Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          GoxEGaJo/5NeYpldHYjtWFeRAS+OmjnxB4xL1M2k6KU=
Subject key identifier:   5F:CB:F3:DD:28:78:6F:BD:6A:B1:66:8E:92:71:FA:90:FC:D3:1C:00
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       01936332343C0D00E0257E06274104F1BD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          13CC
Signing time:             Mon 25 Nov 2024 12:00:54 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:54 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:54 +0000
Files and hashes:         1: 0XRMropDD_mE-GeCZDkYVgZPOPg.roa (hash: Yh7UDDis8+VRPY3YURU7TDaAgM9ASzvTSTmDSXV9D9g=)
                          2: 1-THL7pA1tfjbVy0CW58gEERCbCg.roa (hash: nfzd4Lrpv8Li56HmMdQWuCyoftNq78Z10UJRQEPWA0I=)
                          3: 1TGYrr0AoBD65LkAONgBBOdRXL8.roa (hash: hdrIcYUVK3JInvXBY3B7UmdfE8wtvlhddYLFPfwbRSg=)
                          4: 1l3aKspHXU6XVOit6PHQFD8-CEY.roa (hash: DyU8uYzLhiWcOgTJ4GAumGWUAiiWRecLjkhpgn/3IIM=)
                          5: 69KSWywBgxSibWj8KNd1ZEwJrag.roa (hash: kTQetJJII0EcI1Yyx2J8WiT2DeLF91dale0taXpzkrQ=)
                          6: 6Ci5zG5tF9RDLNgpsOEdCuZAICY.roa (hash: skAeetT44AnR5V3pB0Pj7DmPx24InIJ4YMqaRiyRSVg=)
                          7: 6pbRX-fX7eF6-KvBcwpCC-xB4-4.roa (hash: N09+YD1RTndu2E0+Uu1GwBHZeP9Q9jRXnal/cDLzs04=)
                          8: AmWRWvxP0YG0--PvULDbDKGPJUA.roa (hash: syctv7iaZ8/tIfiLbWGV/E5YMTTJrpOMnJgNGcUtAkg=)
                          9: DK3RzNUfxXZ5sAmc97BdhkLvY20.roa (hash: IWDetys3EsFNyIsUdB8RsYrwp6YIyACCEny3WBCj7V8=)
                          10: E0FgsjNb_ZJCw5UCvdSSnZ0ljiw.roa (hash: 3L9S4iBumfuFGoEDNj7u5ap4TrtRItPGXpBEtSnp9/M=)
                          11: EseX-IHptDNUrH5N0qcyBVqer2o.roa (hash: gJrVJjb6SHJQyh/Yjb6qyZCCdTKwufdAK2GemdbsIn4=)
                          12: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: VQ8Ur0g8x9c9h2bn7qWe+lV/L95Wo9whokL7+m3Oaak=)
                          13: N0rJiBdgtO9fU8yoRq-382oktFg.roa (hash: bB1AV0SMHgeWK7jWVStwsYXs+HRbXPbLbF0IlJADV0k=)
                          14: NQNRJI6IbtOnb_c1d6cel5a2eWo.roa (hash: +QHzzebondE6Sd8P02Apy4D58mKRS9PEV2/40sAo9G0=)
                          15: NmTsH91MsnJsSzKqu961n4iyHr8.roa (hash: V1umWRn/LC+CYX14Ni//C0N5GGLhNV9x6mG4CFCJ0sU=)
                          16: QcF-9iWsO3ccpGFEKfT2G3U9fUI.roa (hash: rIXDeRXnzd2vXatojAKdWihCkPez3kUUYFNs+L9dZz4=)
                          17: QehFx9CpD7gc7NXhK6Zr9dj2t2E.roa (hash: 1d0D5uvJSP5tYBk7NSBozd/TQUB6LabodqrPBEUV+/M=)
                          18: VBWv9MJ5-DEaWCYHjJKxWWZoiE8.roa (hash: yz5xqEu+4HneAfhEPyyan79ZYuiTwuV+DmZoOMzvt1o=)
                          19: XjgLWl7FOORCTrV_-s9YA_JqUOM.roa (hash: wqRdhnI/e97vKj3dJFocAUUR2knaGbqEbjTsKELLcyY=)
                          20: bG36YJSYjqUVwv802BmnUJ2m3Dw.roa (hash: 2tOCSW4Lynq8P5HSZnKeb+g2qaFDw8YsAIdz2s6OX7Q=)
                          21: bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa (hash: HJmeV/HSD+OPJiNd4YwcrvKnTkJyehBNgReUvazpr7g=)
                          22: dXOOb354FvwiifrD6yovl7hgScE.roa (hash: wcY3HTaWKyeSTgeGeL28F2jY/ZUK0U9HTu50GXlij7o=)
                          23: fz7D6L1KIne6RiLsUvdutCtJPZM.roa (hash: Uni4t0ZcTUNEmxY+4Nutg4tQabyhAKiEC3kVmeAUc5k=)
                          24: kY3wL-B35m38ZVOCX4W2r0n4iC0.roa (hash: SGXbnddEP3mKeYDs5XtQMlNoP6S732BC2bvDIJ2pjY8=)
