Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          em1lzgtXXEqItcxfma/0Pb63uDoFa9jP9MLN0sde7fo=
Subject key identifier:   0C:0C:10:15:67:D7:6E:24:E7:A8:F9:78:BE:64:C0:7D:1B:27:B2:F2
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       39D156CBB543F03FE72619AC015B6562BA8C7070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          061C
Signing time:             Sun 26 May 2024 07:47:47 +0000
Manifest this update:     Sun 26 May 2024 07:42:47 +0000
Manifest next update:     Mon 27 May 2024 11:45:47 +0000
Files and hashes:         1: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: /TS+xVjdatYm4jqPQm3Vb7Qstw3xuSh631g1BBXYLl8=)
                          2: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: yayr80b2pVGm37gfY6eM4OxfsNk5hocxIMW2ZgHjO0E=)
                          3: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: x5isy64xGYdjZMpSzWO0XRvyXtS7KB6OkPd5AAI8uoY=)
                          4: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: vqvUQ2u63e8akivPMUERgU1A4YcSYZ17xUXZzfdPbps=)
                          5: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: 6RIJ+FummlllNKAkXQiAjBg3SRtIPtGWXG4E6NUYOLY=)
                          6: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RFCEZxxca5K7Yue8Y+zTDIF6mxMSjpiyodhBTqIw324=)
                          7: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: HWJGrPoxdEpa21vwnZ23r/yaznatESCUTNEfxAyd7wE=)
                          8: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: P8rI5fxsa/oAFJDHVKROpV6JCAcAB0aWP+tz+Fkr2zk=)
                          9: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: zQoNHBw2v46fv+8bbctRlWM3ZvmZgYMxrVZ1YKEe1NU=)
                          10: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: K2kGf3pURuZB0vF4L5PxX9ZDCnbpUchkT5OeO2GAKlg=)
                          11: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: xaHVqjQe4xklu3c9RDj1juVWIA52bHR5bd6kcKdRkpk=)
                          12: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: Efj78ySzTN+yhFF0LxGZDp78xStViGZ/OCko8r4lEhA=)
                          13: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: utrq3kNZHnRBnFUOPxeOLAFXu4k71GlAKAZCdI304OU=)
                          14: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: hMysjtDF6ogvqcvf1+nkPnJEzeA06UYUP3+FFBCdGaw=)
                          15: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: Y9kA2AC1/mS5DTM9FUCdVF+6jcrPXoA0OhAxY9oczcU=)
                          16: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: AHVRH7Ey3ApQ7qA5XZbgmn7MVYFIUdKE7chP0NhxE2w=)
                          17: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: MG2ZX0t/+W28mjDOfy/S0QZmhyZom4ZHHloLsYxn/bk=)
                          18: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: YoHrKhuh5zwJRUhPwFTvO0QbUmag7U9Md6NBGICTXXw=)
                          19: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: pzlqzRMA6yz9ogDxeAA40cJEy1hvuhGyW1X1aVO9faM=)
                          20: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: Nw7dC8Chnn+cXKgdr1DMICPmyQRHPxe+Al0fzoaMSIw=)
                          21: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: R0LI6r7VaaO2MwaikGIRsKT/yw9MmRIHFQcvcNFbIso=)
                          22: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: +EZRijBMEtUoaTn1gcXE6ou+e7DE+cNd9LeaEDnT/lE=)
                          23: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 3ae24uPKULWDSlJHUrRVkRNVHdbHenU3RXxrGDU+eUU=)
