Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          vwaf5314u88VtGwn9cVGCzzNW74XOxiefWjtPeYFUsM=
Subject key identifier:   AA:35:93:9D:1F:17:0C:36:6E:A1:0B:68:18:4D:03:20:13:8F:60:E2
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       019351624765C8BF20A1B6AFE59CCF53AAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          1524
Signing time:             Fri 22 Nov 2024 01:00:15 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:15 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:15 +0000
Files and hashes:         1: 11FmABaoNqTlsRZU0kIYGObtGWo.roa (hash: u2d/8zeZsevrkiHRld46txgh5/gWCr6A0ms7AVGeNqo=)
                          2: 45FqnsRGFCKeUV-IDDyN96g3JIE.roa (hash: MOBbO7bnUVvRFqFxCLewbsVhy8cxJiyDLWKsQOMureI=)
                          3: 4CYkE3SajqGr8rT34zuCYkeBPkk.roa (hash: nhLvbHX+w1+6oxLynILIwjx9tgj4UQtJ/Idjtezahlw=)
                          4: 5uNbVEqGDo8KrnDsPMRJbD44mzI.roa (hash: D8piX2DXr2ICMkSWs6T0ABAZRq2otHAQ41IigeUxosc=)
                          5: 5x9V8R4p8pTMFbTsOR0_-xmy7wY.roa (hash: XT1cTwsH6BX+fcbAIlOj2MRkLG/Ws2dNjq6nGTrG+LE=)
                          6: 9MhQVq4NMKPuo7cxR-Rt2e93aB4.roa (hash: YSlA09Te8z/wm4DLG2+zH9XmSRuNbKU2orwGxii3FyM=)
                          7: AfPSc18Zc5_8zJ35KgVqcALr1dA.roa (hash: 1CUl9F4VwkfeknjsBkuKdXNnfplXgLo375ZobDA6VCs=)
                          8: D1pEXhqX4mvNWJZ5Ssy-dBOE-Vw.roa (hash: /J9K8jdcIJD/LKbrpG0jWB2zG/XFsDifkAcU/q5yovQ=)
                          9: G4rTqfZNZKkaGBubcV6EG5BR33I.roa (hash: b8G73E3DGy04cqoIaZrn2r8qPuUcFw2Rs3xpnxg9G3M=)
                          10: GHmmxxQgsiDqQ3KKu_uLZQA1Nho.roa (hash: 6byjUY6AzuzDR+3beb1lB1WbS3M4fgxE+LsM08npe2I=)
                          11: IFhKc7IRVkVkPnSwY9UTxNSzK-w.roa (hash: gsydlIHtQa8wu6z5CHA5oXPR1dZKQqCX0GXCb1NRVao=)
                          12: KgfsR_XFUJ-rCOtkwLfjQDiJjOI.roa (hash: hcuq6MHrkRs/rn1L1r4ylHQeITEuRlD7t0ipX9a07GQ=)
                          13: KqqV_ftnr6XCliyXxFJx8JyjHHg.roa (hash: MJYE0McwYxAfUEQvEuohJtlq8ebWlVJScMunBLskvUM=)
                          14: Nqlxmx73Hv0ua6_mQhs9in6nrZY.roa (hash: foCMIGXSww64rGOxZx3u64LEhxj9Gg1B8MiDX9D36l4=)
                          15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: /BfkHkRSL6Fk4bNyYtM0Gw9nbs+8zmJtc4y2J24a618=)
                          16: TGlURBdHgX4zIhBj-qO9s5lmaMU.roa (hash: WJ5kfCVYrOkiS4H7Y29mf3rzEzmncb7CJgFMT4oT0Bs=)
                          17: TtUv5FgvucnbcSe7BQ25LmBqv4Y.roa (hash: ht7XuYlzD9opnj+H4FARtvzpKzIsk82H8ypA1/Ht0jU=)
                          18: WhfdVTh5PjqFORUTqjDYBglWpjk.roa (hash: A1len0VyOUI9t4YqNg0hFc3YWudOt1w+kWol09NMxf0=)
                          19: cJg7e8D51C1qvtDw91sHefHvS90.roa (hash: HfuvnWyF1XWRnBpmf0QFkvZG4smGP9J5Aqd6aS1Sx7M=)
                          20: eKadihRG3mqRcANCeqwVlHafxkc.roa (hash: AUPrf2gCCIifTRaEnvyK1QUu8G7NSdq5Mt4YRYFpDT4=)
                          21: fuWQpx7pIw0mdaw1aqchqtWQAtQ.roa (hash: oEGfWWEgsWLbjsa0QfCLnOl7/mpoVzLp66aQhR1XgFM=)
                          22: ggJNvST0jqZM1-f7GVtHwRs3iAQ.roa (hash: 774vELi1G8sM6M2oj+7VfO/usoqG8lUnHUSJXl6VlZg=)
                          23: hs08Sp3xnNDZ3XAsQNyWIlLq4m0.roa (hash: oZN6r1XRbgFg4MIbXtenflK12nk57JNnUKe9VbuD6A8=)
