Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
File:                     iLITvxYnVI79-xsuJkW6rx2YOqA.mft (raw, json)
Hash identifier:          tpD16KcuW4Ems83h9Fndw3uM4R9/RQgHsvoKRsZt6vI=
Subject key identifier:   0A:81:D0:DB:D0:C3:C2:0B:B1:D5:DD:80:98:9A:92:97:C1:C6:C6:BD
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Certificate issuer:       /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial:       0193523E1C30476FEAB3B7757F6ECBE07170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
Manifest number:          0D8A
Signing time:             Fri 22 Nov 2024 05:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:22 +0000
Files and hashes:         1: 0FWrdSn1bdO6qEYv7gvn_Pk1Ngo.roa (hash: ZIyEf9hHTLjI9MCMLnNTtT1WuSNg8mpIFyyGgo/ZsZA=)
                          2: 28cdiR3CLgOqiSwLV0B5zUDBpss.roa (hash: QP9up7+up0+Rl7/oskr9BD904btbLIzcSG1NVHpTAIQ=)
                          3: 2D17ohCPVe90y3s4VEYYmaYHSfY.roa (hash: i07Nf6xrXRBL2bqhlezBY7gd+bqgfRHDixPtF+j0GjE=)
                          4: 51JbXQE8W7Kc47U0WOX_IuQffRA.roa (hash: YEn7ouoq+063hf5uiarH1PLgrnU6RmYjcQKnw3EWkfI=)
                          5: 5E5lP2rm95pyG--w0P7vqadMg08.roa (hash: dLlodH1+He6cFYzrD1zOY5VerQw2t9UqZArd1WEcVhE=)
                          6: 9WW2XhOlMhIWb9KdjA0Z_z62qhw.roa (hash: 0A6Bib9zXM9NjPVQp+sOy6LR/h30USlr5q4N09sXt9k=)
                          7: A_1tj4wVOePrky2QZ3Vcci8QqKA.roa (hash: yJGV1VVD6+9OyBcqDsuFyzbX2GfB+1TMGo0ek6wnThY=)
                          8: B9pfrr4dT8ncy9WGvqDXMkv-1oc.roa (hash: wG2SaloLfDdkAayYOEbyovMYcMTmwwhDP9DnG1EgPco=)
                          9: BFaAQNAuITg9EPPG0ZLrLbtApAA.roa (hash: aRaXBrG+872muGPFCFjZi02WHmTImrSKvDfA7eqm2vw=)
                          10: Igs24RU8v7GsginNnLQOg3psWtw.roa (hash: bisnSZkAdYdC6F9cN+sK8kATTQo55NXNLkpnS2gSXH8=)
                          11: LRZy-Bdq8bLC0tQJxOY7NNj1SGY.roa (hash: Nhyth2voi7jQOBD8mJLfMJTk6ARSfjTdwSwatxp6ThI=)
                          12: Ns_jj4BnMM2LwRsazkTqfKprGhE.roa (hash: kZQvcW1Z81mwOmd7ZB9qOH2xMG9kJ4ETEBkP2mpWCW4=)
                          13: PLiwiABXiAbrPoxHtAxDp0nwJko.roa (hash: m08TitEr/+mFEk6c75W0MJnhVKdcsrYx3bgfxQI8Y3I=)
                          14: S2LMSOCykGbPnC0b2amPMBOu4Ag.roa (hash: 8Ctm6mQg1We9yL39ag5c3GPAVh+1wjC/68F+w6L02GE=)
                          15: SVyH4jq21hncLO-ap6Nm60YheVY.roa (hash: AM3NzakTrSZJKIkc3yqDTStb9fPiH5RcZe/fQ0lkHLw=)
                          16: Sixta9j2H0jm7Aw3_56X3HpN5K8.roa (hash: +lm8gRfBhnxsl9B2YVBRUe77m02+8dkR37FysfJLR/s=)
                          17: Wf4sYF7T56q00fRjTPlLVJ5XGuU.roa (hash: agfWCY0g+zqLqnELjvhtfELgoJ72e7StO988pce5Mdw=)
                          18: aMu4ZVgggk35fhr9UpaZLSFzaEg.roa (hash: xse+Ht7uW88NbEYBr1xhkcFhFUQ7ilizNVKycR3E6OQ=)
                          19: b8JteDtAIyabQ2XPpQvIXxQ6Fkk.roa (hash: cYBG0w/fc8aCRPa9w+hRL0wNTUrKpVFz9MBXwHDT9Os=)
                          20: d-4XWYoOOZQ6LNvaFLtuypIZGVU.roa (hash: Y7WCPFyWU+XA2aT3BGgoCLAV/PH3NQl9bxIXjqA8mAo=)
                          21: iLITvxYnVI79-xsuJkW6rx2YOqA.crl (hash: U39ToxFnF+QSVmf1V5fItn6GLMCoBo3PIBrwEWI7FGY=)
