Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          BAB65tF/NlHYYh519zFd63OThki9RQt3Ej1NltxrWLU=
Subject key identifier:   9E:5D:0B:0F:57:D0:80:3D:C7:59:79:4E:84:74:C6:C6:13:8D:A4:AC
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       019041F7316BFE6E88C94112961AA753C193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          11E5
Signing time:             Sat 22 Jun 2024 22:00:36 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:36 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:36 +0000
Files and hashes:         1: 1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa (hash: 8kDULxw9z3gXp/AD8a9Ag0dsti3Un/ZQcx/ea3XVp2o=)
                          2: 4ESnHDkMiH3VXGRcMNV45lvdzjg.roa (hash: rDXZb2CTO6v2yflTTZ1nHz2ARvrDpwcC2SH66LgceiE=)
                          3: 4vSY7pcoyniRcE3BWoDJLaST4-U.roa (hash: HCZT/bqiAdnxIIXJTkL3KadJYBbBM96tekJW+BuWlk0=)
                          4: JRto1SpfOuQj6CKvlY4uvGJlmII.roa (hash: hdeALEo8DdHiI5yTOpRIUivE+ZNA7VdIwMV1gQZxJP0=)
                          5: N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa (hash: qZQrpyn6aWSV4kQaR+O5PVRIYSKD899TM8gSvZMHSU4=)
                          6: QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa (hash: E7j2A0fb63PUius9/NjwAnAHElJQjbTAwKyb/Xyqlb4=)
                          7: WyZgsc0Tc0CbMTj7VEelJJT0OzE.roa (hash: +8CECyDU8Lf2wiEDcrbQGLaT/eNSQMro+xNLHS4ZA6g=)
                          8: YvRh5nVaU7K5TXANQLzq2dzn0x4.roa (hash: /v2GM26UAgEo26LyzBlzUgLlrq+4Jdy/et1rP8m/Sl4=)
                          9: k9sacxqE5VMeV0DyL19Mgpzo8G4.roa (hash: VmEoBQ/fM26DB2eO+rQhBj5j8Dsb6aDwvg/4uQL5aYs=)
                          10: lEPdcc3TVtidvWs5KTQ69HbSR2A.roa (hash: /dFMBz17yqrJ0twDw6zw0iBof5mviWTvPR+JOuTK7yU=)
                          11: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: RFeoorki5OWxxI6ZlnS6vS238Ru8xzeXYpcxcxDMbUQ=)
                          12: zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa (hash: FrmnmQQ9K1mJbMIqaBLQrzFnV+W7WlUbG9WECYp7PJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:31:6b:fe:6e:88:c9:41:12:96:1a:a7:53:c1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Jun 22 22:00:36 2024 GMT
            Not After : Jun 23 22:00:36 2024 GMT
        Subject: CN=9e5d0b0f57d0803dc759794e8474c6c6138da4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:9f:3a:c4:24:c3:07:17:71:93:7e:ce:44:
                    f1:7a:24:ef:00:da:cd:cd:d8:06:38:1f:76:c8:37:
                    a0:ed:da:d8:7d:a6:fb:eb:ea:94:f2:ee:f3:ee:3b:
                    a4:c1:62:8b:45:eb:75:af:5e:dd:2f:ba:21:66:12:
                    24:34:d9:d0:59:d8:03:28:1a:51:7f:32:eb:48:91:
                    12:f9:65:b3:f4:69:86:a2:59:35:2b:6b:14:b7:06:
                    59:6b:0c:ea:0d:93:52:41:88:38:a5:4b:fe:d9:1d:
                    aa:6c:4f:40:32:09:a2:13:ea:ac:b6:98:e9:9d:19:
                    d2:23:b5:b0:7f:ad:1b:40:91:90:71:b5:3f:c0:ba:
                    29:4b:c9:01:22:51:39:69:b9:9c:f5:42:c8:55:10:
                    cf:33:a9:b3:69:fe:53:a4:47:57:cf:90:2f:c4:7f:
                    6b:42:0d:fc:d6:35:99:48:08:27:52:f8:e2:64:58:
                    c9:04:a8:a7:31:f6:6f:bc:d6:de:de:14:cd:83:ec:
                    4f:c5:0a:05:35:56:47:9a:db:f2:3b:5f:49:cf:f5:
                    33:ae:77:72:bb:71:cd:d3:28:5c:d4:7a:19:2c:7e:
                    60:8e:e4:23:a3:db:0a:d9:de:09:46:0f:66:fb:c5:
                    ab:e0:02:9a:16:1f:dc:a5:dc:57:d4:12:29:d3:ce:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:0B:0F:57:D0:80:3D:C7:59:79:4E:84:74:C6:C6:13:8D:A4:AC
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:0f:5e:30:d2:b1:ec:6f:bc:17:19:ef:5e:87:50:31:95:
         61:51:d8:76:19:f6:d9:a2:e6:6e:23:b0:5a:3f:2c:fd:e4:01:
         d9:41:16:3f:2d:58:17:01:44:8d:9f:a8:48:74:56:11:98:39:
         26:62:a3:c4:b2:d7:a6:ef:24:b4:a5:6c:24:dd:d9:c9:8e:95:
         64:70:e8:3a:be:63:b4:a7:1e:be:e9:33:42:af:1d:95:71:32:
         d7:f2:de:53:28:7f:87:13:e6:54:ce:7a:23:ba:d6:c7:63:7a:
         3f:59:fb:14:6b:9e:28:89:94:c7:ee:98:7f:49:d3:9f:42:8d:
         54:b4:1b:c1:0f:bb:13:b3:2b:b4:50:cf:7a:71:99:16:c1:bb:
         b6:45:9c:f6:f5:bd:b0:8d:96:b3:6b:57:7e:60:45:33:b0:0e:
         1f:dd:9a:e2:31:c9:a1:d9:5b:c8:eb:ed:bf:80:d6:85:4d:ac:
         63:a2:8e:df:57:b7:c9:44:25:8e:ea:cd:76:04:49:8c:dd:04:
         64:e5:38:7d:b6:25:db:51:db:0b:a5:30:cd:21:5d:40:10:40:
         65:5e:ba:7f:6d:2e:88:a0:09:47:82:fb:90:60:b0:d5:a8:ee:
         17:71:7a:a5:06:59:db:49:98:dd:93:0a:a8:58:71:5e:f3:5a:
         d0:cf:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:50:35 2024 by rpki-client on console-fra.rpki-client.org