                          24: m1pcCxPeuokVfu50-gNRMQnn7wM.roa (hash: rfKyn1+B9zNlAhB8O0vVxilmEsqa9t+qioe6iOaHZOk=)
                          25: mQvSe6_vH0AH-NEDAoZCeaTih48.roa (hash: 0usbaNMaptNT3nDd78U4OjTaN0xqttEpQpmb2ML4kOk=)
                          26: o6rZZKPAi8kS3AZVflPSnLGegLE.roa (hash: Z7q63i91R0H0CqdXish4NaGKwjR0fCHFfdaemYUj+J4=)
                          27: p9G-O4Ee7z74-QvM0rjStpXq1X4.roa (hash: /C1aOmeGZahI+bd9lBDBLVviXtszVzBwWsKYLoRSL4E=)
                          28: puorze_biIAKH-8j5hxsNOAlrVk.roa (hash: ghElxTGXlmRG55jJwYs3k/96NzsqwUhC+wE9qH+PhgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:47:65:c8:bf:20:a1:b6:af:e5:9c:cf:53:aa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Nov 22 01:00:15 2024 GMT
            Not After : Nov 23 01:00:15 2024 GMT
        Subject: CN=aa35939d1f170c366ea10b68184d0320138f60e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:af:3c:2b:8d:cd:81:42:af:61:f1:12:9e:
                    37:5a:4f:78:a4:74:6d:65:b5:58:24:aa:a2:37:60:
                    34:d0:e0:4a:be:84:6c:1f:b9:c0:10:97:35:91:34:
                    c9:ef:7f:a9:53:ea:ee:f1:b4:a7:03:2b:d2:2a:93:
                    ed:e7:35:dd:87:ce:32:55:09:85:bf:f5:bf:82:ea:
                    04:63:e8:1f:f5:b2:f0:2e:76:37:b8:be:18:fe:25:
                    b3:4d:e8:18:99:b5:b3:15:73:62:a5:e9:6f:dc:11:
                    c8:53:ba:1c:a0:23:42:3d:76:1f:1f:5b:d5:85:4f:
                    83:ae:f2:3b:1a:de:18:1e:59:60:3e:b0:b8:6e:81:
                    5d:c6:ec:54:b5:8f:f5:52:e3:64:fb:ed:2d:fb:08:
                    eb:a2:d6:60:51:6c:1b:f0:59:77:e0:60:bb:e9:2b:
                    01:b5:33:ee:92:01:49:44:95:7a:0b:de:f5:65:f0:
                    a0:fb:c8:39:ed:e3:8f:98:b6:32:90:7a:70:40:a8:
                    17:0b:ed:6f:d2:93:e0:2e:8a:22:28:7f:32:61:b4:
                    05:99:c8:c0:04:75:eb:06:fe:e0:e4:22:0d:d1:72:
                    32:6e:ff:16:aa:88:48:49:26:6f:f1:a7:98:d1:73:
                    4d:8f:59:7c:d5:b0:a4:f0:2a:a2:09:32:0a:38:df:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:93:9D:1F:17:0C:36:6E:A1:0B:68:18:4D:03:20:13:8F:60:E2
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:6f:89:c3:ac:51:b1:d6:c8:8f:58:4d:1a:32:d9:c4:05:
         dc:99:9c:0a:bd:2f:90:ae:16:24:6e:5b:d0:8e:5a:97:16:10:
         33:92:e4:7a:e9:b7:b3:68:b1:56:61:0a:57:05:12:28:39:a9:
         3c:39:ba:0e:5f:af:f1:e5:59:6e:0f:cf:59:d6:20:11:04:72:
         cf:c0:7e:76:4b:57:74:33:0f:06:24:19:67:51:03:1c:5d:e2:
         ac:bb:75:31:dd:3b:45:85:41:e0:a8:38:cb:94:ab:b0:bc:d4:
         12:da:af:c6:b0:2a:5e:76:f0:60:1e:e6:ee:53:d5:cc:39:72:
         3c:84:4e:c1:42:1c:9f:63:98:26:ee:ec:7c:99:b8:62:d1:4b:
         c6:66:74:c1:7f:1c:03:16:a6:d4:92:5a:c2:36:64:97:05:ef:
         ad:e0:4a:25:32:6b:da:9f:b4:8f:b9:49:e4:47:65:cb:e9:35:
         bb:15:38:07:08:9f:90:59:52:ea:e0:30:74:d6:03:a9:ff:32:
         88:48:67:e3:1c:d3:86:20:6d:ce:dc:7b:cf:cd:51:07:b8:a6:
         10:b3:33:c7:57:15:48:0b:eb:6d:c4:08:ac:cb:64:b2:e2:64:
         a3:57:42:27:57:be:8e:44:0a:da:2c:2f:71:d8:95:1d:0c:3e:
         1d:2e:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:54 2024 by rpki-client on console-fra.rpki-client.org