Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File:                     16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier:          HqXJlnjv24N6PCjsS0pbBwOR2xDAIjHGG7Ckb+9/tX0=
Subject key identifier:   E1:39:56:28:CC:53:95:16:B1:56:29:78:6F:F2:C3:C8:5C:FB:CE:53
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       6AB5E5F0038E26E3A2BAF36BC3A3C4E5BD94EEF7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number:          BA
Signing time:             Sat 23 Nov 2024 05:31:30 +0000
Manifest this update:     Sat 23 Nov 2024 05:26:28 +0000
Manifest next update:     Sun 24 Nov 2024 06:42:28 +0000
Files and hashes:         1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=)
                          2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: kfWKfsfwWVRNVtjvnzRrFSbX0ATXoAm/e6DRHliHhWE=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b5:e5:f0:03:8e:26:e3:a2:ba:f3:6b:c3:a3:c4:e5:bd:94:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Nov 23 05:26:28 2024 GMT
            Not After : Nov 24 06:42:28 2024 GMT
        Subject: CN=E1395628CC539516B15629786FF2C3C85CFBCE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:b3:56:2d:c8:3a:d7:52:25:b4:6d:f6:35:
                    6c:53:e1:e5:8d:e9:61:66:9a:5c:7a:18:e7:56:fc:
                    52:cb:a2:13:7f:47:ab:0a:8e:b7:04:b8:30:46:dc:
                    de:0d:17:aa:89:97:f0:c7:c1:ac:47:b4:05:b9:01:
                    0d:33:31:ff:27:a1:88:98:6d:6a:8b:5d:aa:19:67:
                    fe:5a:e7:0f:ff:22:d6:f6:9b:00:7a:df:af:76:9a:
                    4d:79:4f:9e:d3:c5:01:09:b0:64:0a:f5:51:07:4b:
                    65:79:7b:dc:54:39:51:c0:92:59:19:f0:26:31:14:
                    4b:b2:11:8e:8e:31:7d:c3:30:d1:5a:14:7c:f6:68:
                    00:db:7b:7f:18:11:17:09:87:dc:e0:d5:eb:bf:a5:
                    48:4d:05:e3:68:06:3c:81:c7:03:6b:18:b8:d9:a1:
                    a8:27:33:49:b7:43:cb:03:6f:02:c7:67:ba:a1:83:
                    2b:52:bc:cc:d5:0e:d3:ff:70:07:16:26:13:69:f6:
                    5d:c3:36:ca:76:8b:52:8e:ba:8f:16:26:22:4d:10:
                    ef:64:1b:29:a7:96:68:e6:23:4e:e1:b6:fd:ba:4d:
                    49:36:a5:cf:73:5f:15:52:b5:e3:11:70:3c:0f:04:
                    9c:85:cb:04:2b:81:df:1d:94:9e:bf:bc:7b:4b:c4:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:56:28:CC:53:95:16:B1:56:29:78:6F:F2:C3:C8:5C:FB:CE:53
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:86:38:7b:3e:7c:d4:5a:18:cf:56:dc:6e:09:8a:14:03:92:
         65:70:4e:b4:94:ff:fd:8c:b2:7a:9e:69:8f:f8:65:0b:1e:4e:
         90:49:22:d8:37:a6:fa:77:55:83:b8:68:e9:ad:c4:0c:1d:f2:
         45:26:a8:d1:1f:f1:9e:dd:25:49:d9:a9:56:b8:0e:a3:12:4a:
         a7:cf:88:c0:06:96:e2:1c:e9:24:d2:3a:55:38:d3:e1:5b:e6:
         3d:36:ec:b6:04:bb:b9:d3:36:97:56:13:bd:8f:49:e4:71:aa:
         a9:c1:9e:26:e7:14:37:dc:74:8e:86:de:93:5f:f2:9d:0f:20:
         10:c9:ad:e9:75:9b:f0:5b:6f:cc:90:4b:1d:eb:84:df:c1:0e:
         1d:12:00:c9:a3:9f:20:0f:75:39:ce:e3:3f:b0:f6:00:b7:fb:
         e3:fe:c7:6b:44:ab:2d:bc:bb:f7:b2:7f:6a:f5:e1:ee:1e:ef:
         a8:b9:8b:ec:2e:4a:1c:78:01:72:ce:e3:17:27:82:ca:6a:af:
         8b:24:bc:44:6c:14:8e:d3:35:5d:8c:4b:28:3d:a3:dc:1a:14:
         09:e5:26:bb:a3:9e:a8:9d:4f:68:2f:9a:c1:6f:25:05:86:46:
         dd:86:77:a0:98:9b:53:c9:85:0a:41:02:c6:6c:75:b2:40:a7:
         8a:fd:48:aa
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUarXl8AOOJuOiuvNrw6PE5b2U7vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3
NDk3Qzk1NjAeFw0yNDExMjMwNTI2MjhaFw0yNDExMjQwNjQyMjhaMDMxMTAvBgNV
BAMTKEUxMzk1NjI4Q0M1Mzk1MTZCMTU2Mjk3ODZGRjJDM0M4NUNGQkNFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJCrNWLcg611IltG32NWxT4eWN
6WFmmlx6GOdW/FLLohN/R6sKjrcEuDBG3N4NF6qJl/DHwaxHtAW5AQ0zMf8noYiY
bWqLXaoZZ/5a5w//Itb2mwB63692mk15T57TxQEJsGQK9VEHS2V5e9xUOVHAklkZ
8CYxFEuyEY6OMX3DMNFaFHz2aADbe38YERcJh9zg1eu/pUhNBeNoBjyBxwNrGLjZ
oagnM0m3Q8sDbwLHZ7qhgytSvMzVDtP/cAcWJhNp9l3DNsp2i1KOuo8WJiJNEO9k
GymnlmjmI07htv26TUk2pc9zXxVSteMRcDwPBJyFywQrgd8dlJ6/vHtLxB5XAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU4TlWKMxTlRaxVil4b/LDyFz7zlMwHwYDVR0j
BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv
MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2
NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx
NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3
QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACSGOHs+fNRaGM9W3G4J
ihQDkmVwTrSU//2MsnqeaY/4ZQseTpBJItg3pvp3VYO4aOmtxAwd8kUmqNEf8Z7d
JUnZqVa4DqMSSqfPiMAGluIc6STSOlU40+Fb5j027LYEu7nTNpdWE72PSeRxqqnB
nibnFDfcdI6G3pNf8p0PIBDJrel1m/Bbb8yQSx3rhN/BDh0SAMmjnyAPdTnO4z+w
9gC3++P+x2tEqy28u/eyf2r14e4e76i5i+wuShx4AXLO4xcngspqr4skvERsFI7T
NV2MSyg9o9waFAnlJrujnqidT2gvmsFvJQWGRt2Gd6CYm1PJhQpBAsZsdbJAp4r9
SKo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:50 2024 by rpki-client on console-fra.rpki-client.org