Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
File:                     NHtIeEj_9jUz2HwyTsxRwsPqKts.mft (raw, json)
Hash identifier:          jYJuT3hDgzTyLcoN5G9RE8cIXmbIuGqa9GRqkxAjnYE=
Subject key identifier:   12:19:65:80:5C:A0:B4:76:2C:6D:EC:69:E5:B7:84:F5:60:EC:79:83
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Certificate issuer:       /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial:       018F847E57CFCD88D1B29D9490CE8D14C559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
Manifest number:          0DAE
Signing time:             Fri 17 May 2024 03:00:23 +0000
Manifest this update:     Fri 17 May 2024 03:00:23 +0000
Manifest next update:     Sat 18 May 2024 03:00:23 +0000
Files and hashes:         1: 2HcapEz0Gu7D6h7Ws_IBTDSVGvc.roa (hash: B8x5vu6zwkQf+Be6IIzAVTqn+aHQHDow30Jj8rCs/Dw=)
                          2: 2wMbk_qVGtVccWM2YIia2pV1fbk.roa (hash: 1pxcMmNL7jdPgaKgQhChMODtIi7KVC9aYsiMrMJL91s=)
                          3: 8iMVH1niMlNTpkT0JomcP-iiv5M.roa (hash: +m3jR2gHg/q/N7Mg99y7hewVffvge00T+3iDHU4mMZM=)
                          4: DikBhCoOIRZsZwplda6_8maOOpk.roa (hash: cnoOdIE3BOu9Ztu+bMtUiwzy542lBiQBZs5aTXAQb+Q=)
                          5: EV1aSDbnyDbzpRXAQrNfNst7LdM.roa (hash: JkVoJQ5I6cv9XOkwrUu9zRo//UKv/0lBk4gOmo2rBok=)
                          6: M1mBcsQxGLKIziW_PsbHHFdIE7M.roa (hash: WObgTt6fiPcAVI+PuqxBC0jjE2LAM/RvUq4lR73cSso=)
                          7: MSR_7VYucX1j62nT-NuetbLNTLc.roa (hash: ZH5xj+BDu5offBuaSE9ktb4RRBFrbyuDDLJ+5/t0mkI=)
                          8: NHtIeEj_9jUz2HwyTsxRwsPqKts.crl (hash: 40iMKW1+OP9HDKZKDGJig1Zbgexw1pXhDrdGHuEa8P0=)
                          9: PFQxUp0toBg7wptUMAYxemMHdIE.roa (hash: QmTlUkERnUriYchmm/EdxrmyutGo0sHdfb+G+UDIuEg=)
                          10: R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa (hash: /rfbmBWhOSme2aElNSCGiojtGVvi0L44BMgtFUKta1w=)
                          11: VZrWHA2Z49zW5BumWriYZk7-orI.roa (hash: +oOnygqRxu9ctCk8OewQU5wIO/+IrzElbzbSoSkqqps=)
                          12: WCXa3q0MtZjG9uSQ3_FRTb_SMic.roa (hash: gbrqf3MK5EB9GSSNdxCzUN2nZSKZeCQQYmqkk3SUW5g=)
                          13: _DRYEaHuBZ9JZxS_7dr4WSeJ2NY.roa (hash: DkT6nTO+F5C20plKkL+17scNuazPJPQ/ROmRI9wO19Q=)
                          14: _X7VZsJh87O3KHCelK3pTyUaMhc.roa (hash: RYSqUIQiaooPxVsWqB23ebwLaB7O3t6I8RkRphka7lI=)
                          15: aTfrgPvNFobekBxinYi_dwqj18k.roa (hash: 0ionb0MoohSIKgeEoW0hZTpraUZ3Mrz2VrvUpYOhFao=)
                          16: aXJrr0AlHeXLke7y62hFJyWFeto.roa (hash: Mydv8SC0h2sUo3at7zXgpSgLBQ0iknnN5HFjOI1m3NU=)
                          17: d9MfxV0MqlPk55u3YHSonFrAWNw.roa (hash: amgyzSwF/r2YhaGKcphsq62MxVgaXOhOibJWN+XiPZo=)
                          18: kERcqft_pG_zk5ei3ZDMGiUbwZ4.roa (hash: Bu3NELL9Hqz2/9ZJg7Zi2VUM6PEebjE405iW7pQaalw=)
                          19: kZP6MCw0QIKlmDn280ska7mo4XU.roa (hash: 61p1PWgE1/QLEDUpWO8SZlN6/NpIW53FIObOwZb1Djo=)
                          20: luixh66HXVZrqWNYKfATyCLBX7M.roa (hash: 7BAUkmn7bFOsNpAHk+CLAyokqLpdsA64kxSRTk6lV2M=)
                          21: qcQ9uMtkt7KCwNpDHQ-qb7jerDU.roa (hash: dAjtEhSL3MKSox+8jXNw54GHiDBibfIKRBgT2m7R8JE=)
