Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          B2bkTGTLGNjqJ3fo60ghn3iowCPq4sGJrEVOq1OBq0A=
Subject key identifier:   11:D2:D7:6E:F8:79:5C:21:A3:36:89:62:4F:74:3D:2D:28:D5:A4:52
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019351D06E7296823C61187B2EA37E1197E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          14B9
Signing time:             Fri 22 Nov 2024 03:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:34 +0000
Files and hashes:         1: 0fHX7bhteTbdIcpIVe_MB7cQjxE.roa (hash: tRYF4uDnqGb68uemqIe1xliH5JRwaV8llZ6b5gDddQU=)
                          2: 3KjXvS56nnWvii8NOABXWqzL5Uw.roa (hash: zgzBkEhmekKNniAk5JKLPXnLl7ECWQXzloDGzeSruo8=)
                          3: 3wyQEu5OoyZI6zzFu_K7eR8r2k0.roa (hash: XH9jkxrIlZPxvTylaely66F2tNQox49s+kPAwUtxuCA=)
                          4: 4PxuigS3jdQiqJlloNpR1G2rMB8.roa (hash: zEAntRd6uHAgZ+dFKEjj2MybVvYrpJkvngy80mMz4jk=)
                          5: 4yHKKSdCdHcjjl34WAMJd4XI6CA.roa (hash: P2f2D4teLMQ1PWAOcuJhU7Kb3iV++thMsB7FcygAVBU=)
                          6: 6K-KcObaqA2vzI3dAHhweFbPq2k.roa (hash: magdDIkT0xOV4a5Mf2blMDEFvefMHjI4QLv7htNMtP4=)
                          7: 7KhTAO80iFfbwe-833CZx127z6Y.roa (hash: sI6XtDikd4xAq50wE9xqtWhPmQqTrsgNrn7LxhtF6wo=)
                          8: 8Z6YGgL_i8ZtUSpNhCbgs9BKSoM.roa (hash: c7z89SkSvKXv4bdB75R0WY3NlP2Tpv59POmfO6/fhJs=)
                          9: A5c1Q-FjCc_jEWCNtVE_rUfMjoc.roa (hash: w8N7uudj9yGZdwnDoZQ53EALs9rRSqIY2UYmPh+Extg=)
                          10: APQAiTFP955bNS-1iufjEXZacS8.roa (hash: tj194S/+Hh9hQSnS5I6wOpyNNqZ3qAVpTxO6jGq/S8A=)
                          11: BYUwJEs-GWBrAJsOlszBio-L1mY.roa (hash: 3JsGt0KwCzBtOZB3t33fhBoWrYHh7joRL1hG8qIzaDQ=)
                          12: Bn9XLuhaP6gdWZ4pWMwoE2fmU7g.roa (hash: ITFvaSHvmLUFYuHV3iSvjEM4TLZoNGx974hcHz4fNrE=)
                          13: E-yMwwoOEDCQVgTrPbHeiHJaNvg.roa (hash: zj0LP9skF+TPdYPm3doPZdOmcTop6ixBud1za/Y5Gi8=)
                          14: EWZlZD9kRqgI8UZV4SRGzS0U5n4.roa (hash: 8tO1kl1Hvfuhd/CKIrAenW5qfr8b9eThsMZvf/5y1PE=)
                          15: GcPNs6pJc6W38yIKOJM-iP46JDA.roa (hash: BexSvn9EKJeGF6Gx2MQy5a0e1jIfUCvJz+R3ZbS8mr0=)
                          16: GnHJTN7ncCstUelSbleEG4HEl40.roa (hash: asQ2rmkNknwu45mNTB7F7R0kZwFfLaaKJJhnmNywaqM=)
                          17: GrQqPmlzs0u00qpkFjPCA1ig4XM.roa (hash: S0/eXXYeX/VMfJ8nOtMZ3MpGPGNlWuqT2tvymmRbjSY=)
                          18: JrxmMEaf4_5sewiO9Wj7SkjqwEE.roa (hash: ProJ2xKdyOfaBbvz3a8e2VeWE8Wlip4i7WX5HAo3szA=)
