Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          0RexyMf05+3XdIanjxg2JTQ8arz0BvAFRze4HjRzBDk=
Subject key identifier:   EE:45:1B:4E:D4:D5:C0:8A:B3:D7:AA:1E:7F:C5:5C:65:9A:DC:5F:C0
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019355AD3440CC475411DB95C9949E805C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          1154
Signing time:             Fri 22 Nov 2024 21:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:34 +0000
Files and hashes:         1: 52S3qFuAEOu2cJAAG5yEN7d75HI.roa (hash: 0UUUuupDKbDdKT5CcFpwnifQEcRyxQAROOapNw4PEJw=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: aAufEBvHn2qatIy2Xt5abMaLSkZqrXF+BgupAsgT0w8=)
                          3: AM3Gl6V4mODXAYH2zrjkhmpEwac.roa (hash: 7LPSeZcpfcq+tKGq3ezYjoXsf5i+fJ/2Nbjjl65fOu0=)
                          4: IH_AYmfxmIVvVpXLWrHnrosNISs.roa (hash: gMaPM97NSCKW0dPWvkpUsD8Cw3fBBYQmZzm4f4xKqdI=)
                          5: MmcWaOxc8b75v3m0nIJLwxwwiRc.roa (hash: tP+mYqn80gjkL5jn34IsjubW7Icx82DrQQX/N+WWlos=)
                          6: O2Si-maoDhbA700hr7J4xPyht0I.roa (hash: cKoLuPKvA9gH7EprttyM/nNWA4zQjqRgTiDsHyMh054=)
                          7: QZk5THhj_54mwvOcIXlibi-sSq4.roa (hash: 26jonnwQ7jr7XOBqoDSEAnOyg2b+nTaIwQXgnNWKwD0=)
                          8: Q_s5-W5c0EszMwd7pZMdxF7AX_k.roa (hash: EKjhxPxkoX7cR5+akdQlEBGujqSHCJOWGCkovIzsZ+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:34:40:cc:47:54:11:db:95:c9:94:9e:80:5c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Nov 22 21:00:34 2024 GMT
            Not After : Nov 23 21:00:34 2024 GMT
        Subject: CN=ee451b4ed4d5c08ab3d7aa1e7fc55c659adc5fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:9b:4e:44:2a:75:dd:bf:d2:04:05:05:77:
                    3d:5b:75:10:eb:77:d3:8e:38:84:48:d3:dc:9e:04:
                    ca:b1:f2:b7:68:27:74:85:5e:ca:25:73:6f:da:e2:
                    1d:c8:8d:ef:81:b6:b1:09:82:86:1f:fe:f1:e4:ec:
                    6e:3e:ba:df:e6:3c:c5:d1:93:c4:fa:f2:3e:ff:38:
                    80:5d:88:ba:04:72:37:4d:8f:83:55:89:a7:c3:0c:
                    cd:16:8a:fd:a5:b0:1d:1a:9f:66:73:a1:a2:4c:01:
                    5b:2a:a8:52:e0:45:16:1f:4c:31:51:66:50:5f:9a:
                    9b:38:66:a9:5a:35:e2:eb:58:32:2f:cf:c7:0d:b4:
                    2f:23:7a:dd:22:47:8f:38:c3:c2:00:6b:12:9f:2f:
                    69:0c:04:28:a6:34:8b:eb:8b:66:6b:c9:10:47:c3:
                    58:f4:fa:24:73:d4:04:bc:83:a1:35:44:53:5e:7b:
                    03:8a:10:eb:1e:bd:e3:e4:0a:5d:08:4e:b1:e8:e7:
                    cf:67:1a:d6:a4:52:b9:da:d3:7e:82:29:88:e0:d9:
                    ab:64:29:7c:d7:b7:ac:42:a7:d5:0f:72:98:2a:ce:
                    e3:17:33:b1:72:9c:8a:d7:22:5e:ef:30:7b:23:cd:
                    16:f1:81:08:5c:a3:7a:bb:a8:77:97:73:52:09:ed:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:1B:4E:D4:D5:C0:8A:B3:D7:AA:1E:7F:C5:5C:65:9A:DC:5F:C0
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:39:8f:ce:67:e9:f5:7f:9d:8c:0a:64:3a:1e:c6:69:e0:
         51:cc:43:7c:d1:f7:c9:14:6d:fb:6d:e3:3b:2a:b4:80:fe:4d:
         5b:26:a8:29:cb:0a:f1:30:a5:20:02:17:02:a4:e3:ad:8a:82:
         77:55:8e:0b:99:e3:69:ac:b1:83:80:e4:59:77:e3:47:a3:d2:
         81:7d:b3:e6:b5:7f:b5:48:14:9f:f2:f7:d4:79:12:4a:0d:86:
         12:f9:d2:2c:82:f1:f3:2a:fd:8d:fd:d1:fc:97:52:f9:82:04:
         b8:00:07:33:90:a3:a7:b2:9f:81:7d:2d:4b:16:93:d9:7d:91:
         83:95:e0:ee:53:69:a1:b1:02:5c:39:b1:9c:f8:c6:d6:3d:55:
         b1:2b:15:c6:f3:e1:57:99:52:94:6f:3e:4e:73:3b:0d:16:de:
         5b:3f:84:44:3d:93:26:9d:c7:e4:c1:47:d2:71:94:e1:e6:8c:
         5c:8d:64:f9:ff:0a:25:65:a8:05:94:0c:36:e1:d1:60:43:73:
         0b:b2:5d:f3:cf:53:fd:cb:49:70:a6:83:ad:88:2c:cb:c6:d7:
         f7:78:c7:82:07:3e:2d:41:49:b4:95:90:de:61:5d:f5:89:f0:
         5c:d4:96:60:3c:3e:65:47:da:f4:73:45:88:aa:7d:09:cb:26:
         44:cc:f6:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrTRAzEdUEduVyZSegFwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjQxMTIyMjEwMDM0WhcNMjQxMTIzMjEwMDM0WjAzMTEwLwYDVQQD
EyhlZTQ1MWI0ZWQ0ZDVjMDhhYjNkN2FhMWU3ZmM1NWM2NTlhZGM1ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ybTkQqdd2/0gQFBXc9W3UQ63fT
jjiESNPcngTKsfK3aCd0hV7KJXNv2uIdyI3vgbaxCYKGH/7x5OxuPrrf5jzF0ZPE
+vI+/ziAXYi6BHI3TY+DVYmnwwzNFor9pbAdGp9mc6GiTAFbKqhS4EUWH0wxUWZQ
X5qbOGapWjXi61gyL8/HDbQvI3rdIkePOMPCAGsSny9pDAQopjSL64tma8kQR8NY
9Pokc9QEvIOhNURTXnsDihDrHr3j5ApdCE6x6OfPZxrWpFK52tN+gimI4NmrZCl8
17esQqfVD3KYKs7jFzOxcpyK1yJe7zB7I80W8YEIXKN6u6h3l3NSCe28cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5FG07U1cCKs9eqHn/FXGWa3F/AMB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+g5j85n
6fV/nYwKZDoexmngUcxDfNH3yRRt+23jOyq0gP5NWyaoKcsK8TClIAIXAqTjrYqC
d1WOC5njaayxg4DkWXfjR6PSgX2z5rV/tUgUn/L31HkSSg2GEvnSLILx8yr9jf3R
/JdS+YIEuAAHM5Cjp7KfgX0tSxaT2X2Rg5Xg7lNpobECXDmxnPjG1j1VsSsVxvPh
V5lSlG8+TnM7DRbeWz+ERD2TJp3H5MFH0nGU4eaMXI1k+f8KJWWoBZQMNuHRYENz
C7Jd889T/ctJcKaDrYgsy8bX93jHggc+LUFJtJWQ3mFd9YnwXNSWYDw+ZUfa9HNF
iKp9CcsmRMz28Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:51 2024 by rpki-client on console-fra.rpki-client.org