Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          gAqjIAZ4PhnGR9T/ZAbUgeIuiG++ACzg/cV/r8JVx2g=
Subject key identifier:   10:75:B3:C1:56:BC:A2:D0:12:7E:9F:DC:BB:88:78:95:BC:FE:C2:AE
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       0193696AC7AC562C7FCB3486D1D2C1216D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          CD
Signing time:             Tue 26 Nov 2024 17:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:25 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: mwOp/ZhWUULlzz9pols8CBqfGeLIP5SZNp7HhrMj+B4=)
                          2: KOELO1HciVURaDTciETZ3YBUUIU.roa (hash: x3F8mE4QCq4BBgk5838PUsUSD7Gl2cwYuYbe5j00Hkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:c7:ac:56:2c:7f:cb:34:86:d1:d2:c1:21:6d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Nov 26 17:00:25 2024 GMT
            Not After : Nov 27 17:00:25 2024 GMT
        Subject: CN=1075b3c156bca2d0127e9fdcbb887895bcfec2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:56:2f:b8:b7:90:81:5c:6b:5b:e2:50:d1:
                    a1:36:3f:fd:ab:ce:ce:05:03:25:06:ee:88:d3:81:
                    d7:25:70:61:47:07:fb:a9:8a:9b:40:a7:9d:48:31:
                    77:a8:58:cf:2a:45:a1:b7:6a:82:e5:a6:a5:68:30:
                    4c:25:de:c5:ec:9d:39:4b:7e:4a:78:8f:0c:eb:5d:
                    89:06:88:5f:cc:16:27:cd:d3:09:c0:a0:76:53:af:
                    75:93:a9:0b:c5:7e:fb:6e:36:65:27:84:17:3b:a5:
                    3e:ec:f2:cc:95:83:6f:a0:62:e7:b7:99:1f:f1:08:
                    e1:f4:c1:04:d8:80:bb:14:60:83:18:cd:7d:fc:a6:
                    81:6e:ae:d0:85:42:2a:65:39:13:3a:bc:53:41:0f:
                    29:4c:ef:e5:87:c6:5b:ff:99:ad:26:ef:21:df:ed:
                    5b:e9:10:b4:5d:46:a8:62:e8:64:05:57:16:09:ff:
                    19:ee:ec:da:38:7b:98:a9:46:b5:5a:b8:22:5b:68:
                    18:1a:34:cd:8b:29:05:b3:97:1d:74:c2:fd:b6:aa:
                    bd:f4:46:ad:40:27:bb:64:c6:81:57:09:14:0d:83:
                    d2:3f:7a:e0:91:4f:c8:f6:25:67:a4:4f:8a:1b:c9:
                    6d:15:87:18:f6:80:2a:d2:54:cb:d2:16:8b:9e:0f:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:B3:C1:56:BC:A2:D0:12:7E:9F:DC:BB:88:78:95:BC:FE:C2:AE
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:f8:a4:f2:d7:3f:44:96:4a:25:90:54:42:23:80:97:bc:
         12:c1:6d:f3:d8:aa:64:9a:c8:72:45:1a:59:1d:b8:4d:10:47:
         4d:73:a2:f2:41:44:e3:18:e5:6c:84:45:28:12:5c:2f:85:51:
         17:b2:ee:98:5d:cd:73:23:1c:25:00:6e:40:61:5b:50:ae:c3:
         09:8f:bd:de:a4:b1:5d:33:6b:26:7e:1d:16:92:cc:9b:79:d4:
         be:16:44:c5:6a:52:95:d8:67:62:5a:2b:2b:db:f8:e7:b4:19:
         56:46:88:a6:35:df:77:4c:b7:c6:5d:5b:6b:08:27:c0:88:95:
         b6:a7:4e:dd:10:85:13:d3:9a:e7:31:8b:05:91:5f:43:cf:b5:
         37:a0:21:fd:c2:46:07:28:d7:2c:63:c2:1f:af:5f:4f:73:f2:
         8d:20:43:0d:fd:44:6b:a2:94:4b:f6:ac:6d:a9:3b:96:75:71:
         06:31:4f:68:64:6a:c6:11:91:c4:f2:6b:98:b1:c5:7e:4d:6e:
         dc:4d:35:0e:da:59:11:d2:11:1c:06:43:fc:8e:56:b7:05:5e:
         1f:f7:b4:29:4c:54:f0:9e:94:82:bb:28:04:67:6d:76:45:4e:
         f0:c3:08:7b:51:6b:d5:64:ab:65:0e:5e:08:9b:c3:23:5d:b3:
         d3:fd:9e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpasesVix/yzSG0dLBIW2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDM5MWQyNDQxNzNmM2UxYWE4MjFkYjc3NDg0YjFhZGE1
MzU1N2YwHhcNMjQxMTI2MTcwMDI1WhcNMjQxMTI3MTcwMDI1WjAzMTEwLwYDVQQD
EygxMDc1YjNjMTU2YmNhMmQwMTI3ZTlmZGNiYjg4Nzg5NWJjZmVjMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii1WL7i3kIFca1viUNGhNj/9q87O
BQMlBu6I04HXJXBhRwf7qYqbQKedSDF3qFjPKkWht2qC5aalaDBMJd7F7J05S35K
eI8M612JBohfzBYnzdMJwKB2U691k6kLxX77bjZlJ4QXO6U+7PLMlYNvoGLnt5kf
8Qjh9MEE2IC7FGCDGM19/KaBbq7QhUIqZTkTOrxTQQ8pTO/lh8Zb/5mtJu8h3+1b
6RC0XUaoYuhkBVcWCf8Z7uzaOHuYqUa1WrgiW2gYGjTNiykFs5cddML9tqq99Eat
QCe7ZMaBVwkUDYPSP3rgkU/I9iVnpE+KG8ltFYcY9oAq0lTL0haLng9qTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB1s8FWvKLQEn6f3LuIeJW8/sKuMB8GA1UdIwQY
MBaAFOkDkdJEFz8+Gqgh23dISxraU1V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMt
NDZiZTc5ODcwYmU4LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZGQ2ODItMmIwNi00MDVjLTg2OTMtNDZiZTc5ODcwYmU4
LzEvNlFPUjBrUVhQejRhcUNIYmQwaExHdHBUVlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiP4pPLX
P0SWSiWQVEIjgJe8EsFt89iqZJrIckUaWR24TRBHTXOi8kFE4xjlbIRFKBJcL4VR
F7LumF3NcyMcJQBuQGFbUK7DCY+93qSxXTNrJn4dFpLMm3nUvhZExWpSldhnYlor
K9v457QZVkaIpjXfd0y3xl1bawgnwIiVtqdO3RCFE9Oa5zGLBZFfQ8+1N6Ah/cJG
ByjXLGPCH69fT3PyjSBDDf1Ea6KUS/asbak7lnVxBjFPaGRqxhGRxPJrmLHFfk1u
3E01DtpZEdIRHAZD/I5WtwVeH/e0KUxU8J6UgrsoBGdtdkVO8MMIe1Fr1WSrZQ5e
CJvDI12z0/2ezQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:58 2024 by rpki-client on console-fra.rpki-client.org