                          19: LOSFGh-4kVwsksLXcZu--po7Gzo.roa (hash: C4S/vWav2FwV+VNO3PWNChbx1DdKqPdxPQ76/ijw2tU=)
                          20: MLDlOlvlShqjwwpEH_LGLUQdpmw.roa (hash: DqdoWtwPcu9QgrkpcVg2Nfa6hlDLvLdJvuxWg1EUWKk=)
                          21: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: Sds4IIWm3SRyVUFldKoRB4k0bYVCtPTesfE0HE00xqA=)
                          22: NnbtXj1tNY4lI6jdFK-1jR2UByw.roa (hash: QM9Q5YXH789bCCc8XqmFOy8uVlRXAjwxnScyPSfRYJI=)
                          23: QJRIxOIp67Cvol8Eo7GUp56qASw.roa (hash: 8mscUg8/WGRmBH/LAww7426qXxb87XgoP1ebpQCWQ4Y=)
                          24: QnZJL3qYLI_FGPipdj1588Iq4N0.roa (hash: iJivv3xvorWtOq7mfmZu1ALTNz1OB2IiX50lACoMH2A=)
                          25: U3OaYV-wOvVFY6zJc-1Cns0rrf8.roa (hash: TK3TTlmeNmLswojx1lQYMJRjBCWZlhllUHswQFlwxew=)
                          26: VSkOhfiwsQjKyYNLwmHQD99iifQ.roa (hash: dlL2DiTBNR5LOJj3gMNn+vfpZNknkBIld3mWRUpwkBc=)
                          27: VwcFiE6jOgvZO5KILZzSbYorB0o.roa (hash: m45U80EWJBVpKsTzdi5ZSQ7Vfb4zqquOg3e88GjqNeE=)
                          28: WJkTmjAKX__LNrSNfWSUEsmETtM.roa (hash: m1wWuakdJR0VDlV4cysT82Zy2fYYVgfHzcHpDsvrW0c=)
                          29: Yt_aUWKomWB8QO0oL0hN2qCMOd8.roa (hash: ZqV3xZEM4e7NnX+oj4R8IBP9JsIvWWBOE5qa7iGIv5Y=)
                          30: _UBWiA5SbxfGU8IJwclf_0CS9Jg.roa (hash: IOlQfKGFOnaabt4KBQ+vn1NL+QqjuyiTyNPQ+JDiwoQ=)
                          31: ecSSesqRMg6Pvbm2ScbnenoLcG0.roa (hash: s6k6kUF6QwrQ+jgdcZKAXZjpe5/3N9AM2d1z+g7HO6U=)
                          32: fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa (hash: 5AISExqKrhwx7ntk4TDYNV/UjyUx+xGFyjY+w+QtbtQ=)
                          33: iqf_i7vvD4ZqiWq4Zof57Q3ym8k.roa (hash: /BduiW5mLdVCaPjrxFpBAlEE9E9uJFaANtZox8u8dYM=)
                          34: qbjWDYLDdfYWzsmBZPn0jZSXsYI.roa (hash: zXrpxAK614oflhjemlLGnMpVRNauwEf9y32xBtLKBe4=)
                          35: rluAggKHSWKqV8Qig976M341KSM.roa (hash: M84IQO1GE7do0qNVt3HQwxQkKlDWeMtPDFLHd43JfJw=)
                          36: tysWAmy5ZtD5QB3Ed1pMHAJLPYw.roa (hash: NUHKBMUT5JETCy4dvM9uiaGeQMLrOv/YXvpNzgzVsdg=)
                          37: uSTmAGd3s6PIiJS7L9fCWnZp5zo.roa (hash: 9qcben1NxiwJCjU91w/96P7stG+6sdHi/LPUMUAw9Ps=)
                          38: wcMhx6E89tmKSKYSgYW603_H8Vs.roa (hash: /6JqPLak1KTdvuYxPycsNtxuANlwWrexWjZNKSTe40E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:6e:72:96:82:3c:61:18:7b:2e:a3:7e:11:97:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Nov 22 03:00:34 2024 GMT