                          22: iji0IOf7Ve7nQ3ZrdXo87aA-of8.roa (hash: DxHdQ4C1J4Ii/BI0BajdGzq8awfli8Yg0HPKwiRPbyw=)
                          23: mCG2I3N9VsTM9L_vpUsSZ14V_Dk.roa (hash: kcTPbB79vnqb/kF61EARm4lF4jpfw7ar3kRAt79f8Xs=)
                          24: qe7fj8zl4bCazPid2_uoFadgxJw.roa (hash: n2jAhRd2sL6zWRC+2viHf+ogTJeQl4wAVDLb3Ku9QXY=)
                          25: tOCs5BAmvAZQ30zLPXQHfcHrxv8.roa (hash: AzqM6wWQlMUtB279kXWNeUT+zpu4/VwNDC8cyaz9zXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:1c:30:47:6f:ea:b3:b7:75:7f:6e:cb:e0:71:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
        Validity
            Not Before: Nov 22 05:00:22 2024 GMT
            Not After : Nov 23 05:00:22 2024 GMT
        Subject: CN=0a81d0dbd0c3c20bb1d5dd80989a9297c1c6c6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:b2:e6:44:04:c4:99:48:70:44:85:d9:8d:
                    fc:53:8f:79:20:39:23:40:4a:33:a5:88:d6:97:34:
                    57:c4:00:24:b8:ec:89:7a:bc:68:57:e2:c2:c2:48:
                    95:eb:81:21:35:09:ff:7a:ee:76:44:20:1e:05:55:
                    57:78:8f:ed:b2:ca:42:af:e0:27:fb:d3:30:83:b0:
                    12:80:22:52:c9:c3:c3:f9:fc:d2:38:75:a0:8e:d8:
                    96:93:c2:e1:b1:ea:86:d8:36:28:e7:b1:0e:db:35:
                    b5:97:d7:7a:da:fd:ce:d0:1a:41:f2:2d:42:cc:c2:
                    c6:b1:65:49:54:bb:a8:aa:ca:1e:a0:9f:54:56:e5:
                    88:5b:dd:e3:c3:7d:bd:e6:8b:79:f4:b4:1e:f8:9d:
                    90:4d:f1:66:c2:f1:ba:33:aa:e0:cf:d8:ee:66:03:
                    59:55:f6:b1:68:ed:2f:4f:4d:bb:a4:98:d8:9e:87:
                    1d:d8:c1:58:61:e5:22:4e:98:aa:45:97:4e:0e:3d:
                    e5:8a:1b:c4:1e:99:fa:43:b3:de:94:4e:22:c3:0c:
                    cf:3d:10:01:ea:17:0a:74:e2:bd:d6:a9:7d:0b:9c:
                    dd:b7:32:67:17:4b:4a:3e:15:72:a7:62:54:f5:6a:
                    48:c1:d1:05:60:cd:85:ca:1d:27:02:08:bb:56:a8:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:D0:DB:D0:C3:C2:0B:B1:D5:DD:80:98:9A:92:97:C1:C6:C6:BD
            X509v3 Authority Key Identifier:
                keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:91:b8:5b:f5:e9:e1:10:a6:3e:91:aa:f2:20:58:21:4f:
         57:5e:8b:54:51:d5:d0:53:5a:bb:a1:95:1a:d3:72:c4:af:20:
         0c:e2:d9:d6:c7:85:e0:e3:5e:1f:33:2c:96:0a:43:64:4d:8d:
         71:a3:2c:45:88:e6:bd:3a:66:cc:8f:c9:53:0a:db:4b:d3:72:
         a6:40:7f:23:e8:47:71:9a:fc:99:22:7e:5b:41:31:46:56:a3:
         0f:7a:91:5b:65:1b:96:33:16:ae:77:d8:20:ef:af:0e:e3:32:
         91:e8:15:71:8b:1e:37:d1:15:3b:10:2c:e0:b1:93:d6:3f:4a:
         5f:76:86:5b:97:cc:38:b7:2c:f2:43:b4:f2:fe:62:f9:7c:d1:
         d0:40:1c:0a:36:13:30:30:ca:fe:1c:ea:a3:f5:80:fb:b0:67:
         57:0b:3c:d9:f0:b7:c8:d5:8a:a7:a3:05:72:b7:d5:a6:bc:2c:
         13:08:d9:8d:28:13:0c:4f:ef:29:08:cf:ad:fc:01:3d:6a:09:
         69:d4:67:5c:08:67:89:86:f7:a8:0a:e7:b0:fc:21:98:59:75:
         24:0b:4e:26:27:d3:18:5b:64:27:94:bf:ba:f0:cc:f4:e6:28:
         f5:6c:d0:9c:de:62:c9:47:39:b2:30:ed:9d:47:7c:bb:d8:58:
         6e:84:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:18 2024 by rpki-client on console-fra.rpki-client.org