Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          +pEaTE3RU99PqqjsATMETB5YKHiimBJLlcw8PXD7fl4=
Subject key identifier:   CB:D9:DD:7C:58:AF:92:F2:3B:61:0A:5F:30:6A:49:7D:EC:38:F6:45
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       019352AC9B264F6270B74A11EED76C80FFB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          096A
Signing time:             Fri 22 Nov 2024 07:01:03 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:03 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:03 +0000
Files and hashes:         1: IIWZMRQadMlDPwZL6d3Er5pdAfc.roa (hash: 2HzKuOFH5a74FiZlhhrRWAvlkxxJIVz7pGi/qtUBPvE=)
                          2: KcyjHib8NDWZULzjz4aS-MUdXzw.roa (hash: sP2XOOfVPvZQKAp/oCUNicwLqAgxVLg/BZnA3BVdMXs=)
                          3: OTtsv9RR1QsS-5u0qYRGPEYTOOA.roa (hash: PhnUiFOaOB+uXJSKF07I2cO6h54Q9N8ffoHvYQnw6Ws=)
                          4: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: vg+FcJN1gffWD95E2glx1julmiC//pel++3pn3HZ8NM=)
                          5: fBP3u2b2Ou9cS2oKXv_3pFzi2F0.roa (hash: cTtyDE4HreL1Xspr5RuIgt7Mz3FEir+JgXGIbh1Rulw=)
                          6: pXUjXXpdd8z3NNb-ZOEhqMnaf8k.roa (hash: irm2MfG/c3WJimSo/WCUga15kk8imQadma9Ty+FgCcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:9b:26:4f:62:70:b7:4a:11:ee:d7:6c:80:ff:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Nov 22 07:01:03 2024 GMT
            Not After : Nov 23 07:01:03 2024 GMT
        Subject: CN=cbd9dd7c58af92f23b610a5f306a497dec38f645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:c8:04:32:37:8e:61:c2:9f:fa:46:f3:74:
                    d5:d2:e7:b4:9b:e5:75:6e:e4:9f:59:31:93:59:4a:
                    86:b5:73:3f:fa:85:90:ce:c5:8d:51:04:e3:37:49:
                    e4:25:99:c4:44:11:9d:1c:6e:0c:9d:d6:d3:79:a9:
                    19:06:82:0d:7c:00:cd:ca:7d:92:59:48:6c:85:53:
                    b6:e0:39:ec:94:14:57:e3:90:3e:41:ab:33:e4:40:
                    01:63:e8:a5:a9:ae:07:47:6b:51:db:19:0c:0b:6d:
                    65:1b:29:49:0e:c5:9c:36:53:7d:1e:7a:8c:1f:36:
                    d5:22:8f:67:c9:4e:59:1a:e8:4a:6b:f5:06:cb:e0:
                    70:7a:9e:b9:04:c5:dd:89:e9:a2:9d:d5:eb:88:c8:
                    3a:d3:69:f6:60:20:1d:0b:79:47:63:17:2e:ee:a8:
                    5b:bb:92:e6:0d:92:37:a0:ba:a6:b4:55:ba:88:75:
                    2e:cd:34:7c:fd:ac:d1:21:f8:72:7f:f6:f9:95:60:
                    c8:70:96:d5:c2:ea:94:f0:2c:59:f1:7f:17:d6:ad:
                    e1:82:a3:08:03:74:37:4a:95:76:ed:d2:a7:94:d7:
                    db:f8:9e:01:61:95:b9:4c:77:36:51:e0:98:c3:2a:
