Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          easDHs0g2N7tpWwX8Ady8b9hqCf9NiAnfqGnnWbefUs=
Subject key identifier:   0A:EE:7F:DF:FF:DB:32:47:CD:E4:59:D1:2C:17:21:5B:E9:09:6A:98
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       019355088DB3D46BC730D8322739F269281D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          0DBE
Signing time:             Fri 22 Nov 2024 18:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:44 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: JxdYlTXc/hsxAookel3nBltzSofvx8JKmUil+pGCI/Q=)
                          2: A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa (hash: 0+/3pHZMw0x8iQLxvECxzJJcUrsJdaEuKv6JgtjQUds=)
                          3: cdCrb0vfVZpyP4FNBu0T4PvJFSo.roa (hash: nlUDi3TS6ikCwsHmMaCRI4qsH0A9e5Q5uzQBKTaeVc4=)
                          4: wQBAZKiXfAq_q_jpfHmZjtTn55A.roa (hash: dYtF6fRIhEGo8P9NvnzqkjfHpLNqaBR943xpr8PpkEo=)
                          5: xfHfb7X1cZlm-ppZC1Q8zPQ2pMw.roa (hash: ryV+w4kAG9q4wgVSjGuq2V/jKLzDyXQ2028P/KR5a0o=)
                          6: xy2CE0c1yGLOrKbccUUymohABpg.roa (hash: ase6xehlUpBB4VXyEx/vXmj1NTV5t89ZQ91CJ2Gg7Zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:8d:b3:d4:6b:c7:30:d8:32:27:39:f2:69:28:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Nov 22 18:00:44 2024 GMT
            Not After : Nov 23 18:00:44 2024 GMT
        Subject: CN=0aee7fdfffdb3247cde459d12c17215be9096a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:af:11:3f:fb:8d:99:45:a6:91:3e:c9:2b:
                    05:d9:63:b3:0b:a4:be:86:2a:52:3e:d1:47:58:07:
                    1c:4d:af:e4:4e:3a:8b:35:06:98:9a:1f:fd:9d:4e:
                    91:c3:7e:c7:06:34:0e:bc:2f:24:32:7e:30:29:24:
                    90:c4:9f:76:ee:0d:39:4e:f8:c8:61:e7:a3:c5:b9:
                    7d:2b:c2:44:c3:50:95:19:fc:6b:37:47:4f:ae:ff:
                    43:3a:cf:cf:9c:f8:7e:b7:94:c3:a3:69:bc:79:69:
                    d6:a0:e5:e5:43:f5:5e:e4:8c:5f:ba:20:d1:a9:26:
                    93:e6:90:b9:ed:72:de:9e:55:ff:50:40:fd:c3:52:
                    9e:e1:fd:c3:f9:b2:a2:46:09:d8:54:ec:88:34:8a:
                    4d:45:42:9e:ef:18:e7:4b:40:42:48:0c:2a:d1:91:
                    a7:8a:de:8c:1a:0a:56:82:a7:5c:40:74:76:09:53:
                    a9:55:32:89:e0:88:24:bc:fa:52:a7:33:e5:94:3e:
                    1b:17:b9:5f:00:73:f0:c2:3f:a1:86:58:0f:7b:aa:
                    a8:89:cb:67:71:ae:75:b2:d0:39:bd:96:0e:a5:b5:
                    b2:9e:80:f7:61:c9:1f:65:0d:3c:8a:82:86:1f:a7:
                    ca:a4:c7:01:c6:9e:77:c9:69:80:00:a6:e2:56:01:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:7F:DF:FF:DB:32:47:CD:E4:59:D1:2C:17:21:5B:E9:09:6A:98
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b3:45:80:6c:61:5d:7a:df:8b:88:40:9d:05:d1:2e:67:2c:
         0c:18:b6:3d:ca:1f:98:c2:96:cf:13:ac:5d:52:ab:ab:17:97:
         42:48:e1:1a:f1:5c:d5:7d:3b:61:17:52:be:0f:81:41:27:e6:
         99:1c:61:8a:40:cd:8a:4b:49:0f:b7:c1:30:ab:a0:a6:43:8c:
         ff:ba:1f:d8:9a:99:98:e5:cb:b8:dc:52:1c:be:ee:2b:7a:57:
         f7:82:54:96:a2:af:60:b0:a9:fd:14:52:89:54:71:94:2c:28:
         e7:a5:3e:e8:73:ce:8c:fc:63:00:28:99:45:5f:62:13:57:bb:
         9d:86:5b:9f:a6:79:b7:3c:3e:40:b0:18:15:10:3c:b1:43:5d:
         24:31:14:2e:b4:32:b0:2b:1d:0a:e2:54:42:98:f3:b8:d3:e1:
         a1:e4:f5:4a:a8:d5:ab:0d:97:52:f5:cd:36:92:00:9d:67:05:
         db:81:a7:94:f4:4a:51:85:53:aa:b8:69:b5:f2:59:6e:37:ab:
         80:b9:bb:d6:c1:8f:1c:5e:d8:50:7f:04:5a:58:4e:10:58:79:
         e0:2c:09:c8:fa:b0:77:1d:03:5d:6c:b3:fe:10:08:1b:52:0a:
         69:d8:44:53:a9:33:00:5d:83:d1:85:a3:b0:db:d9:d5:04:51:
         63:6a:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:20 2024 by rpki-client on console-ams.rpki-client.org