af:f2:b6:bb:
                    68:84:05:e8:11:d5:68:30:d8:2a:56:bf:87:8f:0d:
                    dc:4e:85:64:ef:f4:13:ed:71:ef:46:61:82:1d:d4:
                    96:92:90:1c:86:d3:46:04:bf:50:6d:4f:ff:e1:87:
                    50:de:46:4d:94:f1:6a:60:b8:ac:eb:92:dc:0c:6c:
                    3a:6b:a6:8d:9c:c8:b1:22:9b:c3:30:40:0d:f0:ff:
                    d7:e3:78:fa:bb:a3:eb:58:e3:d5:82:e5:54:2f:81:
                    64:32:ff:32:55:47:0c:2c:14:5d:a8:04:2b:67:83:
                    1d:bb:e0:96:f8:7e:a3:0a:d0:d8:02:73:e9:c5:dc:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:97:1F:DE:C7:9F:14:D5:40:EA:AB:28:B9:C1:DB:EB:FD:D2:F5:4A
            X509v3 Authority Key Identifier:
                keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:c5:75:08:18:bc:ca:a2:b9:5a:6a:b9:ce:5e:e6:81:8d:
         0d:9a:bc:a8:d8:cd:2c:7d:8b:45:82:9e:09:a4:2a:85:f5:7e:
         c8:55:b2:7d:87:0f:19:9c:e4:f5:2f:86:40:a5:7e:7a:31:49:
         dc:cb:08:56:6b:f2:7c:b1:40:46:8d:9e:74:02:3e:a8:00:3d:
         24:d0:93:1e:55:73:f6:af:50:33:35:58:2c:11:38:84:1b:a1:
         30:9a:46:72:01:ba:51:ba:5a:c5:c5:fe:e7:d0:02:20:a6:0e:
         e4:00:19:44:1b:de:75:5c:0f:b4:55:89:3e:31:3c:e2:db:22:
         a7:24:08:77:3b:63:53:5a:46:14:41:99:4f:a4:cc:e3:4e:a6:
         b0:b8:11:42:c3:a3:54:a7:fc:6e:23:c9:b1:36:5d:10:de:f9:
         72:da:99:19:53:f0:80:34:1f:c1:8c:a1:cf:5a:2f:24:cf:d6:
         0c:a4:4a:79:5d:06:e6:71:9b:dc:21:5f:71:1f:80:e2:0b:56:
         04:e3:fd:09:a5:01:41:ea:b3:0a:70:af:8e:c4:f1:0f:a1:5f:
         94:54:91:3c:91:30:15:2e:2e:9c:b8:c7:0c:ba:42:df:d8:c2:
         8f:d1:35:52:ca:0f:64:53:90:3e:7e:b1:0a:ca:54:c8:67:9f:
         46:fe:22:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD1n80QegZFW3vSXc6RGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjQwNjE1MTgwMTAzWhcNMjQwNjE2MTgwMTAzWjAzMTEwLwYDVQQD
EyhjNjk3MWZkZWM3OWYxNGQ1NDBlYWFiMjhiOWMxZGJlYmZkZDJmNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqijENFL7AsGUIN9zIZIpZmM9CJIm
kt+AVWBASzoYtrHyT0fnFcb0Kp6OhK/WqmjfZwEBkmHsOSkFhWRrBFSZ1+t+7hWG
xO1/M7unvYd8Ql2sdlew9wh5t5vvLNaRmmKNzTCJ4A/l3TXrTULPFYwLfSZ7CLcg
TliEWVAIK7XdzQOcX6/ytrtohAXoEdVoMNgqVr+Hjw3cToVk7/QT7XHvRmGCHdSW
kpAchtNGBL9QbU//4YdQ3kZNlPFqYLis65LcDGw6a6aNnMixIpvDMEAN8P/X43j6
u6PrWOPVguVUL4FkMv8yVUcMLBRdqAQrZ4Mdu+CW+H6jCtDYAnPpxdw4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaXH97HnxTVQOqrKLnB2+v90vVKMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG/FdQgY
vMqiuVpquc5e5oGNDZq8qNjNLH2LRYKeCaQqhfV+yFWyfYcPGZzk9S+GQKV+ejFJ
3MsIVmvyfLFARo2edAI+qAA9JNCTHlVz9q9QMzVYLBE4hBuhMJpGcgG6UbpaxcX+
59ACIKYO5AAZRBvedVwPtFWJPjE84tsipyQIdztjU1pGFEGZT6TM406msLgRQsOj
VKf8biPJsTZdEN75ctqZGVPwgDQfwYyhz1ovJM/WDKRKeV0G5nGb3CFfcR+A4gtW
BOP9CaUBQeqzCnCvjsTxD6FflFSRPJEwFS4unLjHDLpC39jCj9E1UsoPZFOQPn6x
CspUyGefRv4idA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:35 2024 by rpki-client on console-fra.rpki-client.org