Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          uaEERbxKxfWlvlJxVHydfxV/6SmXrpXCpfH1smdze7c=
Subject key identifier:   34:7E:1C:07:0C:70:3B:9E:B1:99:CA:3B:26:F2:1F:84:E7:B4:6E:51
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       01935651D8F0A40B51640D49A47C81323F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          137E
Signing time:             Sat 23 Nov 2024 00:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:24 +0000
Files and hashes:         1: 1-D2mUY7h8ICxcsseIf0f2Z_oO4k.roa (hash: 8kDULxw9z3gXp/AD8a9Ag0dsti3Un/ZQcx/ea3XVp2o=)
                          2: 3-g3JTKF4xRyCPIaViaqYDC7l1o.roa (hash: fkDu8NARcKd1dM1lWUlsR143SuNr8aqSeEwXrJRNbi8=)
                          3: 4ESnHDkMiH3VXGRcMNV45lvdzjg.roa (hash: rDXZb2CTO6v2yflTTZ1nHz2ARvrDpwcC2SH66LgceiE=)
                          4: 4vSY7pcoyniRcE3BWoDJLaST4-U.roa (hash: HCZT/bqiAdnxIIXJTkL3KadJYBbBM96tekJW+BuWlk0=)
                          5: N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa (hash: qZQrpyn6aWSV4kQaR+O5PVRIYSKD899TM8gSvZMHSU4=)
                          6: QF5knuQFZ1MzmZtVJ1bogqbMSj8.roa (hash: E7j2A0fb63PUius9/NjwAnAHElJQjbTAwKyb/Xyqlb4=)
                          7: WyZgsc0Tc0CbMTj7VEelJJT0OzE.roa (hash: +8CECyDU8Lf2wiEDcrbQGLaT/eNSQMro+xNLHS4ZA6g=)
                          8: YvRh5nVaU7K5TXANQLzq2dzn0x4.roa (hash: /v2GM26UAgEo26LyzBlzUgLlrq+4Jdy/et1rP8m/Sl4=)
                          9: k9sacxqE5VMeV0DyL19Mgpzo8G4.roa (hash: VmEoBQ/fM26DB2eO+rQhBj5j8Dsb6aDwvg/4uQL5aYs=)
                          10: lEPdcc3TVtidvWs5KTQ69HbSR2A.roa (hash: /dFMBz17yqrJ0twDw6zw0iBof5mviWTvPR+JOuTK7yU=)
                          11: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: MDfMM9f+VFJWwPf8bFtyEYKNqzYjjd7rO7aakyh2+ac=)
                          12: zDY6ASBaTsdg_bKTDY-K4nup-Ms.roa (hash: FrmnmQQ9K1mJbMIqaBLQrzFnV+W7WlUbG9WECYp7PJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:d8:f0:a4:0b:51:64:0d:49:a4:7c:81:32:3f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Nov 23 00:00:24 2024 GMT
            Not After : Nov 24 00:00:24 2024 GMT
        Subject: CN=347e1c070c703b9eb199ca3b26f21f84e7b46e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:d4:3d:b0:11:ed:e9:d0:43:db:23:fe:22:
                    e7:bb:9a:72:8e:49:bf:ee:80:a9:5c:eb:9b:65:38:
                    80:df:ec:d1:66:ed:58:00:8a:6f:19:a1:85:6e:19:
                    25:74:bb:c0:c1:85:84:ed:c7:91:70:fb:a8:ee:98:
                    89:32:b4:63:9f:74:a4:dd:f7:89:e1:30:05:65:04:
                    1f:f6:4d:4e:97:80:4a:9d:8a:dd:3c:e3:ea:a6:e5:
                    96:8e:60:cb:80:22:3d:20:38:fc:11:80:aa:d0:ce:
                    5d:6a:8a:11:2e:c0:3b:70:79:14:7e:30:6a:58:a6:
                    17:53:77:ae:32:bd:23:54:0e:44:43:fe:6e:df:6e:
                    76:20:5d:ce:22:7e:06:c5:7e:31:40:f7:3e:0c:1d:
                    d7:dd:e5:d2:10:21:fb:8b:cc:43:d7:6a:59:8d:68:
                    d3:b3:49:cb:dd:82:a8:9d:b9:99:71:1f:f2:e7:02:
                    bb:ae:74:6e:06:28:2f:37:19:d6:c3:ed:f9:2b:1b:
                    54:7b:d2:b8:f4:96:06:c1:e7:0e:72:63:a9:a5:b3:
                    a5:55:ac:da:ad:27:3b:b0:7f:53:25:ca:a6:07:fa:
                    af:7d:7d:d2:c3:b4:b3:38:a8:ae:a5:19:fc:e3:d4:
                    0c:e0:02:f2:03:dd:e8:ff:13:6c:c7:86:54:64:15:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:1C:07:0C:70:3B:9E:B1:99:CA:3B:26:F2:1F:84:E7:B4:6E:51
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:15:86:c0:3c:7b:5d:78:59:dd:6a:c5:8a:bb:e5:ae:9e:70:
         c0:62:a4:db:8b:d4:6c:4a:62:6e:00:d2:cc:80:f8:59:1c:1e:
         0a:ac:d7:46:2f:b9:38:5e:75:b6:ee:d1:05:f3:15:c5:a8:53:
         14:bd:a4:69:46:82:42:55:fd:16:93:eb:85:95:b9:a4:85:2c:
         1d:ad:fe:26:3f:ed:e8:02:4c:fa:e9:b2:7c:b3:e8:44:34:6d:
         1d:c6:92:9c:f0:9e:9a:50:03:56:12:90:7f:35:7a:5a:b6:1b:
         fa:0d:45:df:39:18:46:88:3a:de:d0:84:e7:9a:10:6d:5d:3d:
         90:ae:66:70:0c:17:29:e7:61:0d:88:ff:b0:62:f8:d4:a4:8e:
         c1:90:e9:bf:09:8c:c0:c7:a4:a9:28:c4:8a:e0:96:a3:86:c7:
         99:2c:85:26:f8:b1:e8:00:39:2c:a7:af:47:07:ab:e9:fe:0f:
         f7:fc:16:fa:9f:5f:9e:19:d0:79:fc:17:46:32:78:d3:eb:bf:
         dd:60:ae:6f:9c:85:67:bc:7b:40:85:29:40:15:bf:a4:42:d3:
         7c:f9:1a:ef:b4:41:9e:35:b7:db:f0:77:00:bd:26:20:66:b2:
         a1:b3:70:8a:54:ae:5a:23:5d:88:a9:6e:57:c8:b6:37:a0:f6:
         b4:f8:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:20 2024 by rpki-client on console-fra.rpki-client.org