Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          Ve58nBiahD6kPdYXvo7c0Cq26jAszOQ8JEco0HVMhDQ=
Subject key identifier:   E8:0D:C7:61:DD:94:1F:97:54:3A:73:DB:F2:EF:83:B5:78:C0:02:FC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       018FB2D83C5C3C19489664087B5B6410CA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          11FB
Signing time:             Sun 26 May 2024 03:01:06 +0000
Manifest this update:     Sun 26 May 2024 03:01:06 +0000
Manifest next update:     Mon 27 May 2024 03:01:06 +0000
Files and hashes:         1: 0BQB3S73AQ3Ntf3aYgUI0Kkwozg.roa (hash: vFkpCIZxDI+933EisFLZPIu93Rp22gVAprVwHbBMgrQ=)
                          2: 0s-Sd2WFLKD9eYy7RiTDm1F21s8.roa (hash: aWZd5q+fLz2cedOyHGdi4Nr1hzcGfYo2vWSMqGeN35E=)
                          3: 1-I3qnAOvfhfVsxH1xXpD5cIl918.roa (hash: hhkl6UzgcMeqp5ibI0LxsLbvTliehtKFpENfEfo9uxE=)
                          4: 9-_T40YEOnqIcdIwocN7thJTf1I.roa (hash: uPMDEvRyoPAv50A+NoPB6Nb1qELktkfQl1RUaLxQPZg=)
                          5: EEFH9sMBYc0xZ_GEHX2t5M9Kcns.roa (hash: gGAHhLeJ6eDyqwLsTt6i5riMNGglaF96k/hMNvw9c5k=)
                          6: M2D1icREaoI4PC7SDqIbXPy74iE.roa (hash: Z2gKwRfNLVEfzBdDGV2KDKu42ujlftyV+IbGhmbeh/A=)
                          7: M_XR19T_wq9oKMoQrcH_104Ug4I.roa (hash: jHy7IHLc0JwocDuVIAQDEn43P7uQrU8tvlDaDe958Ng=)
                          8: Mvqgc9lt5XA_NgEFsqpa7QGFGfo.roa (hash: 0HWkiAPAcrsRN21RGGj5tKvpRLftONc3Cd06VTGZiq0=)
                          9: PiAVZl4rkAtykAd27QcDpoDW5s8.roa (hash: Z0U7sZKTltsHWTR+AraqmiU/PFt7gQApm7+PnIuiDVw=)
                          10: QWjtdv3XgWYpHvnFHDTxoDoUarI.roa (hash: 24gjtVQB/Mi11LDaL2MhWtitTiLiV2ZASAG0oMktmvw=)
                          11: RLUj9IzH2goeEW7s4Pb2PDoZL1E.roa (hash: IEMxuktKdbiQKqJGvE8uCT0Iw2GnYaN+QNT7RGryyrg=)
                          12: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: LBYI7FDicDSHWWhZuMFnuuJOHmb8KbJeDQF+fXu5NVY=)
                          13: YeZU876_oBXKW7ha6inLirUZl04.roa (hash: bzNafmMzy+kKSdJWIXfiAnx1cvvZUFOnJWumQczD5bg=)
                          14: YiInVWFnw3-xWQzKgalgc68ujco.roa (hash: VCT+6YXxGOTeCjyAEMOHQb/7NWTjTc0QSztFs2gDk5U=)
                          15: efAcP7a7O0nzq6r0pIw8kjYh_qI.roa (hash: P3Nwoegt3ckPvc8vCR/e88CNgfsY7r/IFE0GOmGPt6U=)
                          16: fb1JfJqdw69BnGYvUtiGElzXBr0.roa (hash: MlNUfZh1aUHDSkKRzk/k2J2vdcZR4l/5Jk1BEDwwqdY=)
                          17: hkgpkg305klm4CMNVK857IDYoSc.roa (hash: B8gDbHqGjGYC9ThaOTE1g2fI4Y4T6RsiXmcJl+ZQjpg=)
                          18: j5pH5G3SB0dFyQvcJraXnGu9XZc.roa (hash: tix6OegjXDCFrrBTG1FI+PcUqn3VerNemYHcgsfTvnE=)
                          19: mti0yh-lUtVrjc59rxDJVP4_Y7k.roa (hash: rE59P+EkYtF7Rmuzq6T/qwbT264BEcYd0uaVpO46pFk=)
