Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File:                     Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier:          4O3qTuEi7tgKbpgCUIxlcdkd6LNjLVgu8qqfKIytgPg=
Subject key identifier:   96:81:81:58:0B:E7:B0:C1:7C:D4:7B:80:A5:B2:12:99:EC:F3:3A:59
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       0193549B13671A62863654DDB5166B8A923C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 16:01:09 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:09 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:09 +0000
Files and hashes:         1: 1HTEdtOFPw7bsXtcUH8Xpc851zs.roa (hash: 5+ZjqOy2VeKmcUbvSCFq8e49i1ar147IH/LE+9bJ3YM=)
                          2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: 98+7KMv1fwUG1GHNK/5cOBRptWu8AhfGL5D1PxCc+OU=)
                          3: FJDqlBgg1AmD-RraWkyw2rwZtl0.roa (hash: c8E442B7w7LIzEutkMjYq0AcGXknCsUs1HMQT42MFtI=)
                          4: T_HIir9u0e1JvPmwgJPiR2AyVbU.roa (hash: XAanoUcmy+Cytt7KUKMYXw5N2N3oC/sHWoBb3wJ4WJQ=)
                          5: VXnF9k4-3nLgIX5QYEYuj_ADafM.roa (hash: G2ZTM5wLaokamBfV6cSXixzpH4RRzwWq1ZQGslOzQDs=)
                          6: ZJ50OdULynP8okLYzyfDXRkM6O8.roa (hash: tflcZ3rzw7zJsP8zgcaaoIOZRan4zRkhesjnJNdOV6c=)
                          7: _KNyKSAp9L-4GYdO2YAaSrWfw10.roa (hash: HKhWMkN4eIx9XbqZVe/j/ehlw3gQF8OpHoLbzxzOufQ=)
                          8: cb-Dhm2S7yuwCNWsNScfaBo6oXw.roa (hash: J+KyWBF8H7wOSns7EevIqdAKoxcTuVx5xXIDZNTfJqM=)
                          9: jA9ALsipx8RNb9zh1NHQ_IzVJuY.roa (hash: TAuYSqH4o9Bxz1eLDSpjnBtTFqZtrfEgSKRgqxx+cfo=)
                          10: yyvELcORfofkP-WeGpZwKuaBw_Q.roa (hash: 4+8pYhEeFWOgedy0C+0IR+tgnEJ+zl9mtWO3Ad1HhNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:13:67:1a:62:86:36:54:dd:b5:16:6b:8a:92:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Nov 22 16:01:09 2024 GMT
            Not After : Nov 23 16:01:09 2024 GMT
        Subject: CN=968181580be7b0c17cd47b80a5b21299ecf33a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:20:b2:76:cd:b4:aa:31:5f:6d:f4:63:ab:
                    bc:27:e7:e2:98:23:33:3e:92:3d:cc:83:af:bc:46:
                    c9:ab:b6:72:67:04:4a:93:da:9d:24:3a:c7:41:90:
                    4b:e5:bd:9f:bd:7e:b1:77:03:4d:82:24:67:c6:dd:
                    49:a9:14:89:66:54:23:fc:38:6b:c8:97:6c:a6:5e:
                    99:9b:fc:e8:06:1c:4d:bc:67:4d:16:bb:db:16:62:
                    7a:23:ef:7d:a7:7a:9c:28:0e:19:fc:08:59:af:27:
                    8e:b9:e2:c5:41:2b:57:72:73:d3:eb:51:b9:61:96:
                    34:b4:db:a0:11:03:e5:2d:c3:c0:fa:c3:e5:7e:5a:
                    73:ae:a7:8f:a2:f6:dd:fc:85:6b:82:d5:62:e7:c0:
                    d3:a2:f0:41:a9:53:b6:61:dc:52:0b:ad:e6:6d:bd:
                    e1:7d:54:4b:ec:46:68:10:5e:c3:76:f4:cf:74:9f:
                    66:85:a3:6b:06:a4:1e:97:44:cc:bc:d5:36:0e:aa:
                    db:2a:c0:38:e6:cf:03:d8:1f:58:36:ff:19:aa:26:
                    20:ca:d5:be:ae:8f:36:4d:f1:5d:cb:d7:56:36:bd:
                    45:64:ef:ee:0f:bb:b9:ec:56:f3:4a:84:e3:7e:f2:
                    08:7b:97:0d:c2:bb:9c:bd:4c:a0:86:b2:fd:4c:07:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:81:58:0B:E7:B0:C1:7C:D4:7B:80:A5:B2:12:99:EC:F3:3A:59
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:f4:86:4d:95:ee:7b:4c:43:b9:c2:f4:b2:a4:a2:6f:4c:
         89:e2:43:de:28:34:f9:56:07:66:77:03:92:9a:82:4b:85:29:
         73:5b:86:4c:8e:f4:02:43:dc:a4:e6:f9:c0:8f:27:64:6b:c1:
         58:b6:8a:00:4f:04:64:ab:7b:cb:c1:6d:3b:c4:b1:21:cb:f9:
         2c:6c:66:6e:36:62:2b:ad:23:64:9b:5c:2b:60:3b:f1:11:fe:
         df:de:98:70:70:a1:5c:62:23:23:f5:78:96:03:28:75:bf:35:
         c9:87:92:b4:d8:de:ea:54:64:cf:17:7f:30:fc:ef:18:42:4c:
         0f:f2:11:e7:6f:94:6c:fc:6f:5a:35:97:ea:d6:0a:05:bf:26:
         22:53:b2:f8:fa:79:47:55:6f:8d:aa:c0:3b:3d:8b:e6:4b:4d:
         38:a6:04:f5:ee:d6:90:e8:63:ce:91:6a:47:83:17:0b:79:f3:
         22:26:ed:06:44:9c:33:3b:50:15:52:82:01:bd:c9:46:40:1e:
         6d:15:9b:04:f3:4b:14:af:9b:fa:a2:6d:cb:a6:a7:37:38:36:
         82:8f:1b:7d:31:c3:13:ba:9d:70:44:d4:d5:bd:93:bd:a1:15:
         82:7d:09:60:37:bf:60:9d:6b:f3:67:f5:79:e3:09:14:31:86:
         c1:17:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:24 2024 by rpki-client on console-fra.rpki-client.org