Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          vlucoGXNq0Cj1O/HrSYvy0TSQTV2q5HD+lCr160DYnY=
Subject key identifier:   C0:3B:89:47:D3:FB:C1:3B:9E:9B:54:14:94:1B:61:D5:22:D0:4E:5E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01935199981108299832543332B4715B15BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          13C6
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:40 +0000
Files and hashes:         1: 2xWAM323VhW5BcDQjzTCzhJL3pQ.roa (hash: IYAlhwPYXmJWwi4Onn6w8/JBhS/fplI9a7cE4LOs8BA=)
                          2: 48fo0HUWRAgKiMViKhGdJX7f9C0.roa (hash: axjZHGYzerdENb8dUw1Ux23z9tanexEhXjhuS10OMuA=)
                          3: 90WE-hDKBDUgQlBoEvL_fMGJfrE.roa (hash: 5WLk+rQLl8qXOHTBrORlnsKasMxKoNPxrBke0qEyKgg=)
                          4: AGjcZfTBsqCHTj4nO_TvZnqo-UE.roa (hash: Hc4epX5Um91Q41SrHH2xhu8Z57fcmQHT3WhZ/Xn2Olo=)
                          5: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: xMw/gHMLibcbOQOjwGfd4PiFv+7A7bvJDDdUcYTdW38=)
                          6: JU4WvFS0NCO1jFsC-cyAbLJnseU.roa (hash: oGLDKVo/CFxal+FLtgRrdH1uDKbImJ0PmIt+qzYdxRs=)
                          7: NbvNFUA7hATb7y3Vp451wKXCueU.roa (hash: 2S218p2Pi/GUd/mNZrA+gLnODkoMkBwfZNX3iFCBXsY=)
                          8: OEZLKnA_dhO3CavmVRNVk5fv-vo.roa (hash: dFI3u0zR7r4g4J7Gqn9zgvAEAf2Jqba9A85c5NYYUms=)
                          9: RFcEpw4S7wh891iO1S6Y-VFd3Xg.roa (hash: DY57VPOTd9xV8a95GRVMpNUDJSY6PfzXj+wUAy6A4C4=)
                          10: Tr220bkBkw5SpgIQXUo76esPwWI.roa (hash: jMpiZkLSRhu/gkrKA1CuufntwtgwZYKwyAVkNnZ6c7Y=)
                          11: U60c4RzJCPcvkMecGzIdRefHi5o.roa (hash: eLHitQJEbOGgo+JiitgHtPCDe7LBfo3vcQ2eWI9GoiU=)
                          12: WTCJpC6Z-yCThXVmFSGpNlRlNg0.roa (hash: vYC77KcDTBAqRot6cSKZJky0gZPbJp/3ydGI0vREmcQ=)
                          13: YvT-5WfCqZAph_g1lZUOsIUeDkw.roa (hash: bKxWvBeScoupq66F7xcTXWu6OrUWAXPx4lkJ0N/46jM=)
                          14: a4HTWTTcxAiUab7fE4n4LX1wAl0.roa (hash: xnWX8xVd4y0udnFX0qVT+8HvRdZolPxeI270uZZivAw=)
                          15: e3gmZjj7LS7A0Hun7nCciE9hbXE.roa (hash: 4+10xNy/Fig7Cu/c4VJDqY9uYRPxXGAi8im3w3C+KVc=)
                          16: hRBYhUnBzKJhsk4C9b-06Mfs5pM.roa (hash: EJA1if26YKQA0Y2HGyU4bzMPn6/C4/lFpgRHOHzT5K0=)
                          17: iKcM7VDIT3qoM_9t4tzwFZY4TY4.roa (hash: xqV7YHWmSViN8FDe4MhgFHK8cba5jx5Hh8Ja2oeH19s=)
                          18: kW853kVUj0vjf5Phs8DaHBQ_mn8.roa (hash: ZkrJWoVi8zvTjSW/lrFDGTwmnPJri1BsV0qpeEMDZe4=)
                          19: oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa (hash: VbZ+td3RW+9rmf6Cq1i1rzyCRR3O0rhw7G9mDxsQoH8=)
                          20: pODswxY4SqXoDBI2j54CT7d_d5s.roa (hash: Pygba1HnoF6GdknLv6g3fSALPoryGQo0GCkzefLqMoM=)
                          21: qHJhQX00DCexAJgh51CwXiuV1D0.roa (hash: QuQmR/ibNnLrhks9MpVHJo/nws866QMbxYy6FLeZ+lM=)