                          25: mszZ0NxOUsi-4y5MykbSSLU96UQ.roa (hash: ILdaP7j+Wl/SwoVOzfg5jFP+E8260ASeRXF4LRdFqlE=)
                          26: rCTYV3X_BEOgTjsdHPQusN_I19Q.roa (hash: a5xKuitGntl3oP434M4+hBVL5rks10eVKsfUiHxiEno=)
                          27: s2oFzOBHOe4xcwbiYtcAId36Mv8.roa (hash: q0QjgCwvuoR7SXi+TrVKwk8LwdQdhgJVYVsG8zgpp5c=)
                          28: sSPtryuCwYup2_L3LlDL36wnQyA.roa (hash: /CYTSmCG1VHGAUbiawlMB9KIbo3Inz1mGIg/Lr/H5zU=)
                          29: uWs-R2jIloTPwyDv3f4ijga3NMw.roa (hash: AKfOQPHVHrKgsKkXgAyRibQrIAV0VK8QHXmPtntntLk=)
                          30: vhzvLObXYbusiJFNqw9KuTLMG-s.roa (hash: n3bTnsyb+RPGHI1NNpAZzZIakmionam0zNc+0CNp37Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:32:34:3c:0d:00:e0:25:7e:06:27:41:04:f1:bd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Nov 25 12:00:54 2024 GMT
            Not After : Nov 26 12:00:54 2024 GMT
        Subject: CN=5fcbf3dd28786fbd6ab1668e9271fa90fcd31c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:fc:f5:a1:4f:6e:ca:38:5e:e6:db:f8:d9:
                    01:56:bf:20:7c:da:4f:ec:0b:c9:e3:70:71:6b:27:
                    cd:18:81:ef:5d:47:31:e8:ec:6a:5c:9b:65:8f:82:
                    95:66:9f:7e:d5:42:ea:47:15:57:c1:ec:b4:51:40:
                    7a:a3:54:33:46:e4:59:3a:7d:1f:f0:3a:f6:3b:d6:
                    de:a7:f1:ec:eb:9a:ac:3a:39:0c:b5:50:e6:17:81:
                    bd:65:70:6b:22:3c:14:bc:05:6e:c3:5e:77:93:93:
                    ed:66:56:c5:06:9f:14:6b:50:b9:01:41:22:04:a3:
                    b7:1f:d1:f3:9b:cd:99:a9:77:9e:d7:cf:da:73:b4:
                    88:6c:c8:1b:c9:f5:b0:5c:cd:60:68:c0:bb:e5:72:
                    4b:ef:f7:6f:a2:28:9e:0f:2c:98:54:a2:39:f4:46:
                    54:32:f8:9a:d9:ad:1e:6b:fd:51:bf:60:02:ff:e4:
                    0c:f4:1b:97:fc:04:bb:6c:10:53:b0:06:80:95:20:
                    df:f6:ed:a8:f7:9f:4a:b9:b8:06:93:93:fe:68:3e:
                    45:7b:9b:7f:07:63:d0:b0:41:1b:c5:6f:a2:9e:60:
                    34:e4:40:00:ce:6e:5e:76:97:ac:ff:53:8c:4a:fc:
                    70:43:31:57:c1:eb:d8:9a:ed:d9:c2:fc:c9:e0:99:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:F3:DD:28:78:6F:BD:6A:B1:66:8E:92:71:FA:90:FC:D3:1C:00
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:38:0f:5d:06:d5:72:6d:a0:b0:bd:4b:99:ce:ca:1d:90:0b:
         29:f2:09:01:74:31:7c:19:92:96:cf:99:6d:a8:14:bf:6c:e1:
         46:a1:0f:a9:d1:9d:15:ef:50:a1:6f:fe:32:4d:82:28:1b:a2:
         c6:80:05:ac:85:b9:89:62:99:94:d3:45:53:71:e3:8c:d3:ad:
         b3:8d:0f:d8:a8:da:df:84:75:34:99:d8:9f:b6:16:ea:78:00:
         d8:24:a1:c5:47:3e:45:54:1e:45:f8:f5:61:e6:8d:4a:cf:5e:
         d8:04:88:c6:c8:8e:7a:8a:11:9e:ab:a6:63:f2:b2:ce:96:04:
         45:d7:2b:4f:0c:33:47:1c:f9:8c:62:9f:1c:e9:63:ca:9f:ec:
         57:83:7b:ad:c6:dc:14:8c:55:9a:5f:7c:23:c9:cb:cd:92:5a:
         ff:61:bf:47:ca:cb:c5:a9:ac:de:95:e2:87:e8:2d:4f:ba:d1:
         e6:9a:0b:c7:ea:82:fe:1b:51:42:a4:51:e3:cb:74:8d:fb:9d:
         c1:4b:d6:d9:4b:08:1d:99:84:17:a3:8c:3e:4b:6c:8d:bf:8b:
         b5:35:1f:fe:10:74:5b:2d:87:ae:45:44:53:47:e3:19:6c:c4:
         0e:1c:f6:9f:43:4e:61:6b:16:0a:4c:f7:84:d7:a2:66:3d:c9:
         9b:ac:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:52:44 2024 by rpki-client on console-fra.rpki-client.org