Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          +7ylUARc8rXYOTUVBxqa+PNe9LEODBDf2N8xmrS0v+g=
Subject key identifier:   BF:55:DB:58:F5:5D:13:45:33:46:B8:68:3C:61:1F:84:41:1E:6B:95
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       0193520752AE7DC742A0BF95F7884F791A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 04:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:31 +0000
Files and hashes:         1: 45IQt9nv4SpjfbgkCm4DX7ODZWs.roa (hash: sqvE42Vsk8cXIVmy4nlfy8zr/zv9o8hGiGUw1awqqMk=)
                          2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: VFYZeANljyicq1Y526+8YbInLFnh/zicxdH4PF91EJk=)
                          3: 96KEkHYJymhGiHIhi7n0FL6nAcY.roa (hash: ta6w2X61uVMcxfp3E+Az7F7eQ/Ta6ytm2L//Jo3vlTU=)
                          4: BwjXQhIEu2fvqeVa-KoixCZWpmY.roa (hash: 6Xg79+A/O3zrbemfrI9j7COtJgOoaXKoaU8CyFjLJWo=)
                          5: Cj8PEaZC7DZrL6wVENgMWQ3wRp8.roa (hash: VWfgk2cb/ch9MMwXby49ufQNDB828fFMklAT4o+AM8Y=)
                          6: GAbRPZdVtbnpNK8h7nC6-u551hY.roa (hash: audy+GgvZLwVwkvRfEVJx7bFrj3m4fs9ZaYISixB/q8=)
                          7: Js_ZCpI62fW6OCCGbgI42AQD63A.roa (hash: y1QtIlCFgvFDRAKbl39ccWmnyp1D08bd/RLyotLjbgk=)
                          8: LWD1_vBHNT078UnSp0X3qAilt3I.roa (hash: J0soT0h0xBK+oLR9yVctan+wVix7w7NVtfttQfvAcTo=)
                          9: aHbcmc6uBg89uq9OyjD5yOd8bh8.roa (hash: UPmExfz5vrxi5Gcz7Tz8jTcEfBXLwj2ETUMznzRZu8Y=)
                          10: byFLsbUH0YsWUNcHl7h6CJu6RFU.roa (hash: 4jzd2pENsQtsROJRVfutClNHNhLU04InHwbx/T36RuE=)
                          11: eD9KOBh6WJpzy2UGZhjWqbKZgnY.roa (hash: FY6Q9bwWqxHzpxkPC637XhwCXB1ndMnstCgqHGzLhzg=)
                          12: g9E5BpKyj3l9HUC5D9cd6mb5TYI.roa (hash: GnbHntPQdV0Vb8cDc7Y6Xm6yF7UNQAsjnfM7jck5qgE=)
                          13: lPuxstygnDX5Ql06feou0LQiiwQ.roa (hash: qDdEpb63IXKuRcD1bubaHgwiWpmh5FDhuHQUcLz5yWE=)
                          14: lrEtdaQrj9RhQ3O4ft3ZBjkkLbM.roa (hash: 3aXF7TBjAG7ertlZ3PZBWbXQLdldhKiut1XKkT3qXiw=)
                          15: odWaLqj87wsP_coOILX8yHC35rE.roa (hash: WxP9WAzhETvgP3magMKv8nPjZlK1F2BfVjWIlwuvJUU=)
                          16: vOMo9qyOWJKDYVr6dhwZgtMiyq0.roa (hash: oEQYpGI6HRlYNN9qBzEAy5XD/J+i7I9nMFBBwv31MtM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:52:ae:7d:c7:42:a0:bf:95:f7:88:4f:79:1a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Nov 22 04:00:31 2024 GMT
            Not After : Nov 23 04:00:31 2024 GMT
        Subject: CN=bf55db58f55d13453346b8683c611f84411e6b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:d4:72:dd:7f:9f:03:93:25:59:29:ea:20:
                    bc:dc:c4:22:03:95:33:e6:13:18:0f:0b:9d:4f:f6:
                    f6:a2:70:41:d3:9c:cc:89:41:78:30:81:80:37:9e:
                    d7:71:de:91:9a:8b:be:f7:f8:69:bf:95:ea:68:29:
                    61:cd:be:bb:d1:57:10:b8:4b:54:6e:be:ea:18:41:
                    9b:21:b3:ce:1e:8f:44:e2:fc:63:b1:f4:0a:44:ab:
                    13:ed:42:89:eb:ed:8f:b6:31:61:21:52:17:43:6e:
                    94:30:e6:3c:85:50:02:e4:1f:4f:46:88:e5:d0:e7:
                    1b:fe:14:44:39:b2:44:b0:7e:a4:7d:41:e9:5f:18:
                    a3:fb:b8:e9:b0:fc:f6:dd:9c:d7:e2:d7:82:a2:72:
                    7b:1e:c7:2b:c5:be:4b:8a:33:c1:c3:31:c3:5f:d5:
                    d7:99:b1:5a:8e:7d:3b:80:d6:e0:ac:37:56:66:29:
                    9e:b3:c7:09:28:2d:9e:c7:4d:f5:db:d3:96:06:ab:
                    f0:75:84:4f:92:4c:a5:3b:d6:0e:ee:f5:5a:62:2f:
                    28:1b:fd:f2:09:20:0d:80:1a:8a:d8:7d:59:a6:44:
                    e2:e7:c5:a5:86:df:60:0c:93:2d:89:1e:94:d7:93:
                    75:b5:50:c7:46:4c:ca:41:b8:da:5d:38:b5:3d:16:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:55:DB:58:F5:5D:13:45:33:46:B8:68:3C:61:1F:84:41:1E:6B:95
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:a2:92:80:b9:3a:0c:f3:a3:43:26:39:e0:bc:ea:8a:65:
         62:ed:5c:be:a5:b2:c1:3e:f0:9e:3a:a3:91:36:be:e7:28:91:
         83:e3:37:8e:ad:ea:ca:25:51:9f:9e:af:88:b3:bb:13:48:4a:
         5e:da:5f:c7:a6:a4:39:b5:42:32:5a:c5:78:54:d6:6f:15:90:
         83:1f:26:73:cc:a6:c9:85:dd:39:8c:7a:43:ae:50:2a:5d:99:
         23:5f:2c:59:85:37:93:bf:16:f0:63:85:76:0e:af:21:53:8b:
         a5:c5:b5:74:08:3e:e0:90:af:eb:aa:49:ac:8a:d1:4c:4a:4e:
         16:79:d1:39:e0:f7:f0:21:cc:bf:c4:64:e7:54:09:e2:9a:61:
         da:db:1b:a2:ee:f0:a8:0b:e1:fa:d2:a6:31:e8:9e:52:c9:10:
         76:40:bb:d2:5b:3a:ca:62:c1:cc:ca:d1:5a:d8:97:ef:0e:4f:
         7c:21:34:f9:d7:c5:f3:08:27:2e:e1:a3:4e:01:2d:09:be:b4:
         64:e0:bf:2f:63:39:b2:49:38:ff:7a:1e:fc:08:0a:19:e3:70:
         63:fc:40:a2:da:87:75:2d:c0:43:11:bc:2c:f2:46:18:ae:f7:
         35:76:04:d9:a1:61:99:a6:a4:a8:64:95:1d:fe:a6:17:30:3c:
         85:fb:cc:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB1KufcdCoL+V94hPeRo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjQxMTIyMDQwMDMxWhcNMjQxMTIzMDQwMDMxWjAzMTEwLwYDVQQD
EyhiZjU1ZGI1OGY1NWQxMzQ1MzM0NmI4NjgzYzYxMWY4NDQxMWU2Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXUct1/nwOTJVkp6iC83MQiA5Uz
5hMYDwudT/b2onBB05zMiUF4MIGAN57Xcd6Rmou+9/hpv5XqaClhzb670VcQuEtU
br7qGEGbIbPOHo9E4vxjsfQKRKsT7UKJ6+2PtjFhIVIXQ26UMOY8hVAC5B9PRojl
0Ocb/hREObJEsH6kfUHpXxij+7jpsPz23ZzX4teConJ7Hscrxb5LijPBwzHDX9XX
mbFajn07gNbgrDdWZimes8cJKC2ex03129OWBqvwdYRPkkylO9YO7vVaYi8oG/3y
CSANgBqK2H1ZpkTi58Wlht9gDJMtiR6U15N1tVDHRkzKQbjaXTi1PRZckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9V21j1XRNFM0a4aDxhH4RBHmuVMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8aikoC5
Ogzzo0MmOeC86oplYu1cvqWywT7wnjqjkTa+5yiRg+M3jq3qyiVRn56viLO7E0hK
Xtpfx6akObVCMlrFeFTWbxWQgx8mc8ymyYXdOYx6Q65QKl2ZI18sWYU3k78W8GOF
dg6vIVOLpcW1dAg+4JCv66pJrIrRTEpOFnnROeD38CHMv8Rk51QJ4pph2tsbou7w
qAvh+tKmMeieUskQdkC70ls6ymLBzMrRWtiX7w5PfCE0+dfF8wgnLuGjTgEtCb60
ZOC/L2M5skk4/3oe/AgKGeNwY/xAotqHdS3AQxG8LPJGGK73NXYE2aFhmaakqGSV
Hf6mFzA8hfvMPA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:50 2024 by rpki-client on console-fra.rpki-client.org