                          24: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: GeEV8XvioxewSg3O4usbfHwerYhTtKp37XOX+gKE8z8=)
                          25: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: M3/GWHRpSxiYng8L1MnXXBoOz1Yod7dvr35ljXhRnFA=)
                          26: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: nra9M7oOL084kUhDb94JMKTRN1Dz8z2J49Rj7RF+AAE=)
                          27: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: Yyn3/wa7vfc7O62FKkGu7UiMALSDwNUSjrN397Zsk1Q=)
                          28: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: IufHCjKtyY/IAaaD+YVfr6iCNOwSGI9NImYb0KRs7Ts=)
                          29: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: TsJ/D6PA9op859Jun9GcoHimLqaRBzVV8BdsRU0RrfE=)

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d1:56:cb:b5:43:f0:3f:e7:26:19:ac:01:5b:65:62:ba:8c:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: May 26 07:42:47 2024 GMT
            Not After : May 27 11:45:47 2024 GMT
        Subject: CN=0C0C101567D76E24E7A8F978BE64C07D1B27B2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:e2:0b:a0:db:81:37:29:b3:8c:e6:8f:b7:
                    69:dd:ed:27:cc:9f:4d:8c:b5:f8:c2:d6:82:b9:d3:
                    00:15:bf:ae:be:09:c6:c9:05:58:1f:f3:3b:ae:cf:
                    2a:2c:d9:f2:42:d2:b4:fe:9f:d6:7b:c4:da:a5:1b:
                    93:52:28:a4:46:2c:e3:ba:ec:02:67:f0:9d:48:1a:
                    e3:c2:32:56:bb:b0:63:35:f7:3d:ac:bb:0c:1d:bb:
                    a2:c8:75:84:76:ef:bb:11:60:46:84:40:b8:0a:ed:
                    ee:6b:95:4e:5e:2d:2b:fc:8e:65:1c:c6:80:fb:42:
                    a9:5f:15:71:49:3f:06:ae:2a:29:99:e2:10:44:b2:
                    3a:b2:de:ca:5f:5b:0e:f4:e1:f1:00:52:c8:e7:50:
                    20:0c:9f:e6:04:69:6a:cc:02:43:e4:b6:d9:d0:fc:
                    92:e8:f9:0f:9f:8b:f7:ea:38:bb:d9:7c:e5:f7:85:
                    f2:41:a9:62:f0:16:ce:01:8d:bb:fc:6e:23:2c:f3:
                    2d:29:e5:0b:5c:b6:ce:a1:59:ef:31:94:2c:6f:0e:
                    27:02:c5:64:5a:49:ef:32:20:77:e7:87:42:3d:42:
                    35:4d:41:40:02:7e:69:38:c6:25:c0:ce:4b:44:24:
                    f6:16:12:25:42:47:73:ad:c2:9d:54:56:8e:83:57:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0C:10:15:67:D7:6E:24:E7:A8:F9:78:BE:64:C0:7D:1B:27:B2:F2
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:07:07:c3:56:0a:99:fc:22:49:90:31:04:8e:e4:d0:78:18:
         eb:e7:00:44:2b:6d:f2:bb:53:1c:8d:47:72:0f:14:b9:78:fa:
         f0:3d:30:13:34:75:e7:11:06:94:be:85:ef:e8:31:f9:05:2b:
         3e:a8:6c:ca:f0:44:65:e5:44:b4:a0:50:84:98:e1:c1:5f:56:
         82:06:00:f7:b7:6c:ec:ea:13:20:17:f2:c6:98:33:a1:12:6d:
         ce:ae:04:e2:57:cf:56:2e:85:95:b9:70:02:56:58:86:46:ff:
         69:50:98:f6:29:06:02:75:06:0d:9e:43:a1:f5:d9:9c:fa:6f:
         e6:26:9d:78:12:61:f7:d0:09:53:35:4a:14:8b:3d:36:61:75:
         5d:81:3a:b3:e5:d1:e9:19:f7:c5:7a:81:94:ee:55:ec:5f:3e:
         0f:18:1e:ed:b7:f7:18:08:6f:08:a7:dd:76:89:16:14:be:fe:
         a7:ba:cb:9c:d9:21:51:9a:0a:2d:62:93:14:05:e4:79:56:09:
         56:f0:5a:a3:81:18:1a:4a:f9:70:81:3a:2f:fd:60:48:fa:cc:
         2b:97:44:ca:22:f1:d1:21:0b:20:fb:85:84:2b:d6:af:79:15:
         76:d3:26:1c:19:ce:46:6b:8a:cf:ad:d0:7a:09:08:2c:f5:38:
         89:a4:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 13:19:43 2024 by rpki-client on console-ams.rpki-client.org