                          20: oqeM8Lj4mS3VGSoY6eOGSA8x7ww.roa (hash: TW2saSv4nlt9WC7wBejgyZTZJ1dVcGwFZA2OrLCl76w=)
                          21: xt0orRn_8R8AoPkZMg7hV5K_W94.roa (hash: 31dB2yB2lX9jASOTbxAsu3hVwwbkrWHxmSCsqR/9iBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:3c:5c:3c:19:48:96:64:08:7b:5b:64:10:ca:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: May 26 03:01:06 2024 GMT
            Not After : May 27 03:01:06 2024 GMT
        Subject: CN=e80dc761dd941f97543a73dbf2ef83b578c002fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:aa:58:20:c6:05:7c:d0:9b:eb:5e:ba:2a:
                    9b:fb:7c:60:29:c7:9f:97:fc:16:b9:33:44:ff:1e:
                    e4:dc:22:18:04:33:6c:20:d0:93:f3:b7:ac:40:52:
                    29:5a:22:27:c3:0a:a3:46:d8:7a:c0:eb:fb:be:a9:
                    d5:79:5b:10:df:2f:c6:3d:72:8b:ce:19:e6:42:a4:
                    62:b4:a3:97:3f:13:b7:4e:66:0b:8b:a7:46:38:fe:
                    d8:c8:99:fc:37:4b:20:dd:78:bb:1d:43:13:50:c4:
                    fc:6f:21:48:8e:ed:0f:9f:4f:c0:fc:3a:a5:5e:cb:
                    8a:0e:5a:03:1a:af:0c:1a:db:a7:22:1a:17:5e:27:
                    d8:f3:52:7b:66:85:a8:d4:b2:b4:39:6b:18:a9:bf:
                    86:b0:b2:7c:08:5b:28:47:27:22:86:a9:d0:8b:2f:
                    f3:d0:95:83:96:f0:11:5f:86:f5:be:94:8a:5b:80:
                    9e:ce:03:56:52:82:0b:c3:8f:3f:3c:9b:a7:df:df:
                    aa:7c:be:67:c0:ae:5e:93:a1:95:3a:ed:c8:c2:37:
                    c5:a4:50:2f:63:c1:28:a6:08:53:11:56:9e:90:c5:
                    52:01:a4:53:3e:e8:a1:d5:9f:fa:fc:28:ee:30:8a:
                    bc:a7:0a:10:25:23:9c:0e:22:3c:96:ba:ab:34:00:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0D:C7:61:DD:94:1F:97:54:3A:73:DB:F2:EF:83:B5:78:C0:02:FC
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:7d:bc:ff:30:a0:75:be:59:90:6a:23:d6:a9:5e:c8:01:
         66:64:8c:70:ae:77:a4:0c:e6:5d:d6:d3:fe:c3:b3:2e:f6:4c:
         c7:6f:58:08:38:d8:aa:8c:ac:51:76:57:ae:cd:f4:00:3c:cf:
         7f:ba:c2:d3:1e:14:b6:c7:e9:17:09:3d:0b:a7:cd:bc:46:f3:
         11:7e:ba:71:60:9d:0b:af:30:f6:e8:f1:b5:12:90:07:34:05:
         3a:02:92:7d:bc:86:7f:a3:d1:bd:d9:10:7d:73:bc:19:aa:d9:
         1c:44:b6:2e:8c:22:ab:6f:e6:ab:77:a1:c3:cd:41:97:0d:29:
         d5:23:d8:37:8d:e7:58:4d:4f:08:98:5d:f6:d3:a8:34:46:3f:
         db:21:3d:c9:7e:3a:8f:41:21:94:79:0e:c9:31:f4:39:45:60:
         07:b1:11:95:06:7b:37:31:4a:a1:80:a7:5a:32:76:a8:93:d9:
         72:7c:8d:f0:3f:e4:af:9f:84:3c:b2:c4:3a:00:3d:d4:8f:4b:
         d1:6a:a1:90:87:64:92:2b:27:1c:e2:17:c7:56:61:9e:43:a9:
         a5:8f:e5:5d:3b:5f:fb:32:64:19:b8:71:b1:b0:0e:8c:26:2a:
         85:34:82:b9:57:48:d1:03:c7:be:76:4d:3f:8a:06:8b:9f:17:
         f3:43:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 06:51:56 2024 by rpki-client on console-ams.rpki-client.org