            Not After : Nov 23 03:00:34 2024 GMT
        Subject: CN=11d2d76ef8795c21a33689624f743d2d28d5a452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:d8:d3:c5:47:f2:c0:4d:81:ea:9b:23:62:
                    87:5a:ba:26:7c:f3:0c:92:75:7d:32:90:2e:9c:12:
                    b9:6a:cc:c8:b5:b0:04:68:dd:4e:1b:1b:18:9e:e1:
                    7a:47:c4:61:0d:9c:ec:ec:e6:a1:53:14:52:9c:8a:
                    12:b5:da:7a:62:e7:8a:1d:9d:f0:2d:b3:ad:d5:56:
                    d6:42:8c:6b:96:38:3a:26:9c:3d:dc:07:f0:79:20:
                    c2:3f:17:06:d6:62:11:8b:28:33:32:b8:21:59:e6:
                    f4:dc:99:8e:76:9c:2d:4e:23:8c:13:c8:94:47:a0:
                    66:2f:38:63:0f:cd:f0:53:ca:01:84:18:2b:c9:cd:
                    b6:5a:ba:c9:b0:b9:ee:3e:e5:ab:2b:1a:63:52:c7:
                    00:32:ce:59:66:f2:3a:aa:7c:ee:35:66:b1:b4:24:
                    79:47:6d:88:e6:95:f4:d9:63:f3:aa:03:b4:f9:8c:
                    1c:34:38:e0:d6:0b:a9:8e:c7:ea:eb:65:02:0b:53:
                    8e:b4:5b:dc:9c:9a:15:ce:f3:63:9a:8f:5a:17:4e:
                    db:25:6d:22:5f:6a:c0:95:c7:cc:d8:3b:29:a9:e5:
                    f2:bf:b3:52:a4:b3:03:08:17:80:28:84:40:cb:47:
                    e7:44:c6:ff:47:0a:35:97:b8:5e:75:e4:75:8c:0d:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:D7:6E:F8:79:5C:21:A3:36:89:62:4F:74:3D:2D:28:D5:A4:52
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:8c:9a:94:94:8e:32:54:0d:a8:30:1d:39:47:db:1d:35:
         c1:5b:05:fa:c4:f0:04:e3:6f:84:f5:16:de:e1:81:f7:e2:18:
         8d:d3:68:b7:23:47:b0:3a:21:be:ff:df:87:da:2c:43:7c:d4:
         d1:f7:79:80:bf:f5:45:bc:21:a9:f2:aa:59:9b:fb:7d:3e:eb:
         73:b3:3b:f4:36:bb:f4:91:f6:b3:bd:64:eb:b2:8d:8a:89:9c:
         6a:13:d0:57:dd:6b:37:76:96:83:be:7e:73:f8:a7:c3:ba:fe:
         f1:e3:c1:68:f3:ad:d0:cb:d7:ab:4a:41:4c:30:56:20:bb:b6:
         32:b6:8b:62:f1:b2:e0:40:1b:72:77:81:5d:24:23:08:00:f6:
         04:4a:c6:2c:27:7f:17:0e:8c:77:df:3b:87:c3:34:4c:6c:94:
         4b:f9:c3:db:b7:2f:9b:4d:4b:a4:3a:9d:5e:df:47:fa:5d:d3:
         e0:76:68:6e:23:3c:bd:c0:f3:e9:b2:21:4f:ef:01:5f:98:20:
         0a:06:82:55:b1:f1:6e:b5:40:ec:2f:e0:9c:7a:08:4a:e2:aa:
         b3:f4:4c:20:9e:c2:bf:0e:10:cb:3e:9e:b1:57:72:1a:7c:59:
         1f:c1:73:ec:34:5c:dd:5f:63:67:07:43:72:d0:57:8c:dd:e3:
         d7:05:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:14 2024 by rpki-client on console-ams.rpki-client.org