Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
File:                     6dJyHy4r0BG4poYK0lcsQFwLVA8.mft (raw, json)
Hash identifier:          Ib3qEAIgBo9p0zF8iV69M2FLZYphxEhzypVVduI0GOk=
Subject key identifier:   BF:9B:43:A2:59:5C:02:D4:99:ED:FA:39:92:16:35:05:31:7F:02:22
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Certificate issuer:       /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial:       019351623B44154B4602F88298959746DC5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 01:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:12 +0000
Files and hashes:         1: 6dJyHy4r0BG4poYK0lcsQFwLVA8.crl (hash: YwJi6TbHnYtnoGaTtx3ZqELWbxrLie/3oun1qsfJPiQ=)
                          2: HdukltayHTNB2OHDWlM1F_QCttU.roa (hash: 6A4hUo3t8fRtN4b3sgQ6WW4j3GjPT380gWmkyRD8Jdw=)
                          3: KtX_PJZvnWu8lpgsktFT_j4KjSg.roa (hash: 3iPu8ye6n675RMfmsouKgCH3bpeNtVShxkhUcc80BdE=)
                          4: kbzLK-wQojMasvT0Nsw3o-AC99k.roa (hash: cGawYsm5PbeY5KZKY6aWR1DK/811tbp5m6p0NRBPXSY=)
                          5: srABLMmz2rzeAqpEy-qoWyPOpZY.roa (hash: ebTIaDbdoAi7ZD3FueJ7eCJUyN04/8kXhUV78cag0oc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:3b:44:15:4b:46:02:f8:82:98:95:97:46:dc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
        Validity
            Not Before: Nov 22 01:00:12 2024 GMT
            Not After : Nov 23 01:00:12 2024 GMT
        Subject: CN=bf9b43a2595c02d499edfa3992163505317f0222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:a2:7f:28:e3:bc:2f:ac:55:3c:b3:94:a8:
                    71:0e:8e:1e:bc:29:15:b1:80:41:7d:61:fb:48:a0:
                    1a:d3:e6:5c:5b:8f:62:06:f4:dc:af:a8:f0:60:e1:
                    7f:70:93:79:8b:e1:67:45:02:3d:2c:28:e8:b5:2e:
                    a5:31:19:f6:1b:26:13:e8:aa:a0:cd:7b:ab:51:6e:
                    6e:5b:7e:27:14:57:a1:61:36:07:8f:14:4f:47:f0:
                    cc:c2:8a:c9:f5:21:81:ca:15:fc:ed:f7:5f:9f:3c:
                    6f:4d:ef:82:6a:6e:bb:f6:58:70:00:56:60:4e:fe:
                    3a:25:f5:4b:c3:1a:a0:f7:d9:9c:14:75:cb:48:28:
                    62:a7:4a:35:17:32:4f:4f:5f:0a:06:43:02:40:05:
                    c0:73:e6:b4:28:b9:25:f9:76:1b:cb:75:f7:da:ea:
                    e3:79:f8:1a:30:a6:72:d3:9e:04:e5:47:4d:7a:db:
                    ed:d3:e1:83:2e:fe:da:0a:48:df:fb:63:da:ba:75:
                    8e:35:48:7f:77:8d:a3:da:25:36:90:df:54:67:61:
                    03:19:9a:ef:ec:d3:2e:7e:fa:a4:67:3d:2a:04:7e:
                    ba:a3:7c:6c:d4:9b:17:8a:d7:1c:86:f7:14:c9:9c:
                    ae:46:cb:b7:ff:b7:ff:b2:cd:b5:99:2a:c4:c7:3b:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:43:A2:59:5C:02:D4:99:ED:FA:39:92:16:35:05:31:7F:02:22
            X509v3 Authority Key Identifier:
                keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:ee:2f:ed:34:34:4f:d3:10:a3:87:35:8f:f0:65:08:ce:
         01:95:44:89:e8:f5:8b:dc:8e:83:ff:98:e9:e2:6d:7a:d2:6a:
         dd:2b:37:df:a2:9f:0f:b0:10:eb:d6:2a:6e:b5:78:50:c2:8c:
         cc:99:10:76:cc:6b:21:3e:a2:27:06:f7:eb:31:9c:37:ab:a7:
         05:dd:a4:2c:f3:db:71:90:5f:93:b4:3c:0a:85:c8:f8:ca:16:
         08:a2:54:d4:c8:e5:f9:be:c9:b7:c1:26:52:35:c9:c9:1d:9d:
         6f:45:a1:38:fe:57:78:40:48:a9:0d:de:8e:28:ea:c3:b7:dc:
         0a:da:04:d7:58:12:b2:6c:66:1d:47:01:7f:08:8b:d1:b1:6d:
         14:b8:36:ba:b4:34:b7:cb:74:80:f0:78:28:36:ef:28:c6:6c:
         68:22:85:01:13:49:a1:83:47:48:f5:2a:31:81:65:9b:24:d2:
         59:08:bc:0f:42:89:9b:0e:db:27:9b:04:a7:dc:61:64:de:4c:
         b3:0e:69:74:66:ac:fc:43:58:1d:72:df:ae:c8:b7:73:48:9d:
         f6:2a:94:a3:1b:53:22:56:a4:4d:1f:65:ad:ca:ab:1b:88:45:
         b7:7d:85:82:d3:f2:01:b0:93:ec:e1:72:a9:18:20:c2:99:a5:
         66:79:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:20 2024 by rpki-client on console-ams.rpki-client.org