Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          Kwn+R6ldsrcon444ZLh01yWxQXdrBgPrhb24Xmb34M8=
Subject key identifier:   1D:91:19:C8:D4:D4:6B:4D:38:EC:99:86:D8:F7:90:54:D1:5B:A3:20
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       0193549B6E38B797B292DC1E9175FAF142EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          0DE5
Signing time:             Fri 22 Nov 2024 16:01:32 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:32 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:32 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: WaL1LRBjDYOvKEz9G618rhbcXnXjO8KQtRvCHjok/go=)
                          2: Y8UJtzdfNmJluJ7KtN5PBJ5x2JQ.roa (hash: 4Qm13AZulQYY3mIDfBcC+diO1cYJF8GGxFnamdf7Hco=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:6e:38:b7:97:b2:92:dc:1e:91:75:fa:f1:42:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Nov 22 16:01:32 2024 GMT
            Not After : Nov 23 16:01:32 2024 GMT
        Subject: CN=1d9119c8d4d46b4d38ec9986d8f79054d15ba320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:81:40:08:04:15:8c:96:a9:c7:76:13:8a:
                    26:4d:5d:fa:ed:02:e5:0d:22:58:bf:b7:b7:91:c0:
                    58:ee:6d:e3:5a:6c:0a:c5:0e:4b:18:36:68:95:8a:
                    82:30:c1:21:4e:40:96:7e:b6:ae:74:7b:ff:db:a2:
                    5e:bb:d2:2d:73:fc:53:5b:19:fe:57:c2:93:1d:76:
                    30:9e:ed:f5:13:32:3d:01:15:2c:f1:fb:cc:1d:7d:
                    52:eb:f8:e2:c5:30:40:46:80:90:4f:df:f3:4a:83:
                    5b:d9:18:d8:cf:1a:d5:84:fd:f8:87:8b:e9:20:68:
                    7e:f2:11:88:0e:03:e9:d8:c6:e7:b2:03:5d:1f:5f:
                    d2:b1:e8:fe:1c:9f:18:e2:44:0d:db:db:55:7f:5e:
                    a0:86:fe:7c:6b:e1:bf:6e:e4:e7:e6:ad:ed:d9:8c:
                    69:b9:9b:23:a7:63:af:90:84:26:41:27:ff:49:73:
                    0f:4e:3d:41:1f:9a:5f:8d:99:86:dc:46:29:85:5c:
                    5d:d4:89:48:ea:0d:e9:a2:7b:c6:06:09:56:15:f7:
                    07:57:fa:de:8d:b9:be:bc:d8:b2:d9:4d:45:a6:8e:
                    d7:6b:e0:b2:51:88:98:30:3f:c4:85:e4:8a:41:f9:
                    17:dc:13:77:27:9b:4c:3a:2a:02:d8:79:7b:6c:e8:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:19:C8:D4:D4:6B:4D:38:EC:99:86:D8:F7:90:54:D1:5B:A3:20
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:81:16:49:58:7e:30:bd:ed:9a:9b:3e:ae:20:7d:36:36:
         e4:8f:13:80:7e:0c:fa:1e:43:72:81:56:77:92:cb:37:17:c8:
         2c:01:a7:e5:f7:1b:17:de:9c:6d:42:23:f1:10:42:5d:08:9e:
         b1:cb:fa:51:01:09:7a:15:50:a5:47:93:04:4c:3f:10:52:00:
         87:78:8d:12:2e:82:cd:4b:de:74:be:f6:b6:6d:55:81:ff:9e:
         d5:66:61:cc:b9:33:f3:94:c3:74:d5:49:eb:9a:f5:4b:10:6d:
         b5:d2:86:d9:39:33:6c:e0:30:7c:77:a5:f2:18:86:fc:47:22:
         c5:21:52:9b:df:1b:0f:10:77:86:fb:38:d1:c5:5e:da:4d:b8:
         56:6e:2f:7a:7a:94:6a:dc:85:83:8e:c4:72:d9:9c:48:34:f7:
         98:2e:89:5a:ec:88:52:b5:02:4e:05:07:bb:8e:52:5a:78:4d:
         c6:66:35:6a:8a:18:01:03:8f:c4:ca:33:76:f0:33:8c:7d:8c:
         53:43:96:fb:fb:ab:a7:da:9d:37:07:d6:a9:08:c2:f8:62:2a:
         3c:de:ab:0a:86:25:f4:8f:21:fa:6b:22:92:5c:00:a0:55:8e:
         83:09:b4:6c:4e:da:9a:77:2c:ed:b8:6d:83:40:2a:27:21:b2:
         6c:35:a2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm244t5eyktwekXX68ULqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDE4Nzk4NGZhYWVmZjhmYTFkMGQ0OGFlZDdjMGNmZDgw
MGRlMzQwHhcNMjQxMTIyMTYwMTMyWhcNMjQxMTIzMTYwMTMyWjAzMTEwLwYDVQQD
EygxZDkxMTljOGQ0ZDQ2YjRkMzhlYzk5ODZkOGY3OTA1NGQxNWJhMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOaBQAgEFYyWqcd2E4omTV367QLl
DSJYv7e3kcBY7m3jWmwKxQ5LGDZolYqCMMEhTkCWfraudHv/26Jeu9Itc/xTWxn+
V8KTHXYwnu31EzI9ARUs8fvMHX1S6/jixTBARoCQT9/zSoNb2RjYzxrVhP34h4vp
IGh+8hGIDgPp2MbnsgNdH1/Ssej+HJ8Y4kQN29tVf16ghv58a+G/buTn5q3t2Yxp
uZsjp2OvkIQmQSf/SXMPTj1BH5pfjZmG3EYphVxd1IlI6g3ponvGBglWFfcHV/re
jbm+vNiy2U1Fpo7Xa+CyUYiYMD/EheSKQfkX3BN3J5tMOioC2Hl7bOiEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2RGcjU1GtNOOyZhtj3kFTRW6MgMB8GA1UdIwQY
MBaAFOhBh5hPqu/4+h0NSK7XwM/YAN40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYt
ZWEzMDJhZDE4YWQ2LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYtZWEzMDJhZDE4YWQ2
LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcqBFklY
fjC97ZqbPq4gfTY25I8TgH4M+h5DcoFWd5LLNxfILAGn5fcbF96cbUIj8RBCXQie
scv6UQEJehVQpUeTBEw/EFIAh3iNEi6CzUvedL72tm1Vgf+e1WZhzLkz85TDdNVJ
65r1SxBttdKG2TkzbOAwfHel8hiG/EcixSFSm98bDxB3hvs40cVe2k24Vm4venqU
atyFg47EctmcSDT3mC6JWuyIUrUCTgUHu45SWnhNxmY1aooYAQOPxMozdvAzjH2M
U0OW+/urp9qdNwfWqQjC+GIqPN6rCoYl9I8h+msiklwAoFWOgwm0bE7amncs7bht
g0AqJyGybDWiZA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:07 2024 by rpki-client on console-ams.rpki-client.org