Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File:                     G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier:          2w2qg0EvIOTaOEVqw1oihBUuhkh9Zg9L+ZiQ565/p0A=
Subject key identifier:   B9:FD:29:E8:C0:8C:4B:7D:A4:27:15:40:3A:D1:BB:27:07:FA:96:99
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer:       /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial:       0190521153C1ECBFF4890943DF0FCAF51674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number:          11E3
Signing time:             Wed 26 Jun 2024 01:03:05 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:05 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:05 +0000
Files and hashes:         1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: sCUoBEcKTezjF+hWIRYieI8QLBS1Tq4FYPJ5HDfo6yg=)
                          2: LYkrH8EDlrtW3JeKeZYMUmWIatA.roa (hash: J26pJR+XToeHbpdJLn2hfzCRum+5GDY+7h2S2vCTDU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:53:c1:ec:bf:f4:89:09:43:df:0f:ca:f5:16:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
        Validity
            Not Before: Jun 26 01:03:05 2024 GMT
            Not After : Jun 27 01:03:05 2024 GMT
        Subject: CN=b9fd29e8c08c4b7da42715403ad1bb2707fa9699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:2f:a2:cc:0e:e3:e1:17:a4:77:a5:2a:d0:
                    64:5f:c8:bf:2a:a0:4c:b5:f4:6d:05:67:02:58:9d:
                    f8:6a:ee:ac:63:54:2f:6e:74:4b:64:1d:df:6b:0e:
                    8b:8c:b6:a3:dc:b3:6c:86:08:1d:71:70:26:de:5e:
                    f1:68:7c:10:48:70:01:2e:4a:62:be:20:51:28:6d:
                    f1:7f:57:5c:5d:1d:45:cd:8d:49:e1:c9:2d:c4:fb:
                    7a:21:d3:5c:0c:4d:87:4e:b5:bc:d4:29:ba:73:b9:
                    af:aa:cb:7f:13:1c:97:e2:05:63:d1:18:8f:ae:5e:
                    07:12:94:22:47:9b:04:31:0c:81:fc:d1:4d:91:10:
                    37:c3:92:73:04:5a:a4:35:9f:90:9f:58:e0:f1:c9:
                    b8:62:fc:4a:5d:4d:8f:7c:b3:7d:bb:6f:9b:1d:18:
                    e8:10:88:d5:8d:ea:21:21:7a:07:24:2d:fb:d8:67:
                    6d:ed:5c:6d:ee:cb:81:68:e8:96:5d:fd:5f:77:17:
                    9c:7f:df:6e:37:8c:a0:a9:9c:41:cf:da:76:54:7c:
                    91:ec:d8:ef:db:8b:c7:9d:4a:be:7a:78:e1:40:51:
                    37:00:d1:04:d7:95:54:3f:1b:07:64:79:6b:73:b1:
                    a5:0a:5c:5e:e1:57:bf:8a:d7:85:ad:76:81:fd:0d:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:29:E8:C0:8C:4B:7D:A4:27:15:40:3A:D1:BB:27:07:FA:96:99
            X509v3 Authority Key Identifier:
                keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:1f:e4:31:6b:c1:b4:cb:75:ef:f2:3e:d6:47:31:25:33:
         57:e4:0a:96:b0:a8:1e:b6:62:55:92:c0:0f:2c:3f:e5:ba:86:
         14:e3:7b:cc:a7:53:51:df:f7:ea:17:7c:0c:16:3c:bc:e0:12:
         8f:5a:7b:76:cc:e4:f3:78:8f:df:14:dc:4a:b1:fc:6a:e0:96:
         12:5a:a4:e3:5c:ea:5e:94:c9:ca:e8:88:9e:72:db:66:b4:8c:
         b0:2f:3a:16:e5:51:67:fb:ea:57:aa:ba:be:68:94:4a:76:63:
         cd:0c:c0:24:84:f0:32:7f:11:1b:57:bd:9f:35:cc:31:e6:3e:
         24:47:03:e7:cf:89:81:1f:4b:2d:2e:2f:0b:3a:c2:79:b2:8f:
         d3:22:17:ff:38:0e:ce:f9:53:1f:0e:f5:52:9d:12:dd:55:53:
         ea:f0:78:21:4a:80:d4:4a:a2:01:08:b1:ae:66:81:53:d4:4e:
         b7:7d:fc:08:3a:12:34:f6:0d:00:8e:47:37:73:ba:ce:9e:12:
         1f:00:17:76:e6:57:f2:b1:27:77:dd:46:3d:fe:48:10:d4:fa:
         59:b1:80:9f:5e:0c:a7:5f:2d:b1:4b:aa:ed:8d:b3:5a:fd:ec:
         4e:32:3d:15:79:9e:9e:06:3a:2c:5c:66:69:9f:55:e6:a6:fa:
         c5:12:54:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBSEVPB7L/0iQlD3w/K9RZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTA2YzMyMjM2OWQ0NDllMTc0ZmE3MzEwNDdiMzM5NzIz
ZmIwMWQwHhcNMjQwNjI2MDEwMzA1WhcNMjQwNjI3MDEwMzA1WjAzMTEwLwYDVQQD
EyhiOWZkMjllOGMwOGM0YjdkYTQyNzE1NDAzYWQxYmIyNzA3ZmE5Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM8voswO4+EXpHelKtBkX8i/KqBM
tfRtBWcCWJ34au6sY1QvbnRLZB3faw6LjLaj3LNshggdcXAm3l7xaHwQSHABLkpi
viBRKG3xf1dcXR1FzY1J4cktxPt6IdNcDE2HTrW81Cm6c7mvqst/ExyX4gVj0RiP
rl4HEpQiR5sEMQyB/NFNkRA3w5JzBFqkNZ+Qn1jg8cm4YvxKXU2PfLN9u2+bHRjo
EIjVjeohIXoHJC372Gdt7Vxt7suBaOiWXf1fdxecf99uN4ygqZxBz9p2VHyR7Njv
24vHnUq+enjhQFE3ANEE15VUPxsHZHlrc7GlClxe4Ve/iteFrXaB/Q3SDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn9KejAjEt9pCcVQDrRuycH+paZMB8GA1UdIwQY
MBaAFBugbDIjadRJ4XT6cxBHszlyP7AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgt
Mjk2YzQyMjI5Zjg2LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgtMjk2YzQyMjI5Zjg2
LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNQf5DFr
wbTLde/yPtZHMSUzV+QKlrCoHrZiVZLADyw/5bqGFON7zKdTUd/36hd8DBY8vOAS
j1p7dszk83iP3xTcSrH8auCWElqk41zqXpTJyuiInnLbZrSMsC86FuVRZ/vqV6q6
vmiUSnZjzQzAJITwMn8RG1e9nzXMMeY+JEcD58+JgR9LLS4vCzrCebKP0yIX/zgO
zvlTHw71Up0S3VVT6vB4IUqA1EqiAQixrmaBU9ROt338CDoSNPYNAI5HN3O6zp4S
HwAXduZX8rEnd91GPf5IENT6WbGAn14Mp18tsUuq7Y2zWv3sTjI9FXmengY6LFxm
aZ9V5qb6xRJUhQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:01:06 2024 by rpki-client on console-ams.rpki-client.org