Manifest

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
File:                     60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft (raw, json)
Hash identifier:          qkmnRwNRWVlslSbB4ZljbhYUJxxTDPBTuBRT2cmr+b0=
Subject key identifier:   11:FC:BD:32:15:7E:EF:5A:73:51:07:C4:F9:E1:F6:49:AA:D7:0D:28
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       0B5B8BF501587628FA08190BC03B9513FA036E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
Manifest number:          0820
Signing time:             Tue 28 May 2024 17:10:42 +0000
Manifest this update:     Tue 28 May 2024 17:05:42 +0000
Manifest next update:     Wed 29 May 2024 18:27:42 +0000
Files and hashes:         1: 39312e3230372e3132302e302f32332d3233203d3e203438313132.roa (hash: nGWxVDfCcoNhui7XSuJwQEjI2Yq/lpsocEF9ao2GseM=)
                          2: AS57984.asa (hash: T/3wnUQBu3dogRRWR4d0rLJRqpn4UUUS++3nRts7UOQ=)
                          3: 3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa (hash: mJK/QqdXISPbzdErxzz1xNK4WgEo28hgvb5Tl8psM4k=)
                          4: 39312e3230372e3132302e302f32342d3234203d3e203537393834.roa (hash: T7cnU6dIHnE9Qt1SeZ7aYPvLFEvwoqKgfqXZr/6X0Nc=)
                          5: 3138352e3137332e31362e302f32342d3234203d3e203438313132.roa (hash: DQneeMPd5oFhChh8uQbR61jkBU9sRRyT6wxOs9FDi1s=)
                          6: 34352e38392e3136342e302f32322d3232203d3e203438313132.roa (hash: 8C/u8p7mAX/w+y5RZv6caR1poFfXzaGHtmlzpWICegw=)
                          7: 323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa (hash: QWB3npTQd4hoGuFheiuQtfkK1pm0FBcU5rHpDV29zTg=)
                          8: 326130623a326630363a3a2f33322d3332203d3e203438313132.roa (hash: tS3s8NOm3PUr3OC+YuFNM0JOslgdm/+Z7ZrWZzxnLGg=)
                          9: 326130623a326630313a3a2f33322d3332203d3e203438313132.roa (hash: 81bYNAYo0aBXOiyEsbtEPZwsWwULke2xk8Z8g55+XaA=)
                          10: 326130623a326630303a3a2f32392d3239203d3e203438313132.roa (hash: 2b+yNr3jQl01GnZ8o7Hu+N955uc/naAXLAtoIcHOBDs=)
                          11: 326130623a326630373a3a2f33322d3332203d3e203438313132.roa (hash: 3XPueBZ87ULt/WZrES3a2EeFBc4pN4mD3KOkiT+5Bho=)
                          12: 326130633a343230303a3a2f32392d3239203d3e203438313132.roa (hash: vmwjzotJHc0iNMmBvnIWhWmps0AgjLkmxffKKpsX8MU=)
                          13: 326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa (hash: 4CSwVj5li/d3+mlT8M+AsnJkF0l982ZEM1VqEr65me0=)
                          14: 326130623a326630343a3a2f33312d3331203d3e203438313132.roa (hash: aCWx/geC9RHpApMZAcwgBydh4RmTW7EWqkaUy9PFUZY=)
                          15: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (hash: qjvHAvWuefpankx+PP1dbh0vsp7/TGRfB6/rd0RcwtQ=)
                          16: 326130623a326630323a3a2f33312d3331203d3e203438313132.roa (hash: du5BDdFZZJI6ojNhu2Zo7u1xzFS0PlvPf4p6thbswFs=)
                          17: 326130623a326630303a3a2f33322d3332203d3e203438313132.roa (hash: xJFmnRKSAu9WMuJ2EG8WdzeovKbHBnDwsoyrNikpRug=)
                          18: 3138352e3137332e31392e302f32342d3234203d3e203438313132.roa (hash: Fi8mrgBlGmLbMe/Uc7UqzOPxq2VG+JWCzQ5ojH9+9NU=)
