Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          pbB8xUUt8LTu5fCdyv2OnECCQsURWRClPzp0iUxQLFY=
Subject key identifier:   59:D9:A0:F2:E0:0E:9F:6E:C2:D3:71:59:86:2D:9D:E3:24:B7:19:33
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       01935B0AB45A2A234CF11EA5F2BFD148AB03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          07A6
Signing time:             Sat 23 Nov 2024 22:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 22:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 22:00:48 +0000
Files and hashes:         1: 0FCf-SIwjyhfDHFXQ2CC02ZN9jU.roa (hash: oJaiEVA9lbMqA554Uf4vTyDqfJFpHVepd5tKojeryZs=)
                          2: 12EEJ5KVzN0eOAfpthVUYAOcQLI.roa (hash: dXZ65F4bk5hqkAwWzXex++kBSLWjPuev8JMoWM0++JE=)
                          3: 92Ur9VzTmRe-z3DtzP0S1IHDa64.roa (hash: mFnsywqt8MCKsx2xLX5W4lkG3+UXu1S8pY3CIfIJHks=)
                          4: 92xqcoQPtqfYGvBNseEybsBOJPw.roa (hash: ozA7ngm7vh0UfhRxGHFDLDI1ss9H/6Dx/pqClnjvnkQ=)
                          5: G50FiPtqYMWtpDDpjSJXi-TSxOk.roa (hash: 1Fn5qYQjgo6cul2n3Ff4j2Ugm/FtkifISebkozXffmg=)
                          6: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: 3a1+Zx9tLvdkjFN9BhYFkbla28RuA1OsIzkiXRVxjVc=)
                          7: GVM0D6yLi7Ycxa_FE8s2T9v_hOU.roa (hash: 7HzvF6Ygm3QTSmWm11bqow3D55hteviFjtKW3tnR+aM=)
                          8: If1TwXAmqS70IioqFOMyj_DnQLA.roa (hash: Q2AoBanNHV9aLn40MlojBtlsCQypziSS9O4AnN83hZc=)
                          9: Ikzkr6rGXkJSESuDBcHQNfUOrmA.roa (hash: LGWSm8/EBak96XUKwHDJ8r3IKx7U0UE30SVQ7X1tPnQ=)
                          10: JtUZOkkVHj4uRvyb6J9AcYx4Ngs.roa (hash: tUy6d9vmyY5VZTre9VxEHBTMiK1Bt0O87ayaO5vDi8I=)
                          11: P-AwYX_u542kvivUdWcEElUbbQE.roa (hash: VZZAfs6TNsFcgVOX9uH7kmVjZlUvAXjkjSbyRBk5cbY=)
                          12: QO6ltz5rR6R0OyF27AZcTidvnIA.roa (hash: cFbojVfp+pG0LwrYO2rhKLzjewc6Ys9zNeee3bwBz0w=)
                          13: YUBsVpdYXIlmUPYRfEeRDmYszkQ.roa (hash: 6NSlbKrv4y/W4rBSDgkaF8rZOEvjdZ04rJMe/DGZsC0=)
                          14: YpznINkcN3TI7omik4rG8x5XMgw.roa (hash: pfnUpw6UA2dv0BEiDRfqa+dmB3VS5mjmkVHa104xw1o=)
                          15: _Kc1X5WBzsamJXilWlCKn8jQ2Wk.roa (hash: Mk9/ZFaFsG8Yzx+MKsJKmhMkaNWmS8hWPEVhCdkCwoc=)
                          16: cHx1mMG9YsFxNpqQvS2b1lXSFhk.roa (hash: LY/PBd71/6aRYYvDt7+TQj2e4ukaYRg5JFxuipRSk6s=)
                          17: dhxMitCOIWqFDAvhzzgVqv9AJvk.roa (hash: Zil0AuiaIrl7jh4hrwaUFIrctpS7SOJ8rXbWNiq4MOA=)
                          18: gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa (hash: DpqsFl38wbbIZn9CwolHPkiKQNdGqyXYfFjBSqBkLrM=)
                          19: gGefMQFbua79Zg2mNiZYMSAvsYc.roa (hash: grUu2o7YUSqkhRQkBUsyXyQ6BqrMpqLheGS0+ySiBts=)
                          20: hbXwf9wNoFv8xGRSX2sgDFM19h4.roa (hash: jyNu6uWNCmnMr4yAFoYR6ItA8qzLp8ZLELjkXagoKo8=)
                          21: ho24W8vGEGNxE60izaY5n1fM4TA.roa (hash: kk8D0GXhL8iOzLjjhZgdMtTnrQ9AhX3Yz+v1Nej/XAU=)
                          22: jN5zHZCMrwhdjbddZxmBgqe6ARg.roa (hash: bYLJksVLzAr3D/SAbSaZ29/MrqGx22tcVsSGFNjgd88=)
                          23: mMZoBz6VrvmaEqIGoTnDn3LbCLU.roa (hash: RMIuMHi+CyGPQrq8IkW/B0s8cJY2DQmAsT3x89B5FbA=)
                          24: nwnDBvjbVmfokv9DMru9ljGy_1w.roa (hash: W+BcyM8zSizvwNQzxAXQUknedD69zwrlYXJURDRafdQ=)
                          25: pZu-bDgPhxJkVqbPXwJnJtXjBek.roa (hash: f8ukUibkOhBcM06gkY2OuwEuwu9xUUCAKHqpGAI4B3g=)
