Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File:                     KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier:          tfq7uBrU11dyoNBsyPf3HUa7IkKFzYQeqzRfgPAE4gY=
Subject key identifier:   68:01:07:6D:11:63:58:35:79:9B:E4:D7:4B:B6:C4:97:A1:FE:C5:1D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       018F866CC3D3160FF37187AF3A334D26321B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number:          11BC
Signing time:             Fri 17 May 2024 12:00:25 +0000
Manifest this update:     Fri 17 May 2024 12:00:25 +0000
Manifest next update:     Sat 18 May 2024 12:00:25 +0000
Files and hashes:         1: 0XRMropDD_mE-GeCZDkYVgZPOPg.roa (hash: Yh7UDDis8+VRPY3YURU7TDaAgM9ASzvTSTmDSXV9D9g=)
                          2: 1l3aKspHXU6XVOit6PHQFD8-CEY.roa (hash: DyU8uYzLhiWcOgTJ4GAumGWUAiiWRecLjkhpgn/3IIM=)
                          3: 3K3Ezh1hdim2G-yU9Q5A5aoMgFs.roa (hash: nsHd6813m4el959/ZfKsPoHDWktUBeEFDdxuDp575Io=)
                          4: 69KSWywBgxSibWj8KNd1ZEwJrag.roa (hash: kTQetJJII0EcI1Yyx2J8WiT2DeLF91dale0taXpzkrQ=)
                          5: 8Dli1oNxLsqDS9BrVzoedbWdDRc.roa (hash: RQSQTmLA/hAJeHIXD54DUHMqEJgnSe+BBiAreNoQ6FE=)
                          6: C7_ELTaYMmBq0snaa0FrZXOc6Eg.roa (hash: TKPgcgyXDpATUfcjVXXWImJna/x/ucAnoYuUz+eo7l8=)
                          7: DK3RzNUfxXZ5sAmc97BdhkLvY20.roa (hash: IWDetys3EsFNyIsUdB8RsYrwp6YIyACCEny3WBCj7V8=)
                          8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: 1qpT5Irn0cMIZGz+O8AZ04tsjrvpbsKvqldB8xGPNBo=)
                          9: LCydPpBgT6rkbKeNPJIXqg8NAEs.roa (hash: AK0GZpQvcTnFaGTxNfzrHPROXIy+X2tXqtvE9Aa2dAw=)
                          10: N0rJiBdgtO9fU8yoRq-382oktFg.roa (hash: bB1AV0SMHgeWK7jWVStwsYXs+HRbXPbLbF0IlJADV0k=)
                          11: NmTsH91MsnJsSzKqu961n4iyHr8.roa (hash: V1umWRn/LC+CYX14Ni//C0N5GGLhNV9x6mG4CFCJ0sU=)
                          12: PFPVmXk96OZR7Q6MCS1WTLwPQ7I.roa (hash: U9vBkRr5Jdd/xdXVol2SXjo80mqYw999o0EVPPcCCHs=)
                          13: QcF-9iWsO3ccpGFEKfT2G3U9fUI.roa (hash: rIXDeRXnzd2vXatojAKdWihCkPez3kUUYFNs+L9dZz4=)
                          14: QehFx9CpD7gc7NXhK6Zr9dj2t2E.roa (hash: 1d0D5uvJSP5tYBk7NSBozd/TQUB6LabodqrPBEUV+/M=)
                          15: VBWv9MJ5-DEaWCYHjJKxWWZoiE8.roa (hash: yz5xqEu+4HneAfhEPyyan79ZYuiTwuV+DmZoOMzvt1o=)
                          16: Vk-KwNhKqo-molYQFBeUF-Q1eCY.roa (hash: D3F7maJPK0EaEI9Jj0wC23odk9cka2NkFhDw669p3Gk=)
                          17: Wa2Zt6Gq9cppxIAx4LP6my-lTyA.roa (hash: 6u+iyedXVVuoizwbFi5TQzXTyE4yz2ue1WjZ1OzZ2Cw=)
                          18: XjgLWl7FOORCTrV_-s9YA_JqUOM.roa (hash: wqRdhnI/e97vKj3dJFocAUUR2knaGbqEbjTsKELLcyY=)
                          19: _ygdJaScwM1ltlnNe1eoz3CL5PQ.roa (hash: knXFCF5SMPEbfeGGI7kU9NgA6tEKNEKL1NkwrpsvO8Q=)