                          19: 3138352e3137332e31372e302f32342d3234203d3e203438313132.roa (hash: X051DqGzdwXRjmB3e/AA9NiUuWNow/OBsi2sYRi/O9U=)
                          20: 60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl (hash: IxnAl8yUCk/KMc3zgCJqYVsKIASdMfbt0pbLVKC6Bus=)
                          21: 3138352e3137332e31362e302f32322d3232203d3e203438313132.roa (hash: g85O2vSXo1lriv58wuGvhiw3CUYccBMxt4uYGgDPhh0=)

Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:8b:f5:01:58:76:28:fa:08:19:0b:c0:3b:95:13:fa:03:6e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: May 28 17:05:42 2024 GMT
            Not After : May 29 18:27:42 2024 GMT
        Subject: CN=11FCBD32157EEF5A735107C4F9E1F649AAD70D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:83:90:c0:43:9c:59:8d:7d:3f:fb:4b:48:
                    f3:31:b3:b1:51:f3:65:7c:2f:c5:64:dd:24:9e:4c:
                    ec:7d:a8:65:90:f2:6f:04:dc:1d:8f:67:a6:70:3c:
                    78:48:22:cf:f7:99:1b:aa:23:23:22:0e:91:d9:09:
                    41:21:7e:7d:e5:79:5b:58:89:1d:59:b1:0b:ee:04:
                    a1:54:80:05:36:45:56:df:42:76:a5:c9:15:9e:0e:
                    a2:a0:6a:3d:8a:9c:b9:f9:21:d9:ce:5e:bf:e2:67:
                    6f:6d:83:f8:66:99:02:1d:b4:ce:47:d0:97:e0:43:
                    9b:3c:db:d0:11:da:c0:bf:5a:d4:f3:a7:73:6a:44:
                    f0:48:56:cf:fc:8c:90:3b:a5:15:a6:52:0e:d3:76:
                    fe:0f:0b:ad:a4:ca:c6:33:62:e0:25:49:42:88:25:
                    45:8b:d0:58:96:e7:d0:89:1d:24:b8:b6:f0:0b:8d:
                    1a:b6:5b:79:7a:b9:a3:60:e1:84:b5:b6:5e:d4:51:
                    a5:20:8b:33:4c:89:76:a9:25:7e:f5:b0:05:9a:ff:
                    c9:18:0f:e6:13:cd:95:c4:7c:0c:1b:76:eb:b2:b2:
                    bf:1d:37:75:7e:0f:20:ed:25:83:81:6b:41:ec:e8:
                    8c:44:b4:47:82:9e:3a:7f:4a:81:8d:f6:f5:2c:4a:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:BD:32:15:7E:EF:5A:73:51:07:C4:F9:E1:F6:49:AA:D7:0D:28
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:41:84:db:b9:74:9a:81:d5:7f:29:b3:40:b8:15:ae:b4:
         8d:ac:64:df:86:96:d9:3d:31:d4:43:d7:ce:b3:f2:cd:41:20:
         c8:82:9f:57:e9:85:c5:c0:1d:0a:3f:af:f9:b8:59:2e:27:08:
         41:0a:d3:f8:1b:09:25:2c:9d:78:b0:d9:91:e2:35:85:d9:70:
         fd:18:f7:e4:d3:c8:bf:d4:16:3d:42:6c:7c:88:f8:c5:27:a1:
         c0:44:57:c7:f2:f8:76:78:62:b5:1e:65:8b:51:49:ec:a2:50:
         75:8a:ed:c9:77:fb:b4:7e:5b:04:26:ad:78:8b:66:f5:61:c8:
         c5:48:81:19:93:65:b6:c5:83:f1:d3:a5:24:c4:a5:76:29:f7:
         f5:29:5e:97:bc:98:a6:ea:6e:12:42:21:e9:77:75:cb:8a:72:
         12:6e:21:00:83:03:2a:e0:4e:86:c5:1c:af:16:4b:a2:67:ae:
         2a:26:9f:5d:bd:d9:9f:3c:0e:78:5f:a5:d1:4d:3c:2c:83:cd:
         f8:87:be:de:e5:a8:c5:1f:6f:85:dc:8c:9e:d7:b1:bc:bf:c2:
         ec:cc:2b:f9:e8:30:e9:7a:16:53:61:b4:2b:4d:6b:03:f9:25:
         89:23:5a:2d:e0:6f:bd:c2:76:18:d5:3f:f5:2f:fa:4a:5d:41:
         4a:ed:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:46:32 2024 by rpki-client on console-ams.rpki-client.org