                          26: q4M1lMWbpkBW1MGVLIL6mPYQnhs.roa (hash: AdrwdwfKcjyrVLRJ4lbWfZNN73Xx+YBqbGcZvOrtFow=)
                          27: qO1RWgbxDNpNhzcR3aKdry6WsPc.roa (hash: ijyrJVmT5AgpdR4LZNmaRthv+00Qu1Okc3wmYEtWQVU=)
                          28: qSk0gkXwc7gDXALWB-pa5dQLq4g.roa (hash: 67SEPReH+JJFp7g5rDqjRjIoU0jh+ElLzyQ0p51B4Wc=)
                          29: sKHz6S80IHSH6DfuduV2jrvqKyE.roa (hash: d8pIb9BD7cFgIMYxGZASEdgUnw/T+fPdSBc8PD2SUCc=)
                          30: ubUyK-onMdxpvEvxaCPUwzNeVLE.roa (hash: YJUExEmjwb7C2Y0ArW/xKKwv3kkPDOC0EQfCpzEnCuo=)
                          31: wXdoeW66_urPmbH8wWOQTd9wgDU.roa (hash: wxIyzkGEmEjGZBNOiuOFopbNrg1Ftxd19t23YudD37Y=)
                          32: wpFQ7Cu6ShUYOHTKd54ze2XY9CE.roa (hash: yAAsLgkY47Kat3PMGMM6NMNnv2XuHqF6+q80/v1TxUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5b:0a:b4:5a:2a:23:4c:f1:1e:a5:f2:bf:d1:48:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Nov 23 22:00:48 2024 GMT
            Not After : Nov 24 22:00:48 2024 GMT
        Subject: CN=59d9a0f2e00e9f6ec2d37159862d9de324b71933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:eb:15:9e:fd:d0:93:68:5d:cc:b1:a6:03:
                    35:71:89:3d:2b:94:23:30:a7:24:86:9f:5b:51:69:
                    14:1a:c5:39:b0:2b:53:4d:c5:2c:b8:89:72:a7:04:
                    cd:ca:53:43:88:47:23:66:4b:a7:89:c0:7d:0f:33:
                    f9:af:ed:92:80:9b:00:b3:c0:69:82:7e:14:48:e6:
                    ab:cf:f7:60:09:3d:09:3b:54:4c:c7:ea:b7:a6:b1:
                    82:89:cc:8c:e9:18:bb:1f:76:dd:e1:f1:54:f7:43:
                    1e:8b:8a:cd:e6:d0:4d:33:57:a2:95:0f:e2:f0:b9:
                    13:3d:6c:c5:15:76:d6:3b:ce:fd:57:14:16:69:2b:
                    d0:b8:75:da:44:69:71:4c:2b:94:30:21:80:e3:f1:
                    98:91:8c:34:8b:01:3c:f6:09:8c:ab:2a:fd:a5:13:
                    d5:fb:bf:81:38:ab:bf:cf:de:d0:b1:f9:69:2f:0f:
                    da:98:70:1a:01:9e:d7:2c:51:0c:17:74:b3:87:28:
                    12:45:da:14:ad:aa:c5:58:66:84:b3:74:46:d8:a1:
                    90:3e:cf:49:ed:66:d8:66:51:e3:4e:d3:4e:4d:94:
                    f0:00:af:3a:21:4e:77:cd:d6:d9:2b:0d:28:4c:67:
                    7c:a4:eb:19:d8:99:2e:8b:cc:d7:54:02:8e:ae:18:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D9:A0:F2:E0:0E:9F:6E:C2:D3:71:59:86:2D:9D:E3:24:B7:19:33
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:a1:ae:20:ab:08:4f:9b:b7:1d:b0:e4:2e:1c:f0:01:a9:
         29:ee:d1:d4:86:29:73:73:35:8a:fd:88:7b:0d:64:ce:5e:f0:
         71:02:b8:85:cf:b2:ea:84:e1:7e:0e:5d:9e:2e:4f:2e:85:e0:
         0b:f6:5c:ba:c4:f6:15:18:36:84:b8:a4:45:b2:2c:67:16:bd:
         94:e6:fd:bb:c3:2d:06:ff:26:72:5e:be:2e:ae:ed:f5:d7:04:
         08:34:ce:07:15:fe:00:20:81:a1:73:b9:f7:09:5b:19:cc:3f:
         41:ce:48:a0:6e:a2:a9:5b:ff:92:35:c7:a3:27:a9:74:a2:76:
         61:95:06:bb:fb:8a:c5:ca:30:9c:99:8e:50:d3:d0:10:c6:32:
         3f:e2:ef:e0:24:1f:83:a4:2c:ee:9d:69:59:31:88:37:00:1f:
         77:8d:90:dc:b3:7a:54:76:6c:ba:b7:43:89:1b:c9:af:1b:2d:
         e3:2b:84:70:34:7d:e0:0f:7b:21:39:6d:8e:33:00:92:2b:73:
         26:5e:a2:ad:bb:00:7b:b0:88:98:65:c3:8d:0e:1b:8e:fe:49:
         b8:cc:55:e8:d2:a8:7d:81:c9:71:3b:e8:6e:2a:9c:76:d3:25:
         9f:fb:6b:6f:5a:6f:1b:fb:9c:86:ca:ec:b2:29:55:bd:7d:ec:
         56:ff:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:17:42 2024 by rpki-client on console-ams.rpki-client.org