Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File:                     b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier:          NbysM4yA4b4xPm6WIrK0zk46t6tZVpUbhnIDp4nFftE=
Subject key identifier:   70:D7:CB:86:41:FA:69:6D:DF:49:DD:89:F3:3E:85:2E:E8:FD:E1:43
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer:       /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial:       0191FB59F57CFD95E33ECBC97EB5717FDBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number:          0113
Signing time:             Mon 16 Sep 2024 15:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:02 +0000
Files and hashes:         1: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: r4gJM3fA+UB6jaUXUYJNTxfiX9DcEHf6H0If8SwIhXE=)
                          2: cUuPBbaJv8SjDvaPRnlwSaZx_54.roa (hash: uJGZ234tfU7suEArJxgYtESjdah+OcLOuyxVv/MRjFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:59:f5:7c:fd:95:e3:3e:cb:c9:7e:b5:71:7f:db:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
        Validity
            Not Before: Sep 16 15:01:02 2024 GMT
            Not After : Sep 17 15:01:02 2024 GMT
        Subject: CN=70d7cb8641fa696ddf49dd89f33e852ee8fde143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:92:6b:42:74:47:dd:de:5f:7e:b9:d9:03:
                    96:bc:a9:33:47:2b:6d:a9:77:d4:e0:ed:25:51:7d:
                    e2:14:6c:af:fd:1c:55:84:0d:c6:2f:70:fe:e4:a5:
                    e1:67:5e:39:2f:08:ba:41:bd:b4:4b:93:34:87:eb:
                    cb:07:fd:2f:93:8b:77:83:9f:48:55:e6:5e:5b:2e:
                    78:14:4f:3b:21:99:31:c5:14:e2:c9:02:f8:9a:79:
                    c2:16:f0:3b:02:13:21:d2:e4:2b:25:a0:1c:8b:60:
                    fb:19:61:af:b7:e9:5c:6d:3a:bb:a6:62:d6:d6:af:
                    87:5c:b8:30:52:08:0f:af:c3:ec:ea:be:92:2d:e1:
                    0f:7f:68:13:6d:ef:2b:68:c3:0c:c1:38:b6:8f:88:
                    c9:2f:16:99:f5:68:e6:30:76:3f:15:67:2b:13:da:
                    50:58:2e:85:ee:5c:ff:58:c3:b9:51:13:cf:3b:a0:
                    61:e5:ae:8d:dc:56:7e:9b:e3:88:a1:78:7a:4d:35:
                    3d:ed:21:db:8b:57:ba:ea:c1:da:90:5b:f3:d7:69:
                    5b:b4:33:4c:3e:45:e4:4e:c3:65:25:a2:57:85:0b:
                    6e:78:36:2f:39:d2:17:06:3f:56:11:bb:a2:b1:fe:
                    39:4d:80:ec:a9:b1:23:2a:cf:13:55:2e:2f:42:02:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:CB:86:41:FA:69:6D:DF:49:DD:89:F3:3E:85:2E:E8:FD:E1:43
            X509v3 Authority Key Identifier:
                keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:f0:5f:71:88:ff:12:64:bb:64:5b:c4:50:a0:48:c7:c8:
         78:fc:a5:09:03:b4:99:0e:c8:72:57:b9:3f:3b:40:37:c9:f5:
         ad:79:47:cd:98:94:b7:19:e2:22:9f:71:09:fd:31:ba:39:d5:
         d8:94:4f:0d:17:43:3f:08:54:e1:de:72:b8:2d:a6:f7:14:90:
         83:bf:4d:17:73:53:9d:c1:cf:4e:1e:6a:1d:12:2f:8b:09:7e:
         40:ac:5f:6a:f4:fe:b0:f9:cf:62:45:cf:8e:6f:89:48:5a:3a:
         e8:5a:ff:b6:44:e5:45:53:91:f2:e5:34:e3:65:18:97:13:c5:
         62:04:93:62:cd:85:af:87:76:72:28:9a:7f:d3:2d:df:85:81:
         23:ac:1f:6b:a9:34:45:68:d6:f8:cc:f8:60:44:c4:09:a4:c2:
         c2:e4:ec:5f:38:78:af:58:33:a5:a2:a7:ac:47:ac:ca:81:16:
         96:e6:60:c2:c8:e9:45:44:8f:b8:bf:1b:fd:f5:10:e0:70:de:
         e0:f0:51:e0:88:e4:76:a9:55:03:52:16:75:f3:ea:27:07:b1:
         08:f8:11:1a:4f:18:26:7a:75:b3:e5:ad:28:73:d5:da:31:42:
         5b:47:b8:53:7c:3b:81:a1:b2:fe:42:f8:01:88:92:ab:c7:42:
         98:89:1d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7WfV8/ZXjPsvJfrVxf9ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2
YzExN2UwHhcNMjQwOTE2MTUwMTAyWhcNMjQwOTE3MTUwMTAyWjAzMTEwLwYDVQQD
Eyg3MGQ3Y2I4NjQxZmE2OTZkZGY0OWRkODlmMzNlODUyZWU4ZmRlMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0eSa0J0R93eX3652QOWvKkzRytt
qXfU4O0lUX3iFGyv/RxVhA3GL3D+5KXhZ145Lwi6Qb20S5M0h+vLB/0vk4t3g59I
VeZeWy54FE87IZkxxRTiyQL4mnnCFvA7AhMh0uQrJaAci2D7GWGvt+lcbTq7pmLW
1q+HXLgwUggPr8Ps6r6SLeEPf2gTbe8raMMMwTi2j4jJLxaZ9WjmMHY/FWcrE9pQ
WC6F7lz/WMO5URPPO6Bh5a6N3FZ+m+OIoXh6TTU97SHbi1e66sHakFvz12lbtDNM
PkXkTsNlJaJXhQtueDYvOdIXBj9WEbuisf45TYDsqbEjKs8TVS4vQgLjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDXy4ZB+mlt30ndifM+hS7o/eFDMB8GA1UdIwQY
MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct
MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll
LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln/wX3GI
/xJku2RbxFCgSMfIePylCQO0mQ7Icle5PztAN8n1rXlHzZiUtxniIp9xCf0xujnV
2JRPDRdDPwhU4d5yuC2m9xSQg79NF3NTncHPTh5qHRIviwl+QKxfavT+sPnPYkXP
jm+JSFo66Fr/tkTlRVOR8uU042UYlxPFYgSTYs2Fr4d2ciiaf9Mt34WBI6wfa6k0
RWjW+Mz4YETECaTCwuTsXzh4r1gzpaKnrEesyoEWluZgwsjpRUSPuL8b/fUQ4HDe
4PBR4IjkdqlVA1IWdfPqJwexCPgRGk8YJnp1s+WtKHPV2jFCW0e4U3w7gaGy/kL4
AYiSq8dCmIkduA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:35:21 2024 by rpki-client on console-ams.rpki-client.org