Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          R66C3zCHuS3eqe2r1pmVJC8O8l/lXADgdaNPX9KTwVM=
Subject key identifier:   9F:18:45:88:D0:38:9B:C7:F3:69:A0:7C:6F:6C:18:58:35:26:5C:FC
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       01935651EA9CBBD741B3748679B878DC1741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          01B6
Signing time:             Sat 23 Nov 2024 00:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:29 +0000
Files and hashes:         1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: sxSllkrMbixQnzdaXqdvuzMWAs4BQRA6kwCYMKHGEe8=)
                          2: sZ3BQLG3Sj21lrTfbC767zALcC4.roa (hash: 6k0HzhDWHCccuxc0F4LOcJBgGEWhN1GpStvrb6tKATc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:ea:9c:bb:d7:41:b3:74:86:79:b8:78:dc:17:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Nov 23 00:00:29 2024 GMT
            Not After : Nov 24 00:00:29 2024 GMT
        Subject: CN=9f184588d0389bc7f369a07c6f6c185835265cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:49:97:09:24:ba:52:1b:52:c4:d1:a8:91:
                    2a:54:57:76:f8:e5:2d:bd:02:95:4d:2d:c6:78:6c:
                    04:bc:a3:ea:f9:d2:ce:2f:62:a3:09:d3:0f:5f:8d:
                    ec:69:32:9b:70:b1:28:a9:38:ac:7f:cb:30:04:e8:
                    47:71:82:43:c4:57:e8:44:a0:91:de:10:b5:d8:78:
                    e1:8e:b1:94:a4:d3:2f:97:53:ec:63:cb:0d:c4:db:
                    e2:be:8a:ff:d0:f4:e4:c9:88:ec:0b:5c:1f:54:05:
                    66:b2:57:a8:30:b4:58:10:6f:73:53:2c:c9:8d:f3:
                    e3:26:c4:43:f8:97:ee:e7:4b:ac:9a:3f:78:15:9b:
                    73:b3:b9:26:56:58:f7:8f:30:16:79:1f:57:69:93:
                    9e:fb:c4:e4:d0:21:9f:3e:f1:81:b9:66:31:25:bb:
                    2c:d0:04:9e:36:48:a2:3e:b4:eb:b1:17:8f:f7:06:
                    12:40:8d:c0:dd:1c:73:ea:c7:93:b5:89:99:4c:62:
                    30:e9:fd:5c:2d:81:f7:a3:b1:de:13:f8:b1:f5:11:
                    46:79:35:aa:d9:1b:7f:98:2c:74:41:95:68:7e:76:
                    db:9c:d2:9a:42:8b:94:c9:10:6a:21:ad:e0:40:16:
                    c0:04:00:2a:eb:76:08:e4:cf:db:8c:9b:09:08:09:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:45:88:D0:38:9B:C7:F3:69:A0:7C:6F:6C:18:58:35:26:5C:FC
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:d7:0f:00:cf:3b:8c:1c:73:28:08:67:f8:43:a8:c0:f5:
         cb:75:39:67:f3:63:8b:ec:14:b6:be:d9:20:39:d0:1d:cd:e5:
         57:3e:05:59:75:45:2e:91:98:5b:c1:40:61:77:57:b2:34:04:
         f7:4c:f8:9d:ba:c9:7d:01:12:ed:5d:df:35:b7:42:ac:a6:61:
         a0:bf:2b:90:8d:6c:ef:d1:23:e9:ae:dc:73:cc:b7:e4:9b:87:
         8c:2e:68:17:3b:c2:85:ec:de:d2:c2:b0:aa:48:e7:ed:47:ed:
         df:ee:f9:1d:7a:0f:68:ef:c5:ab:64:4b:9f:24:f1:a8:eb:e1:
         56:8f:bf:ca:1c:b5:f6:70:8e:f6:e8:57:16:86:1f:61:5b:93:
         e7:cc:f3:97:a5:da:5f:ab:16:e0:08:4d:60:4a:4d:b0:01:f4:
         07:c4:9f:2c:fc:bd:ed:64:1a:23:45:2a:38:23:a1:2f:66:fe:
         b1:d5:ba:78:1b:3e:dc:8f:b3:7f:d5:33:7e:5f:c1:e8:58:4d:
         55:6c:2f:80:a5:ce:b2:c6:8e:43:5b:cf:1e:e0:89:49:83:8f:
         5f:fd:c9:ec:94:8f:88:6a:64:c7:de:81:d7:db:a1:8e:b4:86:
         93:c1:b8:6d:38:b9:74:b3:f2:67:9f:fb:9d:f6:38:38:5a:2f:
         8d:bd:e3:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWUeqcu9dBs3SGebh43BdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjQxMTIzMDAwMDI5WhcNMjQxMTI0MDAwMDI5WjAzMTEwLwYDVQQD
Eyg5ZjE4NDU4OGQwMzg5YmM3ZjM2OWEwN2M2ZjZjMTg1ODM1MjY1Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz5JlwkkulIbUsTRqJEqVFd2+OUt
vQKVTS3GeGwEvKPq+dLOL2KjCdMPX43saTKbcLEoqTisf8swBOhHcYJDxFfoRKCR
3hC12HjhjrGUpNMvl1PsY8sNxNvivor/0PTkyYjsC1wfVAVmsleoMLRYEG9zUyzJ
jfPjJsRD+Jfu50usmj94FZtzs7kmVlj3jzAWeR9XaZOe+8Tk0CGfPvGBuWYxJbss
0ASeNkiiPrTrsReP9wYSQI3A3Rxz6seTtYmZTGIw6f1cLYH3o7HeE/ix9RFGeTWq
2Rt/mCx0QZVofnbbnNKaQouUyRBqIa3gQBbABAAq63YI5M/bjJsJCAmu/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8YRYjQOJvH82mgfG9sGFg1Jlz8MB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+/XDwDP
O4wccygIZ/hDqMD1y3U5Z/Nji+wUtr7ZIDnQHc3lVz4FWXVFLpGYW8FAYXdXsjQE
90z4nbrJfQES7V3fNbdCrKZhoL8rkI1s79Ej6a7cc8y35JuHjC5oFzvCheze0sKw
qkjn7Uft3+75HXoPaO/Fq2RLnyTxqOvhVo+/yhy19nCO9uhXFoYfYVuT58zzl6Xa
X6sW4AhNYEpNsAH0B8SfLPy97WQaI0UqOCOhL2b+sdW6eBs+3I+zf9Uzfl/B6FhN
VWwvgKXOssaOQ1vPHuCJSYOPX/3J7JSPiGpkx96B19uhjrSGk8G4bTi5dLPyZ5/7
nfY4OFovjb3jcQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:52 2024 by rpki-client on console-ams.rpki-client.org