                    e7:d3:fd:ce:6c:09:6f:b9:c2:17:0e:b4:39:96:30:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:DD:7C:58:AF:92:F2:3B:61:0A:5F:30:6A:49:7D:EC:38:F6:45
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:3a:15:eb:17:b4:83:7e:fe:e1:1e:6c:d4:7d:3d:fe:d4:
         d3:92:55:37:db:a0:5a:c7:8e:f9:b7:72:51:89:79:cb:1d:1e:
         39:4b:65:cb:7c:83:90:60:38:8d:39:34:8b:92:54:26:c8:ba:
         73:12:73:54:1f:1b:a2:a5:fa:ec:79:45:3c:a9:31:f9:ac:70:
         c8:b3:15:51:2e:d7:8e:85:42:af:e5:e4:ad:06:36:64:d3:7c:
         8f:09:fa:13:09:b2:7f:7c:49:6c:13:9d:b0:47:1b:a0:ef:a6:
         5c:84:61:b2:19:94:66:5c:f6:c5:dc:1c:cc:bf:d5:9a:05:10:
         55:61:54:13:ab:d8:ed:cf:ca:3c:a3:59:5e:61:8c:44:07:64:
         ff:8c:a6:55:96:a6:c0:14:4b:7c:12:8a:2a:c4:0d:fc:28:67:
         2d:d3:0b:01:2d:a6:c4:b4:72:e1:9d:ba:3b:d6:39:76:98:96:
         98:8c:37:d0:3b:58:4f:9c:75:93:7f:ba:a5:2a:1a:0b:cb:2a:
         2b:ef:f6:8d:38:ce:29:f5:92:69:9a:5c:f1:7c:bf:1b:2f:12:
         67:4b:aa:49:54:78:7c:db:a0:f6:c7:81:01:81:c0:75:1a:ad:
         8a:64:01:62:ec:19:ce:a8:e0:51:55:2c:07:09:95:94:bc:a7:
         e3:92:2c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrJsmT2Jwt0oR7tdsgP+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTI4OWViZTkzMzUxMjM2YTU1ODBlYjViNzAxMDJjZjNm
MTFkZmMwHhcNMjQxMTIyMDcwMTAzWhcNMjQxMTIzMDcwMTAzWjAzMTEwLwYDVQQD
EyhjYmQ5ZGQ3YzU4YWY5MmYyM2I2MTBhNWYzMDZhNDk3ZGVjMzhmNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/IBDI3jmHCn/pG83TV0ue0m+V1
buSfWTGTWUqGtXM/+oWQzsWNUQTjN0nkJZnERBGdHG4MndbTeakZBoINfADNyn2S
WUhshVO24DnslBRX45A+Qasz5EABY+ilqa4HR2tR2xkMC21lGylJDsWcNlN9HnqM
HzbVIo9nyU5ZGuhKa/UGy+Bwep65BMXdiemindXriMg602n2YCAdC3lHYxcu7qhb
u5LmDZI3oLqmtFW6iHUuzTR8/azRIfhyf/b5lWDIcJbVwuqU8CxZ8X8X1q3hgqMI
A3Q3SpV27dKnlNfb+J4BYZW5THc2UeCYwyrn0/3ObAlvucIXDrQ5ljAa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvZ3XxYr5LyO2EKXzBqSX3sOPZFMB8GA1UdIwQY
MBaAFHuiievpM1EjalWA61twECzz8R38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMt
ZDE2M2I1NDk5ZTY4LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTFlN2MtN2Q3NC00Y2NjLTljNmMtZDE2M2I1NDk5ZTY4
LzEvZTZLSjYta3pVU05xVllEclczQVFMUFB4SGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlU6FesX
tIN+/uEebNR9Pf7U05JVN9ugWseO+bdyUYl5yx0eOUtly3yDkGA4jTk0i5JUJsi6
cxJzVB8boqX67HlFPKkx+axwyLMVUS7XjoVCr+XkrQY2ZNN8jwn6Ewmyf3xJbBOd
sEcboO+mXIRhshmUZlz2xdwczL/VmgUQVWFUE6vY7c/KPKNZXmGMRAdk/4ymVZam
wBRLfBKKKsQN/ChnLdMLAS2mxLRy4Z26O9Y5dpiWmIw30DtYT5x1k3+6pSoaC8sq
K+/2jTjOKfWSaZpc8Xy/Gy8SZ0uqSVR4fNug9seBAYHAdRqtimQBYuwZzqjgUVUs
BwmVlLyn45IsLA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:48:47 2024 by rpki-client on console-ams.rpki-client.org