Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
File:                     rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json)
Hash identifier:          cWsUukB6y5BTBDSqDujF/S5lsFndsCynnxuY3wrgyck=
Subject key identifier:   DE:5E:CD:E6:68:57:88:61:71:C8:3F:01:FA:8C:18:FD:D3:86:6A:28
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       0193520748EEC38D492F52BFE225C0817A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
Manifest number:          13AB
Signing time:             Fri 22 Nov 2024 04:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:29 +0000
Files and hashes:         1: 36TgQbNXre6gnae3LaN0BcRia40.roa (hash: hcR7zeLxvKN+kyZAl/CaL9VDG9wUMwQIzVcwZ074ya0=)
                          2: 7Q9TIyaKjzGPcUUScbRdj4-VUBY.roa (hash: 85CBI3GSJW5gjWXpB/mYS54/WuLgzm5HJPhptvU/Bbo=)
                          3: 9E2zRJucUhm453t24HNHSGQloKs.roa (hash: CqXQT4QvmJc2TWqc6T+dah9tKYu/F/tcxh5Q/4KRfWg=)
                          4: BUgIbTnvrsZReujb6DPOShHR7FE.roa (hash: ECc79n1QjHlzsf9w/1WHSYtvScvgrIpY6oRYyi/0xak=)
                          5: Fnh9GVa_fvnoNRzF2991qb7jjwo.roa (hash: 3BjRnTcWutTShoyklANMFkV25gkqiaqxtmRqk9L6LMc=)
                          6: MmND3DuvCXN1PehXC8z0YAY-0xo.roa (hash: WRLrLTysveRvOIFyqs2Tv0LCBQXodbByHKNc+Ys2WQc=)
                          7: Rj4x-k2eypY_uH4zB6KLMXnbj4g.roa (hash: mwe/FBkwnRwI2NRtDLk5HUpUzsXhRrBHhLkIpEJW+pQ=)
                          8: Ul_UN98Moow6RAqQU52JLp5x7EI.roa (hash: JhQXknpJUCm55RbBkOa9m+Zrngj/gHBjENlnNCseH0E=)
                          9: drnD6JYg0MZ7F_noA1sUAQTj8dg.roa (hash: EWM5nY/jBzS75r+5qFicx+/J7L6AD8xC3XcMdNq/+NU=)
                          10: eataSK8CK7l0e74zDhMEktiv298.roa (hash: 2wSnaBtVI2oQWyZU1mBSovWaCNS0PpJ9WDqe8cYeY7w=)
                          11: jzGTdsvq1G6-oKCC9QFSWwjvVD4.roa (hash: BxV70NiZk9CUH6DbeSrHB63IEAKrXVLmLXWWTRWc7Ok=)
                          12: lWJawHwf4N6VpF4GJ3NfmUsBiak.roa (hash: krphBGcSOFqCIWGmwuB1hmb/J0VgkPsToimwUMuY6pI=)
                          13: n6vgctO4MAHSexLe9Z_bUtai03M.roa (hash: AfEwWL6VGLBc7YYBQhOczU+qe1HeoxQUJdsAEvGiVuY=)
                          14: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: LNw6H8EuHrKoVJb+SSS/qmQOMJlCwW15T09F0gwT/Sg=)
                          15: xFgx3oZiRSyuiOs9sPtPe6MLF9A.roa (hash: jFx8fQuesfKhyiqlc/5GY0J1vv2b3z/2252vKXOBSZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:48:ee:c3:8d:49:2f:52:bf:e2:25:c0:81:7a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Nov 22 04:00:29 2024 GMT
            Not After : Nov 23 04:00:29 2024 GMT
        Subject: CN=de5ecde66857886171c83f01fa8c18fdd3866a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:d6:c4:29:2b:e3:14:f5:c0:97:72:0a:ef:
                    e5:29:ce:43:9f:ee:f2:cf:d8:c5:8c:3e:f5:f8:36:
                    02:f7:74:a2:33:f5:7f:dd:cf:fe:f0:5b:03:33:96:
                    da:4f:c0:4d:55:3b:36:c1:9e:09:8a:26:97:d4:45:
                    b8:1d:d9:1c:93:44:4d:6d:31:eb:25:ef:46:0c:72:
                    d2:d4:8a:9f:5e:94:7d:66:db:45:8a:c5:23:42:2b:
                    89:c3:8a:ed:8d:8f:7f:e7:11:81:ab:65:37:ca:da:
                    d9:25:97:4b:f7:92:14:e2:2e:90:04:2e:97:10:a0:
                    64:ed:f9:a5:06:e4:2b:6a:02:6e:ce:e8:53:bd:25:
                    0d:d4:39:93:15:ea:0b:05:73:16:b4:fa:7d:fd:42:
                    50:b7:5b:d3:0c:34:b0:d6:b9:1f:43:f7:a9:23:d8:
                    4b:f6:a3:23:f2:33:e3:15:00:37:93:e7:0a:8f:a5:
                    f9:50:d3:77:4f:19:15:78:14:20:b0:ee:0e:bf:18:
                    06:bc:91:b2:96:fc:4c:59:0d:77:0f:de:7d:bf:8a:
                    5b:86:ae:ae:43:fb:f1:55:a4:8c:c4:a2:66:01:81:
                    0b:bf:3f:8f:e6:0b:71:09:30:a5:c0:58:45:01:a6:
                    11:f0:1a:24:47:c8:97:30:70:69:34:f8:16:38:de:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:CD:E6:68:57:88:61:71:C8:3F:01:FA:8C:18:FD:D3:86:6A:28
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:cf:f9:df:e7:be:af:34:2b:d4:dc:5e:e9:d9:3c:ec:33:
         80:07:ce:4e:8e:e5:2f:59:b0:ec:39:fa:a9:a1:fa:55:56:0a:
         02:bc:96:ae:cb:c8:c4:27:e7:3a:05:81:6b:24:a5:dc:a4:ae:
         b8:a8:5d:e4:f9:b3:ad:fb:5a:46:5c:8e:bc:54:57:3e:3e:6d:
         96:cc:c3:23:c9:6d:e4:ca:63:05:5d:5b:c4:1d:31:0a:55:3c:
         23:32:ae:54:09:f1:1c:94:5c:78:74:ea:5c:a8:ae:ef:67:e9:
         e9:b2:f7:5e:28:b1:7c:7c:f9:b9:c1:41:ed:db:bf:c7:41:4a:
         99:b9:8b:cd:0f:3c:7e:ee:32:aa:fc:5e:cc:7b:92:c2:ac:86:
         60:70:03:74:d2:2e:db:77:95:40:4c:43:3e:7b:cd:2a:29:fd:
         58:50:88:2a:4a:a4:97:b1:75:09:2b:7f:69:ea:54:c7:7c:d5:
         0d:d1:26:21:80:81:56:25:0f:0b:38:88:54:c0:99:cb:ae:01:
         c1:9d:d0:6e:9d:ac:91:ed:11:64:ce:6b:fe:17:a8:29:9f:97:
         de:9c:bf:cc:2e:c3:b5:e7:ff:a9:d9:e5:76:a1:e8:9c:0e:ff:
         85:26:46:29:4a:aa:3a:ac:af:55:a4:7b:38:d6:b9:de:60:7b:
         32:04:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:57 2024 by rpki-client on console-fra.rpki-client.org