Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          g/Dw/ERZftvQPEZJhTxJ4lhD4cfHLqGKFdn3Ze/O3tg=
Subject key identifier:   6B:EA:64:3B:EA:C7:FE:BE:D4:54:FD:11:C7:28:9F:13:92:B6:6D:4A
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       01935688F78D23752F6C9C853675300E57AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          06C7
Signing time:             Sat 23 Nov 2024 01:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:37 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: Zm+OhviZjcrKFoGw8dm/iJ1+M7+DPcA4JTA/n4M1ULw=)
                          2: yHEYXv-BuJs6FpHkhX4RkxJ-xCc.roa (hash: LKOJkgxJvbS9KW66rumdyyhfKZmxUjfTy5KVOn9EbcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:f7:8d:23:75:2f:6c:9c:85:36:75:30:0e:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: Nov 23 01:00:37 2024 GMT
            Not After : Nov 24 01:00:37 2024 GMT
        Subject: CN=6bea643beac7febed454fd11c7289f1392b66d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:18:37:d5:f1:8b:9c:b2:95:1f:ab:a1:13:
                    fa:29:75:2e:e1:3a:f7:08:68:d8:c1:ac:56:25:99:
                    32:ba:99:11:3d:58:36:89:21:4a:04:e1:ea:4d:ed:
                    8b:0d:68:bb:92:37:12:cc:02:5f:86:47:cf:c9:89:
                    5a:50:8e:3c:3a:72:d5:bf:8e:ce:0c:a5:99:e7:4e:
                    51:cb:87:6a:6e:5b:88:a5:ca:51:8d:64:5d:a1:f1:
                    08:d1:54:37:a1:9a:33:e1:9f:58:a9:69:e6:b9:80:
                    e5:a4:a9:6d:43:76:19:b7:e1:43:ae:d2:51:b2:f9:
                    b2:b2:7c:2f:66:c0:5d:90:aa:a5:a3:ab:a8:c7:47:
                    85:a7:8f:9d:85:0e:c1:42:9f:0c:e1:ea:f0:56:84:
                    c1:75:74:cd:d5:ee:c2:20:8a:f3:3e:05:20:c3:69:
                    bc:3f:c1:8e:3d:67:c2:66:49:89:47:bb:ad:1c:d3:
                    1f:f3:e0:1b:c7:e6:e0:ba:8e:44:b2:e2:a6:e8:e6:
                    80:2b:18:b6:0b:02:6e:45:57:2c:1c:87:14:82:9c:
                    6a:94:e4:25:b8:b6:25:cd:aa:41:3b:30:e4:84:14:
                    6a:08:e6:af:ec:c0:63:2d:67:ba:7e:82:36:45:ea:
                    6f:96:f6:ab:fd:a3:20:3e:d5:62:aa:9c:30:19:05:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:64:3B:EA:C7:FE:BE:D4:54:FD:11:C7:28:9F:13:92:B6:6D:4A
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:46:33:54:9c:1f:c5:12:17:c6:f9:7c:1d:dd:35:37:f3:
         dd:82:92:41:34:55:ed:15:8d:03:53:67:f5:42:45:d9:c2:90:
         35:91:1a:f1:47:f6:cf:c7:a7:b7:cc:dc:d5:ae:33:c5:cd:7d:
         fe:cc:0f:02:a3:1c:a6:bb:05:85:1a:a5:de:a5:ee:5e:df:ab:
         f3:2e:1c:6e:f3:ad:05:de:bb:ca:76:6a:33:ac:a3:7e:b3:d3:
         c7:c9:a3:ae:3d:3c:1b:0d:6b:6a:f4:0b:36:e7:b9:47:b5:27:
         99:d1:61:17:79:4a:68:79:dc:ab:e4:47:31:32:ca:97:57:7a:
         e6:55:83:11:f4:93:b2:98:f1:6e:40:01:26:46:c6:ed:47:b0:
         72:df:21:8d:b8:06:21:fb:1c:db:2b:a4:33:f2:fb:d2:1b:b8:
         3e:1f:6e:98:68:42:58:1d:de:ad:b7:9c:d5:7d:7c:0d:bf:65:
         93:37:ac:a9:c0:70:10:42:10:17:5a:52:77:07:99:b7:a0:78:
         d5:57:fd:81:48:d2:21:1a:c6:70:cf:bb:da:a7:03:30:64:78:
         c1:e8:bf:ee:61:a7:31:c3:c1:01:84:57:dc:0e:f3:a2:3b:69:
         44:d2:d1:ce:28:a6:14:ea:81:30:f8:05:8e:36:02:74:ea:70:
         c0:37:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:02 2024 by rpki-client on console-ams.rpki-client.org