Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          1GG50nQsic/r5BixsKqJ43fa+akvI5GmYSIt3HWZ1Q0=
Subject key identifier:   2F:7F:DF:E5:3A:38:52:52:F4:9E:1C:02:31:B4:81:FA:F5:72:88:1F
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       01935162AFFCA8B4241B58FBCB34FC4836B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 01:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:42 +0000
Files and hashes:         1: 8cUBNmosKNwSESOMqk4TGHsM4WI.roa (hash: b6YsZciffhtEXiR20xF11TavRx0x05Ye1wifdADOfpE=)
                          2: JDoi2wvcJ5jpxfzWAziL_QG9_1E.roa (hash: cV6raQ+lqWJ2zuWqmq3bL4K1p1kt1zZFxeNFNGsxvJ8=)
                          3: WopWO5Q1e4T34Azz4Qtnqs7pMSg.roa (hash: bsQSTjGwPEQ4zd9yG4mOvqARd0vU/BLZH4C2BG/ZaUk=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: itMMPlul4X6xgD4FghE9LMCziphvjCzUDLvzWKXFPz0=)
                          5: bOF3pLP6zcSfAeHWNwGQ7rT8jrU.roa (hash: 40nszCitwbjs72LDOpPtaiRFi26EjPTQCnnRRCPlrl4=)
                          6: pArtkAZCHrgWZcrBKNIoPWNa_LQ.roa (hash: qxgrQ3z1vcqTGCZffrwux1wZjUvishxEAtEFzrEW1Mk=)
                          7: xGTB59bWIq2FOsizUgIzb73X3lc.roa (hash: 2DvGaThSAv/jTZnfY012DIi160OYW0ZL7D66E+e1tDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:af:fc:a8:b4:24:1b:58:fb:cb:34:fc:48:36:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Nov 22 01:00:42 2024 GMT
            Not After : Nov 23 01:00:42 2024 GMT
        Subject: CN=2f7fdfe53a385252f49e1c0231b481faf572881f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:ee:86:71:34:4b:da:d8:68:e6:30:01:54:
                    52:a4:c4:60:02:a2:f4:57:bf:ee:a0:fa:08:0e:bf:
                    b5:f1:50:7c:32:c6:87:ba:7b:d3:fc:45:d0:dc:54:
                    f5:1d:0d:5e:9d:8a:ba:8a:04:4f:e4:50:5f:1b:70:
                    da:0b:a8:48:d9:8b:e2:c1:33:76:85:70:ff:d9:8b:
                    40:aa:ad:43:ae:dd:8c:52:61:69:66:94:a2:8f:14:
                    f7:dc:db:52:00:ed:bb:f6:89:7b:e7:ab:f6:3f:2c:
                    61:96:f9:22:f6:a8:0b:51:e0:33:bb:c3:85:08:86:
                    5b:14:de:72:fc:87:32:4b:be:07:6c:66:e3:38:a6:
                    25:77:f5:d0:0a:09:17:37:cd:ac:c0:59:05:18:0a:
                    d3:38:d5:e5:b6:04:6e:00:8b:89:f5:1f:55:69:5b:
                    10:7b:67:4b:31:08:67:03:42:ef:30:bd:c4:73:ea:
                    cf:2d:be:d6:d0:a2:d3:02:a7:67:32:ed:3f:e1:9a:
                    2f:52:4b:98:a3:c6:ee:33:c8:80:88:90:43:38:05:
                    de:bb:08:e0:92:36:60:5e:f3:47:f4:2e:dc:da:a3:
                    c0:f4:b6:8f:e7:ce:d2:b3:c3:7b:25:64:1b:e4:be:
                    73:c2:b9:cd:6d:52:ea:67:22:7a:e9:f3:da:46:04:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:DF:E5:3A:38:52:52:F4:9E:1C:02:31:B4:81:FA:F5:72:88:1F
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:b5:81:39:b2:41:0e:57:03:e2:29:5d:87:d5:b9:9b:d5:
         13:2a:0b:79:f1:20:c9:1b:d3:71:0b:36:22:e8:26:0b:3d:1d:
         f4:69:db:40:2d:ba:cd:d9:2e:8c:da:44:8d:16:5d:8b:28:fb:
         0f:84:3d:1a:39:84:65:ec:3d:98:9c:82:53:ff:a5:e2:d5:64:
         48:69:a4:a7:c9:77:a4:6c:a8:54:2d:4d:6a:c8:5e:4b:cc:54:
         de:d6:4b:fd:ae:cd:fe:47:af:26:9e:0f:81:c9:cf:2f:0a:c1:
         db:41:38:fd:75:83:3c:89:4d:65:f6:97:9b:bf:50:d6:a4:9f:
         28:d6:49:cc:22:e6:51:b9:09:4a:85:3c:41:6f:ab:74:e2:28:
         26:fd:8c:ae:bb:67:69:e6:20:66:df:72:75:91:59:ae:b6:84:
         1b:22:dd:9d:33:64:33:27:87:4b:6a:df:ec:9d:82:71:25:56:
         5a:60:b1:8b:82:30:53:60:47:96:6c:80:11:17:21:31:56:7d:
         30:d4:38:64:b1:fc:06:14:ca:a1:8b:71:63:c1:88:73:2b:f8:
         8d:a4:5e:95:77:76:81:9f:98:ce:d8:a5:a6:76:37:88:36:84:
         aa:88:4f:05:4d:9f:50:5a:66:2c:96:74:c3:94:7c:1b:00:f5:
         fb:1b:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:43 2024 by rpki-client on console-fra.rpki-client.org