                          22: td4_ttmZZyDn6CGTQ0EIsnB1NqE.roa (hash: 948BPTxHrxFN3ayuuyv4YdwamazdiCaiCJkPb/KM8qI=)
                          23: z2xuoMmNOeExmNpY8SNR_pfV4WE.roa (hash: ThEFR4xMgfCPhXPtUOG0hfFz4oN+BwIs+HfTptLFXXs=)
                          24: zz-r-PF2DytCgcjR39zKCqKQZQY.roa (hash: C8ugx/qMDCIAX8Yc79P/CeVDI2v5BeKXAYjWUSiGSEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:57:cf:cd:88:d1:b2:9d:94:90:ce:8d:14:c5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
        Validity
            Not Before: May 17 03:00:23 2024 GMT
            Not After : May 18 03:00:23 2024 GMT
        Subject: CN=121965805ca0b4762c6dec69e5b784f560ec7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:1a:a4:a1:2b:29:2c:1f:29:67:bc:6a:ef:
                    62:32:51:ee:c1:ae:1a:63:e4:bc:fb:33:68:ee:5a:
                    67:3b:3e:96:a0:4b:1c:6d:e4:86:d4:76:cd:dd:b2:
                    6a:a8:00:f0:17:5b:cb:0a:4d:c3:23:5f:d1:55:b8:
                    99:4e:62:20:86:93:80:fd:a7:a1:86:1f:6f:03:63:
                    d1:af:17:32:68:e6:46:a3:15:12:d9:71:33:cd:dd:
                    4c:83:fe:d9:29:74:69:84:d8:cb:da:d2:fd:90:4d:
                    2a:67:bb:db:4d:9d:79:a2:22:5b:88:bf:4f:f9:98:
                    c4:a0:91:67:48:34:f1:11:78:24:d0:fb:37:fb:b2:
                    c7:16:bc:68:75:c6:53:a3:f3:8e:be:5d:d8:ac:b7:
                    5b:e6:fc:12:a7:13:8c:15:6a:93:d6:6b:a9:16:30:
                    44:85:3c:91:52:dd:b6:2c:36:67:28:59:b7:d9:12:
                    da:c4:37:01:ad:9b:19:a1:3e:1d:82:b0:25:9f:b3:
                    b7:f2:6f:be:c6:8e:df:61:13:b5:de:ec:79:46:e7:
                    75:4f:3c:2a:96:dd:62:0b:a0:47:d1:d9:20:88:f7:
                    b3:41:f0:4f:43:51:cb:fa:c5:2a:89:60:91:75:21:
                    b7:00:9e:0e:07:94:cc:19:ff:37:58:15:c0:35:e0:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:65:80:5C:A0:B4:76:2C:6D:EC:69:E5:B7:84:F5:60:EC:79:83
            X509v3 Authority Key Identifier:
                keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:67:28:28:d8:b8:21:6d:0b:cd:17:f0:b3:e9:cd:29:2a:f3:
         22:f3:55:ea:ac:da:01:0c:0e:7f:89:1f:45:23:8f:57:60:b4:
         5d:c8:24:3a:0d:e7:ca:00:8b:01:30:a3:77:af:66:89:fa:dc:
         d9:94:c4:fd:ce:7b:87:98:0c:84:07:75:e7:9f:d7:5a:0b:cc:
         59:09:ed:a6:93:4e:7c:42:64:fd:1d:b4:a4:33:e5:af:07:42:
         7c:da:65:7c:b0:59:f3:a5:c9:d2:5e:06:85:c1:54:eb:1b:33:
         e5:b5:27:b4:7d:7c:16:b5:66:b7:99:e7:cc:e7:be:e0:3c:ad:
         98:c6:a4:c7:c5:50:a7:04:c2:4a:7c:2b:71:f9:82:4d:9d:56:
         fd:6b:30:80:2b:76:9f:eb:fb:ac:4d:f1:f7:73:74:ef:ba:9c:
         c6:92:eb:82:11:cd:b2:de:34:c0:2a:8b:d5:8b:98:c9:f3:66:
         0a:66:4e:9a:bc:e8:fc:3c:b9:1e:ee:1a:b8:5e:69:36:47:82:
         12:a9:8f:de:d6:6f:9e:0f:56:b7:88:0a:17:ed:98:84:c5:66:
         b2:c4:d6:db:06:f1:71:3a:90:e8:24:d0:92:2c:d6:22:17:5b:
         25:45:d7:fe:26:3c:02:61:af:6d:c0:e2:71:aa:66:ee:ea:e6:
         d4:74:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:57:50 2024 by rpki-client on console-ams.rpki-client.org