                          22: qLWf2mRKFKxIdrSjxVwcVnO-h2k.roa (hash: dEfDxREs0H+Ilr57BFZrm+nNxNDiz7PohVgIRBirefs=)
                          23: yFRzZBx5uf-Kjh8OVzYPhusZFOo.roa (hash: Hukd53CNKD0tb6YHluu+04Ap1fIiSz98aCFE+k/2DyE=)
                          24: y_QomMEL04zbN99hSlDui5930sU.roa (hash: Hg/KqdtRkLvjDgSvnZVTWjhrUHI7JRNroqG3oqb4D0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:98:11:08:29:98:32:54:33:32:b4:71:5b:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Nov 23 02:00:40 2024 GMT
        Subject: CN=c03b8947d3fbc13b9e9b5414941b61d522d04e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ee:f5:bb:66:13:cd:63:f3:35:ca:90:3d:0e:
                    e8:31:9c:ad:57:01:bf:31:01:b9:da:e9:e8:f9:63:
                    75:bd:4f:f1:42:17:1c:59:18:75:3b:8e:d1:6e:63:
                    96:55:49:10:a6:19:5a:a5:85:6e:27:07:a1:1d:3b:
                    60:a0:37:94:2f:56:f8:73:00:b0:0e:92:4a:1f:6a:
                    49:58:f0:a1:d5:bb:1d:32:6d:20:7e:ec:cd:aa:9d:
                    44:36:6f:27:43:ea:35:f9:ba:6f:55:5e:5b:d8:72:
                    e5:ba:cf:07:44:0a:18:35:2f:3d:9d:b3:97:d0:0e:
                    85:b5:aa:6e:b6:9f:3b:72:a6:41:95:37:8e:de:18:
                    0d:e7:4f:be:3f:8a:23:59:8f:8f:b6:74:f5:00:5c:
                    d5:69:c7:25:75:d4:d8:81:79:82:ef:a8:8b:ac:21:
                    65:f9:75:fb:56:bd:08:87:2d:dc:24:9a:c9:16:40:
                    a3:d9:7e:49:96:b0:ec:6f:e3:d0:ae:21:b8:f5:22:
                    26:46:c5:2d:eb:24:ba:6f:a8:39:cb:a7:63:da:d6:
                    1f:92:ac:6d:c9:61:3f:ba:f4:df:2c:ea:6e:27:d6:
                    2f:86:88:b1:56:f3:0e:52:b0:b1:75:4d:7b:67:c0:
                    01:82:3d:c2:c6:ce:6e:19:e5:79:65:0c:04:ed:7f:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:89:47:D3:FB:C1:3B:9E:9B:54:14:94:1B:61:D5:22:D0:4E:5E
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:b3:94:42:8c:40:a2:1a:e1:5e:f5:63:ee:7f:c5:02:03:b3:
         37:ed:9f:6a:a0:9a:e1:c1:4a:e1:ec:8f:6a:1e:e3:57:4e:5e:
         30:83:17:c1:a2:f0:25:cd:65:bc:56:a1:33:42:63:2a:9d:a7:
         16:15:4b:99:69:64:62:e5:bc:cd:84:93:2e:b4:57:ac:30:ee:
         16:b3:2a:25:3b:cb:49:46:00:de:10:2d:3a:24:66:88:2f:98:
         66:4d:f8:bd:6e:6a:8a:b3:e9:5e:3f:a2:e9:0e:c4:06:e7:e4:
         f2:9e:8c:a8:e9:f2:3d:68:89:b5:f6:7e:e6:93:3c:9f:12:31:
         1f:cb:cf:00:6b:fc:76:b8:ba:a2:94:13:b8:90:2c:63:b3:15:
         2a:ee:ad:6d:6a:29:f6:e9:01:13:39:d6:c9:88:89:48:70:2b:
         12:ca:90:cf:6c:43:c4:f9:5a:2f:29:41:77:7d:fa:73:00:45:
         62:78:3e:79:9c:63:28:d4:fe:62:50:88:04:ff:c2:c5:32:79:
         fb:06:81:e9:2f:b0:97:ae:bd:1a:1f:fe:e6:e0:e3:64:d6:ff:
         11:56:b3:cd:9a:93:4c:6c:80:4e:18:a1:1b:f8:c4:c2:17:57:
         fb:f9:43:ea:3f:ca:3b:b2:b4:9a:1f:6f:68:ff:f7:aa:e2:cd:
         bd:c6:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:35 2024 by rpki-client on console-fra.rpki-client.org