Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          Z4IlMD9olEAQSVdZphQfV/k5okzbnMAui31yjv3X4Sk=
Subject key identifier:   05:E0:92:8A:87:68:EB:61:32:07:83:F1:83:50:52:56:BB:D0:A6:D0
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       019060A684A70E098FA6B9DB4E1D45A490BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          1204
Signing time:             Fri 28 Jun 2024 21:00:43 +0000
Manifest this update:     Fri 28 Jun 2024 21:00:43 +0000
Manifest next update:     Sat 29 Jun 2024 21:00:43 +0000
Files and hashes:         1: 1-Hz75c0Kdq3iF63Y7B4e23qUtPk.roa (hash: TjbDrab+rhB7qnetil5D2UvKoaAXT5Ox5fYLPmCGzFI=)
                          2: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: zj6Y0qAj2kzNd7tIjZarbJ6IaIZCdzv2CWwyI3eWT94=)
                          3: C9rdaCclOasZbXZzNm9jL2wgXHM.roa (hash: emMcDORDT6ZocFxUfQcnpsNvabkXdnpF6UibalEXHKs=)
                          4: blE2J5BPpcnCJfdf2zx_iEapxtQ.roa (hash: w2d9Ivd5jpDLLQ31eAMEt0y3ygok9j+hSpDyW4NVU5M=)
                          5: ejL3GLdFPCgZiNdm2WLsLrD2G2Y.roa (hash: B8rkXFoEm4rmeZl4NkqczehdyOnQX0fxmZCtnqyGH7M=)
                          6: g740jVbVtbeZDVOLZ8RrD3KRTHw.roa (hash: 07fJ1YOa+hkeRCS0hFb2Vd4kC4fpGSvchD79siTeAaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:a6:84:a7:0e:09:8f:a6:b9:db:4e:1d:45:a4:90:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Jun 28 21:00:43 2024 GMT
            Not After : Jun 29 21:00:43 2024 GMT
        Subject: CN=05e0928a8768eb61320783f183505256bbd0a6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:f0:eb:bc:07:7a:55:da:b5:f2:90:f1:db:
                    38:45:66:9d:6b:9e:73:26:03:4e:1d:90:e8:f3:ef:
                    13:cd:13:a3:0b:f8:4d:a3:fa:e9:e6:51:16:aa:3b:
                    3f:52:d7:4e:ad:98:d8:1c:78:85:bb:73:e8:52:d0:
                    84:f4:d6:b5:98:b2:7a:23:83:4a:18:4c:b9:39:ba:
                    93:d6:05:37:78:77:cf:c9:b6:cf:da:22:48:d4:60:
                    59:0e:a5:c8:c1:84:46:e6:10:bd:85:11:cd:6d:c9:
                    45:90:b9:e5:84:03:da:7f:d6:42:53:36:da:de:0c:
                    86:2f:af:8c:4a:7a:9e:d9:13:19:7d:f0:1f:15:82:
                    8a:ff:e9:1a:80:10:60:84:1e:9d:8c:52:bf:2c:44:
                    de:c0:7e:83:d1:85:f6:4a:b2:4e:ec:49:e9:40:03:
                    12:1b:34:60:51:32:3a:c7:6b:9b:e5:d1:41:20:d8:
                    86:bc:b6:6f:1e:88:76:0a:90:8f:e3:cb:6c:ab:d4:
                    d4:7e:cf:80:a6:d3:df:88:19:77:9c:84:c8:00:05:
                    a2:52:c5:64:89:bc:1b:76:d7:bf:37:b8:96:df:ef:
                    af:13:81:62:61:b4:c0:ed:28:47:e4:22:2e:83:d6:
                    4a:3f:d9:18:fa:5c:1d:29:76:d0:d8:80:ea:4a:4f:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:92:8A:87:68:EB:61:32:07:83:F1:83:50:52:56:BB:D0:A6:D0
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:03:66:25:a0:a6:88:80:20:a9:6a:33:28:26:49:7f:f5:43:
         e2:4a:91:77:f2:19:a1:ae:0e:63:d8:77:90:22:66:e6:d9:df:
         26:7f:5b:15:56:88:9b:9a:57:0b:00:75:23:49:bc:46:28:49:
         e4:ba:68:73:2d:87:d3:74:66:77:68:18:08:fa:ec:e1:26:97:
         6d:6e:fa:6a:5c:3f:03:4d:bc:f4:f4:3a:29:93:bd:f3:c8:99:
         b9:24:1a:25:65:76:19:ae:52:4d:90:80:69:00:95:55:dd:7f:
         20:78:ba:c2:d2:18:80:c6:87:48:6a:98:35:6e:f1:f6:9e:ad:
         69:4b:cc:9e:2e:02:93:c8:25:45:b1:d2:3e:0e:c5:36:e8:17:
         f9:b1:fa:f4:08:3c:67:7d:5c:47:c2:ad:47:ee:89:45:dc:11:
         9b:10:12:51:29:4b:07:f9:d4:3d:b8:99:dd:24:db:bb:7f:cb:
         e1:01:a0:14:55:ee:38:7e:d9:45:32:73:b3:95:fa:16:36:b3:
         3f:52:bf:d8:c7:34:06:99:7a:7c:0e:f1:41:f5:96:a0:da:cd:
         a0:54:6f:6d:de:92:28:92:ae:e7:68:9b:47:85:3d:b3:eb:46:
         f7:a7:de:16:58:b8:ce:b9:e8:b1:7c:d4:1f:6e:e7:e2:0a:f4:
         bc:05:a4:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBgpoSnDgmPprnbTh1FpJC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjQwNjI4MjEwMDQzWhcNMjQwNjI5MjEwMDQzWjAzMTEwLwYDVQQD
EygwNWUwOTI4YTg3NjhlYjYxMzIwNzgzZjE4MzUwNTI1NmJiZDBhNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03vw67wHelXatfKQ8ds4RWada55z
JgNOHZDo8+8TzROjC/hNo/rp5lEWqjs/UtdOrZjYHHiFu3PoUtCE9Na1mLJ6I4NK
GEy5ObqT1gU3eHfPybbP2iJI1GBZDqXIwYRG5hC9hRHNbclFkLnlhAPaf9ZCUzba
3gyGL6+MSnqe2RMZffAfFYKK/+kagBBghB6djFK/LETewH6D0YX2SrJO7EnpQAMS
GzRgUTI6x2ub5dFBINiGvLZvHoh2CpCP48tsq9TUfs+AptPfiBl3nITIAAWiUsVk
ibwbdte/N7iW3++vE4FiYbTA7ShH5CIug9ZKP9kY+lwdKXbQ2IDqSk9ifwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXgkoqHaOthMgeD8YNQUla70KbQMB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkANmJaCm
iIAgqWozKCZJf/VD4kqRd/IZoa4OY9h3kCJm5tnfJn9bFVaIm5pXCwB1I0m8RihJ
5Lpocy2H03Rmd2gYCPrs4SaXbW76alw/A0289PQ6KZO988iZuSQaJWV2Ga5STZCA
aQCVVd1/IHi6wtIYgMaHSGqYNW7x9p6taUvMni4Ck8glRbHSPg7FNugX+bH69Ag8
Z31cR8KtR+6JRdwRmxASUSlLB/nUPbiZ3STbu3/L4QGgFFXuOH7ZRTJzs5X6Fjaz
P1K/2Mc0Bpl6fA7xQfWWoNrNoFRvbd6SKJKu52ibR4U9s+tG96feFli4zrnosXzU
H27n4gr0vAWk1g==
-----END CERTIFICATE-----
Generated at Sat Jun 29 02:00:11 2024 by rpki-client on console-ams.rpki-client.org