Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File:                     9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier:          GWPHjnaFLWzJGc4y9ZjaO+DFRd3G/NZzZf+hxImeNdU=
Subject key identifier:   F8:35:88:62:3F:5E:C7:9D:7D:52:B7:DC:EC:70:61:C0:2C:DD:AC:0A
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       01935199614458F6B1CE7B2E7BB27CDD8BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number:          0C15
Signing time:             Fri 22 Nov 2024 02:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:26 +0000
Files and hashes:         1: 25HLN9vKJbOORa344qm-LI0nEQA.roa (hash: TQyp0sF1bl/gzF7J2QBW5i0BGuTI+enCR5Mfur9x5VU=)
                          2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: UtT6ULfuK9KbLHp5MpARw28lq6Oa4XW5q/a772CyUjM=)
                          3: BMRqTwX3F-7Eyu9sUWJRxbbnObs.roa (hash: iwSQ0rUmNhGV89dfOp4pcxcUZZLRA+Kc94ZUHHnJkbg=)
                          4: EuYJ2gsilnK0OZdkG1OkM8nTvkk.roa (hash: 8c9T8oAjJbJ+dYCN8m/DwRC31Jv27WShjIDpT9xD7CI=)
                          5: FZEkFuMqSBRntbImyjyZghDyuWQ.roa (hash: /3J6RLL5TaJlsI7MAiHuaRBYdlP3F/vAuXmxyqitWLo=)
                          6: UNsqRay7ofQ5WiHpZ5Acof4lnDo.roa (hash: rDqdWWHGAzsTyp6IAkG0n0gUgv7cg4bdgRcTdFsdL3w=)
                          7: llFGH8urj5iar5Vx967WXVcJGzM.roa (hash: 9hm1Mb0do8HIozKCabIcq+968yFpgw9XQkqO8g/4ZfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:61:44:58:f6:b1:ce:7b:2e:7b:b2:7c:dd:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Nov 22 02:00:26 2024 GMT
            Not After : Nov 23 02:00:26 2024 GMT
        Subject: CN=f83588623f5ec79d7d52b7dcec7061c02cddac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:ba:92:d9:67:e3:d3:17:26:07:7d:61:f4:
                    68:60:fa:e2:94:27:bf:96:69:23:dc:a9:03:02:64:
                    c9:bb:08:b1:23:d3:29:58:70:61:ee:26:a1:35:0b:
                    ff:9b:b0:4b:b0:bb:58:9f:0c:ba:df:ee:09:4f:fd:
                    98:f8:58:f8:a0:82:e0:47:5a:d1:5d:80:5d:e0:8e:
                    73:86:d7:33:f4:63:65:79:60:aa:d8:bd:79:2e:f1:
                    7a:68:62:25:a9:53:89:c6:7b:ae:20:69:87:46:6c:
                    27:87:7b:0b:fa:91:61:44:c3:fd:05:45:6a:6f:20:
                    19:f1:9b:ce:4e:0f:ed:24:8a:fa:ab:0c:7a:34:db:
                    41:13:8a:a7:33:06:32:ac:f0:08:5e:e3:6a:62:a1:
                    91:ab:62:95:c6:fd:64:cc:0a:91:f0:a7:a5:8b:e4:
                    46:3d:15:51:a8:11:2a:6f:c5:23:e9:9e:ea:b9:16:
                    f8:6c:eb:3c:3b:08:76:b9:22:4e:a1:7d:33:8d:2f:
                    07:0e:d7:7c:b5:e6:60:b6:24:67:ca:be:d1:22:cd:
                    04:e2:be:1b:e0:47:ca:07:6c:51:bd:18:13:fd:fd:
                    8e:ba:82:36:39:5f:17:0e:fb:0d:40:dc:b9:e8:6e:
                    79:18:df:03:af:65:67:ba:a6:bd:15:40:00:a3:e2:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:35:88:62:3F:5E:C7:9D:7D:52:B7:DC:EC:70:61:C0:2C:DD:AC:0A
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:04:02:d6:0b:0c:dd:4d:a6:32:aa:54:11:89:ce:c7:a5:
         d9:4f:43:78:53:17:80:13:1b:23:34:30:10:ad:73:ed:25:df:
         47:27:03:7c:ec:e0:19:99:97:ef:3e:32:e5:1a:40:fb:cc:84:
         b3:2c:1d:d4:d4:71:99:2d:ea:35:c8:54:b1:cb:1e:1c:a8:29:
         26:ff:bf:c5:b3:9f:a4:4a:f4:f6:c6:1c:97:e2:3f:58:78:6c:
         08:dc:99:f8:99:18:64:5f:6f:2e:5f:fe:25:c4:29:c1:6c:02:
         05:e9:95:d7:77:a7:23:72:23:b0:e5:f1:27:b3:07:a5:c7:4b:
         8f:0e:40:ee:a4:d8:dd:33:71:20:08:1c:eb:73:45:db:d9:ea:
         e6:1a:db:70:a4:0a:fb:07:91:cb:3e:ac:8d:71:c4:aa:1d:b2:
         4d:14:8e:b6:94:c3:a7:aa:4b:cb:be:1b:68:47:ab:10:a5:a0:
         a0:be:49:4a:38:e5:06:38:af:2e:e0:2e:39:c5:db:68:c9:0f:
         92:7e:44:c1:f0:ef:0b:e7:85:1c:61:90:3b:e8:33:d4:c8:19:
         41:d7:58:20:13:16:b2:7f:52:99:30:82:68:6f:45:4f:da:34:
         e2:82:62:31:ff:a2:19:3d:74:d5:76:87:74:22:9b:7b:10:ee:
         4a:39:30:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmWFEWPaxznsue7J83Yu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjQxMTIyMDIwMDI2WhcNMjQxMTIzMDIwMDI2WjAzMTEwLwYDVQQD
EyhmODM1ODg2MjNmNWVjNzlkN2Q1MmI3ZGNlYzcwNjFjMDJjZGRhYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUq6ktln49MXJgd9YfRoYPrilCe/
lmkj3KkDAmTJuwixI9MpWHBh7iahNQv/m7BLsLtYnwy63+4JT/2Y+Fj4oILgR1rR
XYBd4I5zhtcz9GNleWCq2L15LvF6aGIlqVOJxnuuIGmHRmwnh3sL+pFhRMP9BUVq
byAZ8ZvOTg/tJIr6qwx6NNtBE4qnMwYyrPAIXuNqYqGRq2KVxv1kzAqR8Keli+RG
PRVRqBEqb8Uj6Z7quRb4bOs8Owh2uSJOoX0zjS8HDtd8teZgtiRnyr7RIs0E4r4b
4EfKB2xRvRgT/f2OuoI2OV8XDvsNQNy56G55GN8Dr2Vnuqa9FUAAo+ImMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg1iGI/XsedfVK33OxwYcAs3awKMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCcEAtYL
DN1NpjKqVBGJzsel2U9DeFMXgBMbIzQwEK1z7SXfRycDfOzgGZmX7z4y5RpA+8yE
sywd1NRxmS3qNchUscseHKgpJv+/xbOfpEr09sYcl+I/WHhsCNyZ+JkYZF9vLl/+
JcQpwWwCBemV13enI3IjsOXxJ7MHpcdLjw5A7qTY3TNxIAgc63NF29nq5hrbcKQK
+weRyz6sjXHEqh2yTRSOtpTDp6pLy74baEerEKWgoL5JSjjlBjivLuAuOcXbaMkP
kn5EwfDvC+eFHGGQO+gz1MgZQddYIBMWsn9SmTCCaG9FT9o04oJiMf+iGT101XaH
dCKbexDuSjkw0Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:20 2024 by rpki-client on console-ams.rpki-client.org