Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          RHRgQXRzUzelt/Yt0zAvXzOhOOsszymjbPLH1S/1ZSo=
Subject key identifier:   B4:2F:F5:E1:65:4F:3C:F1:BA:5D:FB:88:20:46:76:1E:85:2C:01:DE
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       019356F6B0AC94283CC82FCBED4211FBFE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          0B91
Signing time:             Sat 23 Nov 2024 03:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:27 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: 7ThiwmCMxoSFtK38+eb0gfPd0gmjJegiZxSBgr5/kCo=)
                          2: NXUzMIfktJlUta1muNKTOw8yUJM.roa (hash: au10gckVqONb8nYLodKX/5nLmpWjt3lijGEJ9K4rXgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b0:ac:94:28:3c:c8:2f:cb:ed:42:11:fb:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Nov 23 03:00:27 2024 GMT
            Not After : Nov 24 03:00:27 2024 GMT
        Subject: CN=b42ff5e1654f3cf1ba5dfb882046761e852c01de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:b0:5d:1a:39:3b:77:10:91:b5:7c:5f:4e:
                    d3:e1:82:f7:4a:d1:38:7a:cd:a8:b5:d1:6e:16:27:
                    6b:0d:59:3c:d6:19:92:52:04:be:ce:88:e7:60:fd:
                    fa:71:e7:48:90:84:10:19:3a:82:05:45:ac:15:56:
                    de:b2:d0:48:6e:03:94:84:66:27:08:ef:08:f6:07:
                    55:19:97:8a:66:51:29:f1:f3:19:30:10:10:6f:54:
                    a0:01:aa:3c:56:5e:0a:4a:5a:62:de:dc:a2:31:5a:
                    ca:cb:6f:27:0b:0b:95:29:5c:1d:fc:3b:20:18:53:
                    52:8a:26:4e:72:91:7c:b7:23:94:1d:8e:27:22:29:
                    d0:26:91:25:14:76:e4:ce:cd:05:fb:1f:6a:16:e5:
                    9e:3d:d4:6c:0a:5a:fa:fb:e1:7c:0b:97:1a:ba:74:
                    f1:a7:84:6b:ca:2c:4b:32:c8:93:05:a6:30:cc:ae:
                    3f:98:ca:94:28:46:e1:4c:49:d1:17:8f:e9:10:d5:
                    9e:64:f0:3c:68:06:25:ab:1a:2a:f7:5b:82:fb:e0:
                    83:f6:d5:20:bb:b5:9b:db:75:94:fe:e4:ca:1d:92:
                    2a:39:96:f1:f9:f2:f9:5d:14:eb:e2:58:97:8e:7d:
                    90:f4:11:59:ac:bf:ad:f4:e7:e4:f7:2b:de:cb:67:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:F5:E1:65:4F:3C:F1:BA:5D:FB:88:20:46:76:1E:85:2C:01:DE
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:ba:0f:68:fc:92:8c:5e:65:01:a3:a4:be:1e:40:c3:b1:
         4e:31:b0:e1:f9:c5:2e:e6:20:5d:ee:a4:e9:48:71:62:b9:07:
         df:ab:8b:7e:d2:1c:7a:e9:a7:d7:47:5c:00:54:64:63:34:47:
         c1:ed:6f:9b:6e:14:6c:15:bc:d8:0b:9f:a4:0d:0c:69:53:d9:
         13:c5:e5:96:68:d5:fa:83:bd:28:c3:eb:c4:59:bd:35:82:de:
         30:08:72:97:90:3c:93:8b:6d:95:30:ba:83:51:50:bf:60:b3:
         e1:73:ef:65:7f:69:13:e3:9d:b4:c7:99:81:6c:9d:8b:4e:a9:
         a6:93:4e:1a:99:6a:b1:61:e2:3d:c1:7c:c0:18:dd:e1:c7:09:
         63:17:92:8d:60:ab:d0:23:00:3e:59:b5:cd:f2:bc:a0:30:f7:
         df:e1:a5:e9:e1:b9:0b:c3:82:fb:c6:3f:2c:d5:fb:c0:0b:74:
         36:72:35:79:f3:6a:d8:9e:51:1f:e3:c0:7b:4c:3f:85:bb:1e:
         ee:12:17:f6:70:62:1d:eb:90:02:d3:9c:ba:80:ab:cb:71:d8:
         b5:20:ce:84:ca:76:b1:33:1f:95:5e:99:fc:7f:b7:d1:2c:2b:
         40:60:c7:43:ee:b4:2c:52:63:6e:06:03:76:15:6e:c2:76:2c:
         d1:89:54:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rCslCg8yC/L7UIR+/42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5
OGExY2IwHhcNMjQxMTIzMDMwMDI3WhcNMjQxMTI0MDMwMDI3WjAzMTEwLwYDVQQD
EyhiNDJmZjVlMTY1NGYzY2YxYmE1ZGZiODgyMDQ2NzYxZTg1MmMwMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+awXRo5O3cQkbV8X07T4YL3StE4
es2otdFuFidrDVk81hmSUgS+zojnYP36cedIkIQQGTqCBUWsFVbestBIbgOUhGYn
CO8I9gdVGZeKZlEp8fMZMBAQb1SgAao8Vl4KSlpi3tyiMVrKy28nCwuVKVwd/Dsg
GFNSiiZOcpF8tyOUHY4nIinQJpElFHbkzs0F+x9qFuWePdRsClr6++F8C5caunTx
p4RryixLMsiTBaYwzK4/mMqUKEbhTEnRF4/pENWeZPA8aAYlqxoq91uC++CD9tUg
u7Wb23WU/uTKHZIqOZbx+fL5XRTr4liXjn2Q9BFZrL+t9Ofk9yvey2cFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQv9eFlTzzxul37iCBGdh6FLAHeMB8GA1UdIwQY
MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt
M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5
LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9W6D2j8
koxeZQGjpL4eQMOxTjGw4fnFLuYgXe6k6UhxYrkH36uLftIceumn10dcAFRkYzRH
we1vm24UbBW82AufpA0MaVPZE8XllmjV+oO9KMPrxFm9NYLeMAhyl5A8k4ttlTC6
g1FQv2Cz4XPvZX9pE+OdtMeZgWydi06pppNOGplqsWHiPcF8wBjd4ccJYxeSjWCr
0CMAPlm1zfK8oDD33+Gl6eG5C8OC+8Y/LNX7wAt0NnI1efNq2J5RH+PAe0w/hbse
7hIX9nBiHeuQAtOcuoCry3HYtSDOhMp2sTMflV6Z/H+30SwrQGDHQ+60LFJjbgYD
dhVuwnYs0YlUOQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:00 2024 by rpki-client on console-ams.rpki-client.org