Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File:                     m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier:          Cs8RzWHZe8en3E1ECuG94Uaorxs4CvIc6I4yOqXm9+A=
Subject key identifier:   6D:D1:16:21:23:B7:26:FE:A6:79:0E:29:98:44:4C:06:6D:A1:B4:D4
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer:       /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial:       019041F75FFD0F2E4E480BAB1AACF686A98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number:          7F
Signing time:             Sat 22 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:49 +0000
Files and hashes:         1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: ooVde93P3pRPO7tC39hawnzjxwbJlqh5JM/RBlja/EA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:5f:fd:0f:2e:4e:48:0b:ab:1a:ac:f6:86:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
        Validity
            Not Before: Jun 22 22:00:49 2024 GMT
            Not After : Jun 23 22:00:49 2024 GMT
        Subject: CN=6dd1162123b726fea6790e2998444c066da1b4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:0f:57:5a:2f:4f:3a:0b:99:4c:31:1c:23:
                    65:3a:af:de:ca:87:f5:a5:5c:c9:be:51:2f:17:6f:
                    6e:43:2c:12:5a:ea:58:02:df:be:d0:dc:91:0d:59:
                    a7:49:f1:ec:40:55:b7:4c:0a:16:6c:ef:d0:84:47:
                    71:0c:f0:62:44:d2:ad:71:af:d5:3f:07:f6:f7:be:
                    b5:9a:cb:bc:ff:7d:f0:d6:86:9d:1d:1d:d2:80:2c:
                    cd:75:c4:1f:7f:2d:82:06:fd:26:70:03:3c:b3:0e:
                    89:3e:e5:0c:32:13:17:ac:65:b9:4e:0a:39:43:38:
                    af:db:e7:61:37:11:b7:1a:ba:db:3c:5b:61:0e:59:
                    30:0f:92:cd:bf:22:94:03:8a:1b:fe:2e:69:7e:12:
                    c1:ce:7e:78:29:cd:ef:f8:b6:32:e9:6b:7c:9c:08:
                    e5:c2:f0:88:ad:4d:d5:bf:4c:2f:88:0b:17:69:ab:
                    77:db:6a:1c:1e:65:79:ff:8c:1b:63:b0:ee:5d:73:
                    2f:24:25:cf:31:43:3e:38:14:f7:7f:89:77:f6:67:
                    ca:40:51:bb:14:89:11:23:1e:aa:c5:fa:79:5b:9f:
                    ef:aa:03:81:e3:c2:95:e4:9b:3d:b9:85:3a:36:2f:
                    d6:59:3e:3d:72:f6:ec:62:15:25:fb:22:6e:64:b4:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:16:21:23:B7:26:FE:A6:79:0E:29:98:44:4C:06:6D:A1:B4:D4
            X509v3 Authority Key Identifier:
                keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ad:36:a3:6f:60:c9:b6:f5:37:88:62:5b:19:a3:e7:22:ec:
         c2:96:e0:64:3f:2a:ce:d1:24:c4:60:94:5c:4b:3c:44:3a:61:
         f3:b4:dc:c3:01:c6:7b:97:48:98:f6:09:8b:18:8b:aa:3b:d6:
         e3:65:92:73:ed:a4:15:c0:0c:91:bd:8d:89:9b:55:85:44:ae:
         8e:8e:d1:1e:18:74:5c:5e:5b:28:22:51:97:3c:9f:89:4e:69:
         99:d2:e0:fb:2f:cb:ff:94:6b:37:aa:d8:86:e9:01:61:ba:0c:
         6b:99:54:10:a3:37:38:36:4d:b7:45:0e:70:aa:91:fb:36:5b:
         20:d7:04:0e:01:ae:64:b9:72:41:f8:b2:23:f5:3e:14:ef:f0:
         47:50:09:61:cd:13:54:08:31:6e:3d:f3:7f:08:99:f4:a9:3e:
         2f:13:06:7c:c8:f7:c0:fb:a2:76:d8:f4:5d:22:c8:a6:b8:33:
         bc:e6:2a:78:5f:e5:31:6e:d9:53:ba:b2:64:61:c4:58:35:13:
         0e:25:1d:36:21:d1:27:e0:f9:e2:f5:f1:d1:23:3f:33:b2:ca:
         d5:a7:e2:80:45:9d:3e:44:f9:8b:46:c0:43:18:ad:62:0d:e6:
         a0:e7:87:90:e2:df:74:28:37:fb:5c:9e:49:50:74:2a:1b:04:
         a7:39:12:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBB91/9Dy5OSAurGqz2hqmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDFlYWFkMGQ3ZTQ2NzI2Yjg3MDgzOTE0YzI0YTEyN2Uw
NTlkZDQwHhcNMjQwNjIyMjIwMDQ5WhcNMjQwNjIzMjIwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZGQxMTYyMTIzYjcyNmZlYTY3OTBlMjk5ODQ0NGMwNjZkYTFiNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr0PV1ovTzoLmUwxHCNlOq/eyof1
pVzJvlEvF29uQywSWupYAt++0NyRDVmnSfHsQFW3TAoWbO/QhEdxDPBiRNKtca/V
Pwf29761msu8/33w1oadHR3SgCzNdcQffy2CBv0mcAM8sw6JPuUMMhMXrGW5Tgo5
Qziv2+dhNxG3GrrbPFthDlkwD5LNvyKUA4ob/i5pfhLBzn54Kc3v+LYy6Wt8nAjl
wvCIrU3Vv0wviAsXaat322ocHmV5/4wbY7DuXXMvJCXPMUM+OBT3f4l39mfKQFG7
FIkRIx6qxfp5W5/vqgOB48KV5Js9uYU6Ni/WWT49cvbsYhUl+yJuZLRPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3RFiEjtyb+pnkOKZhETAZtobTUMB8GA1UdIwQY
MBaAFJvR6q0NfkZya4cIORTCShJ+BZ3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjct
ZWYwNzk0NTMxYTI4LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjctZWYwNzk0NTMxYTI4
LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy602o29g
ybb1N4hiWxmj5yLswpbgZD8qztEkxGCUXEs8RDph87TcwwHGe5dImPYJixiLqjvW
42WSc+2kFcAMkb2NiZtVhUSujo7RHhh0XF5bKCJRlzyfiU5pmdLg+y/L/5RrN6rY
hukBYboMa5lUEKM3ODZNt0UOcKqR+zZbINcEDgGuZLlyQfiyI/U+FO/wR1AJYc0T
VAgxbj3zfwiZ9Kk+LxMGfMj3wPuidtj0XSLIprgzvOYqeF/lMW7ZU7qyZGHEWDUT
DiUdNiHRJ+D54vXx0SM/M7LK1afigEWdPkT5i0bAQxitYg3moOeHkOLfdCg3+1ye
SVB0KhsEpzkSng==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:44:40 2024 by rpki-client on console-fra.rpki-client.org