Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File:                     P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier:          qyuGkBIpKpgbLDXqO2hP787shxcVlUC5umF5dXM6jDU=
Subject key identifier:   CB:1F:F7:B1:A2:B6:DC:59:89:30:5F:2E:52:CD:5C:6B:4C:3A:27:1B
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer:       /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial:       01936A467016577EF771EBA2706B855E162C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 21:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:21 +0000
Files and hashes:         1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: wyssS6l6Lrv5vQWCGdbPwQgeT/lp8P0VEfRGFuoBxgA=)
                          2: trtIwqR_7HH-LGNEQN1pN5JwwyI.roa (hash: fA19lTbg+grAMJxOrgwv7mwms3yqYzll2X64WCHKSug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:70:16:57:7e:f7:71:eb:a2:70:6b:85:5e:16:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
        Validity
            Not Before: Nov 26 21:00:21 2024 GMT
            Not After : Nov 27 21:00:21 2024 GMT
        Subject: CN=cb1ff7b1a2b6dc5989305f2e52cd5c6b4c3a271b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:cf:7b:51:fc:b6:0e:f7:94:bf:4b:7a:4c:
                    72:4a:12:40:d3:6c:36:67:5b:d0:cc:1f:fc:22:ad:
                    d2:4a:26:99:36:1e:49:d2:1c:ae:0c:52:44:b3:6c:
                    ef:d2:44:3a:e1:da:46:5c:19:d7:be:b7:e4:6e:84:
                    d3:3d:2b:4e:e6:62:4c:b2:74:b8:af:77:60:22:f6:
                    ce:cb:8e:e0:7d:46:5a:db:10:7d:1a:4b:56:03:37:
                    f0:fa:04:fb:56:89:b8:ad:d2:aa:88:ea:21:a6:7a:
                    b2:f2:32:d9:3c:6e:55:83:20:9e:8f:f2:ed:88:ab:
                    05:1c:49:dc:39:b0:24:80:d0:10:c1:c8:e9:66:2c:
                    43:dc:60:60:8a:95:4d:51:f5:76:bb:79:84:3e:9e:
                    cb:2b:a0:01:a9:79:ab:9a:2d:d7:0e:53:d5:f1:47:
                    db:e2:a8:7e:38:e1:33:1b:11:67:f7:88:c8:aa:d2:
                    87:23:e1:f2:63:66:ff:9e:e7:84:c2:e2:0d:4a:93:
                    01:69:e2:d2:f6:9f:93:67:d2:a6:9f:8c:c0:bd:39:
                    c1:b4:60:52:b9:3c:fc:69:c6:1b:bb:bc:c4:eb:e3:
                    9a:bf:22:13:59:22:ba:18:1e:d0:0f:c7:f9:e3:48:
                    88:a6:b3:bb:91:7b:80:25:4e:b7:a9:f1:a7:30:33:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:F7:B1:A2:B6:DC:59:89:30:5F:2E:52:CD:5C:6B:4C:3A:27:1B
            X509v3 Authority Key Identifier:
                keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:af:5e:7f:2b:15:3f:0e:10:5f:8e:a7:f9:3f:d7:1b:c1:
         a6:93:fc:3d:0c:f8:23:a6:b6:25:05:ae:f4:0a:e2:97:e5:0a:
         67:b4:af:64:37:6f:aa:ff:c9:64:33:8a:04:ab:0e:36:e7:c5:
         3c:34:af:97:ba:17:df:53:64:b0:8a:1a:d0:76:21:7c:fd:d9:
         8e:f7:c9:16:ed:04:20:e2:5c:04:d4:2a:7e:40:4b:1b:ce:3a:
         b2:b9:f6:e4:9e:d3:87:d5:36:80:a7:1d:d5:49:7e:b6:bc:b2:
         74:80:e0:61:5e:eb:bf:12:d2:e2:7c:86:3f:45:d6:f4:8e:3b:
         55:cd:de:9a:58:46:3a:07:f9:c3:49:1a:85:3b:fc:b6:29:ee:
         c7:fd:95:30:53:e5:67:03:55:53:d8:7d:97:44:79:88:db:ba:
         8d:13:bd:7e:29:ff:95:d5:57:5a:7d:29:fa:7d:4b:47:d8:10:
         81:77:86:2a:0b:64:08:d1:99:e2:8e:66:0e:e0:d0:60:45:53:
         91:18:d0:e5:77:6e:1d:4d:26:f1:4a:7d:6e:da:7c:a9:37:b4:
         f9:c2:55:e5:de:f8:4f:a6:b0:5c:c0:3f:e3:dd:87:27:83:0d:
         87:8f:0e:a1:d7:f9:ec:75:34:51:98:25:82:3f:fc:15:10:88:
         22:6e:57:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRnAWV373ceuicGuFXhYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTQwZmNmYTgzNmJiMGI1YjNlMTI5NDA0Y2IzMWU4NTI1
MGIwMWYwHhcNMjQxMTI2MjEwMDIxWhcNMjQxMTI3MjEwMDIxWjAzMTEwLwYDVQQD
EyhjYjFmZjdiMWEyYjZkYzU5ODkzMDVmMmU1MmNkNWM2YjRjM2EyNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo/Pe1H8tg73lL9LekxyShJA02w2
Z1vQzB/8Iq3SSiaZNh5J0hyuDFJEs2zv0kQ64dpGXBnXvrfkboTTPStO5mJMsnS4
r3dgIvbOy47gfUZa2xB9GktWAzfw+gT7Vom4rdKqiOohpnqy8jLZPG5VgyCej/Lt
iKsFHEncObAkgNAQwcjpZixD3GBgipVNUfV2u3mEPp7LK6ABqXmrmi3XDlPV8Ufb
4qh+OOEzGxFn94jIqtKHI+HyY2b/nueEwuINSpMBaeLS9p+TZ9Kmn4zAvTnBtGBS
uTz8acYbu7zE6+OavyITWSK6GB7QD8f540iIprO7kXuAJU63qfGnMDOIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsf97GittxZiTBfLlLNXGtMOicbMB8GA1UdIwQY
MBaAFD+kD8+oNrsLWz4SlATLMehSULAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYt
MDcyNDA4OTI4OWJiLzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYtMDcyNDA4OTI4OWJi
LzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+qvXn8r
FT8OEF+Op/k/1xvBppP8PQz4I6a2JQWu9Aril+UKZ7SvZDdvqv/JZDOKBKsONufF
PDSvl7oX31NksIoa0HYhfP3ZjvfJFu0EIOJcBNQqfkBLG846srn25J7Th9U2gKcd
1Ul+tryydIDgYV7rvxLS4nyGP0XW9I47Vc3emlhGOgf5w0kahTv8tinux/2VMFPl
ZwNVU9h9l0R5iNu6jRO9fin/ldVXWn0p+n1LR9gQgXeGKgtkCNGZ4o5mDuDQYEVT
kRjQ5XduHU0m8Up9btp8qTe0+cJV5d74T6awXMA/492HJ4MNh48Oodf57HU0UZgl
gj/8FRCIIm5X5A==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:17 2024 by rpki-client on console-fra.rpki-client.org