Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          /d1lTpAjLBLsY/FzQlqntsb3jUBSgQ70oUK0BVJ2epE=
Subject key identifier:   B3:12:D8:8A:99:F1:32:11:45:AA:6B:A6:EB:89:AC:A9:36:06:02:65
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       018F5AE0BAA355A198EB5AFDEE085495F1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          0E7C
Signing time:             Thu 09 May 2024 01:03:48 +0000
Manifest this update:     Thu 09 May 2024 01:03:48 +0000
Manifest next update:     Fri 10 May 2024 01:03:48 +0000
Files and hashes:         1: 2KsSUWbcOO6Hxy9iG3liFTkCUOU.roa (hash: HV3ijVhB9QSA7g51FdvM05xbR+nlabhNHPrP/L+Aumk=)
                          2: 4tJv7qwzKkLrGqSxf2vcE95yXP4.roa (hash: JOPklIUYdmYvAd5cg+iD8+CWmol9wnQSSXc6OU63lvQ=)
                          3: 5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa (hash: TVMIrS2Rcc+PtJ8ezEgyUsgKaR7bDA7Y3TbZ7oDGOEk=)
                          4: 6UijgvbojW5kb6rnEkqL4RJXcmg.roa (hash: DZ1usarxkmmuCyed5pXk8jq/8+sEHU0LWKQLEmdTLX8=)
                          5: ASQhZEoNzDl00bnwNNCUJ3xINAw.roa (hash: G4BWNW8esl1Np3V/sXgF+3I2sPwgOtE2eR2oxOZ/Iho=)
                          6: GEGxo7x5arOrDEswEY0lvBywzpA.roa (hash: XEGE+UmJTmdEEW+Z+x2hcBUw0HYtS4KzsDOd8UpQZWk=)
                          7: Ii929d5cfpG1z1xjYHb88nEFwLM.roa (hash: tLx0SQC28zSCMfpZkMRer0zfj0YCAiUT2c3qcbyIhlQ=)
                          8: Nx9k4CyUiUrRiAGsf6rug4g0Rpw.roa (hash: 25wVd7RzxgJuEwsBdJCBzWWkA3MdA05maSSx2wTbuMk=)
                          9: OApgk7CRycRnP48UAd6TyPZDeq0.roa (hash: TMltobx10ocPPW9x6lxEDbjE3lDcD5kKXSBKvt4ZBak=)
                          10: R7nBR1U-kcoUCuGQ3nr3mNIeqs8.roa (hash: qQklwnPoKT34zAh3dEEKr+7P8cYomkT9ZpFie2HqPEc=)
                          11: TZzPnpLteaPFeJLUKEdqNO6jsYc.roa (hash: 2pxwaY7W9JmM2Hw3KfUkw5bQ7+F7B1xV6wqHk6rxz70=)
                          12: _XkhiMZJyk0DR_XTK8B2JDtWjcs.roa (hash: Owp7dOiZ1WljEXhbdQC7ZZOzszoyZi+5K1U22LJmSrE=)
                          13: dSKGXjWcvdK6af4AMTK8TYN-u0s.roa (hash: Ed3NzIZMSn8FAzIzd3nZvtqBrI2VgQPBnmW7zwC7E0g=)
                          14: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: AYY9DDGzI92XKw4TulG7r00UAv9HeDzovCM4yMueTFI=)
                          15: rEhSbjTvVpx7ugxQrnPrrxh_nxQ.roa (hash: nfQAa0AUJKKlmrNu4oyAMYUxcX/hvG54xnepFT5Af6M=)
                          16: s9ux3PVbaXJO1emFzFEeQi-h4u0.roa (hash: fNgfUDYYgOyoHRInFEjEYsUJ/GSkfxzDHi5M1471sao=)
                          17: x5oTl6rhNlADCUtKNByrTG21Qwk.roa (hash: IUU3UwkVd0K+2uvIAoRAVZJiN+DHujuOIzUgGzlWw44=)
                          18: xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa (hash: HiRxE7tCJ8nBvkqRXjq5PtfqwQjxuRotzYPFl+Kr840=)
                          19: yjnWEHz99qRXQaiuOj3eX-lZUxQ.roa (hash: 0t04om9xaUU0t9kKinFX4XEsDKCPL9C2scRotBNspks=)
                          20: zTrMA_HibrtAOMog3FQnjc7EFeI.roa (hash: zYFMKXSotT5QD/FkE89lTH6d2PyqTdpEOMJRR65qN6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 01:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:e0:ba:a3:55:a1:98:eb:5a:fd:ee:08:54:95:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: May  9 01:03:48 2024 GMT
            Not After : May 10 01:03:48 2024 GMT
        Subject: CN=b312d88a99f1321145aa6ba6eb89aca936060265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:3b:1e:14:1a:7b:c9:6c:08:6c:67:4b:db:
                    b8:78:0c:38:ce:85:06:c8:f6:04:a9:5c:22:04:ee:
                    2b:9f:93:73:e5:0d:cd:6d:50:d7:53:47:04:1b:b6:
                    8f:fc:3c:c3:e2:99:41:83:9c:b4:92:c3:48:33:30:
                    a5:61:8d:f6:f0:0b:46:cf:20:3b:3c:bd:dc:d6:f0:
                    34:41:c1:59:99:ef:30:bf:f3:c0:e1:28:7a:9a:30:
                    e6:41:1e:5b:60:9e:26:1a:86:9e:99:11:8a:18:d4:
                    16:4e:73:a4:d1:6a:ad:af:78:68:56:10:44:fd:f0:
                    ab:c6:ce:a8:ee:7d:92:af:f3:51:b5:21:ec:c3:e3:
                    68:45:2d:50:15:48:18:f9:9c:ca:2b:55:c8:7d:66:
                    f9:e6:86:90:ea:fe:e2:10:2e:60:2a:09:3f:0b:48:
                    9c:7f:e6:d2:f0:f7:7e:bc:e7:9a:7d:ad:3b:de:6f:
                    48:82:15:de:4c:db:60:e5:5e:62:1e:21:23:cc:18:
                    ed:7b:78:df:08:77:36:16:18:1d:0f:ef:54:e8:98:
                    de:2a:dc:77:73:08:68:77:e4:e0:11:af:27:9f:69:
                    4b:6f:88:cb:10:0a:28:5f:19:dc:e9:33:69:82:76:
                    6b:ed:7d:99:55:42:a3:58:56:49:13:4c:6d:11:50:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:D8:8A:99:F1:32:11:45:AA:6B:A6:EB:89:AC:A9:36:06:02:65
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:d3:61:f2:99:b0:7b:9d:58:11:53:32:a8:ed:19:e0:46:
         ee:70:e6:73:04:b1:47:6c:4d:29:86:d3:b3:46:da:de:b8:dd:
         ab:13:c6:e3:6d:ce:a8:0a:dd:e9:40:28:02:b4:d8:f0:ae:36:
         81:02:39:9c:27:ad:f1:bc:3b:f2:85:1a:64:2e:79:46:b8:5d:
         c8:9f:7b:54:7d:85:23:e8:61:21:58:25:a4:e1:4a:60:84:f2:
         1f:14:5a:c9:9c:92:09:b1:85:4e:c5:3f:ff:20:0f:20:d3:71:
         19:23:87:55:33:bb:76:5d:1c:3d:2b:05:0b:58:1b:5c:9c:07:
         c5:b6:d6:9b:0d:fd:c4:d2:bc:e0:84:e1:a5:bc:64:fb:85:57:
         fa:89:25:59:2d:5c:16:7d:7c:b3:06:f3:f0:52:e3:f6:17:12:
         cc:a3:98:e3:b5:04:1d:c8:44:ea:63:fa:f3:fa:19:ae:d4:5b:
         e5:f4:51:c8:d1:30:50:a0:1f:36:99:53:01:5e:ea:37:ea:77:
         fd:b0:d1:c9:96:63:7d:42:34:0d:e1:c4:5d:85:6a:fb:23:10:
         e5:52:38:99:db:ba:24:00:c0:06:97:51:cc:36:ae:65:9b:63:
         21:61:b3:3b:d2:cd:2d:40:df:e8:2f:db:36:77:50:4e:5d:a9:
         a9:b2:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 05:41:30 2024 by rpki-client on console-ams.rpki-client.org