                          20: bG36YJSYjqUVwv802BmnUJ2m3Dw.roa (hash: 2tOCSW4Lynq8P5HSZnKeb+g2qaFDw8YsAIdz2s6OX7Q=)
                          21: bzgi7y6lwXGvHXvYPoyTtfdw6M8.roa (hash: HJmeV/HSD+OPJiNd4YwcrvKnTkJyehBNgReUvazpr7g=)
                          22: dXOOb354FvwiifrD6yovl7hgScE.roa (hash: wcY3HTaWKyeSTgeGeL28F2jY/ZUK0U9HTu50GXlij7o=)
                          23: fz7D6L1KIne6RiLsUvdutCtJPZM.roa (hash: Uni4t0ZcTUNEmxY+4Nutg4tQabyhAKiEC3kVmeAUc5k=)
                          24: h8ERbabpuCYDfY_pGOinLj41kF0.roa (hash: Fz81edfdG7NQ9MT475JyGSF/qc1onVRUj27TxfFcUGU=)
                          25: kY3wL-B35m38ZVOCX4W2r0n4iC0.roa (hash: SGXbnddEP3mKeYDs5XtQMlNoP6S732BC2bvDIJ2pjY8=)
                          26: t-dDPtsYq1SCK0Ar3zEVSA6UTdM.roa (hash: VKL8QwmOGRLKykZi8DNgIu9lE2A108TclJP9gKa2qh8=)
                          27: uWs-R2jIloTPwyDv3f4ijga3NMw.roa (hash: AKfOQPHVHrKgsKkXgAyRibQrIAV0VK8QHXmPtntntLk=)
                          28: yzIPsa85Ud74ZkQQO1a7Ki3qO7Q.roa (hash: V1k7Xl1OqPouzrm+e4IHHWnLWzsphHtOHMKWgXxEgrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:c3:d3:16:0f:f3:71:87:af:3a:33:4d:26:32:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: May 17 12:00:25 2024 GMT
            Not After : May 18 12:00:25 2024 GMT
        Subject: CN=6801076d11635835799be4d74bb6c497a1fec51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:97:dd:62:81:57:c8:dd:31:ef:18:21:f6:
                    fd:3f:cb:09:8a:03:5d:4b:93:78:de:cb:2a:ad:7a:
                    44:0e:6e:4c:81:f4:5d:80:7d:07:b0:a3:21:99:42:
                    8b:5a:d8:0c:f6:52:98:11:6d:93:83:8c:8b:51:35:
                    e7:c7:83:d8:66:00:70:9e:f1:cd:65:59:d7:b1:63:
                    da:dd:f7:f6:a6:e5:42:94:61:de:f1:0c:df:a2:07:
                    be:9c:35:be:97:60:9a:02:0c:cb:85:8f:1c:8b:f5:
                    a9:ff:2b:f5:fc:12:9d:b7:a9:7f:e8:d1:6c:7b:1e:
                    f8:96:33:15:64:4c:d1:ee:0b:d2:42:93:99:87:2a:
                    2c:18:8f:36:07:87:85:5b:a3:73:28:f3:65:94:43:
                    e6:bf:d8:61:8b:cf:18:c0:a0:69:ec:ed:7f:0f:79:
                    6e:89:bb:fb:2c:d7:88:1b:88:67:4d:7a:31:aa:46:
                    8d:bd:01:fd:5b:e4:7f:4c:18:80:cd:4e:8b:d8:fc:
                    e5:5e:89:8c:4a:c7:f1:f7:2f:df:06:3e:31:6d:5d:
                    08:79:4e:0c:dd:82:ff:2f:e1:35:e7:c4:5f:04:0d:
                    d9:c4:95:47:0a:18:58:9a:a8:84:0c:93:e8:30:bf:
                    d5:69:de:15:b0:6b:d5:8f:d0:77:c6:f2:f8:7c:9e:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:01:07:6D:11:63:58:35:79:9B:E4:D7:4B:B6:C4:97:A1:FE:C5:1D
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:71:09:3c:46:e3:53:06:6a:10:f0:d5:e3:e5:2e:7d:cf:
         1f:8d:59:81:60:61:5a:60:cf:8b:15:c8:43:d8:a4:28:13:3b:
         47:00:84:2e:cc:4e:90:2b:ab:0f:45:73:f2:e7:f3:9d:5b:22:
         1a:c9:21:6e:64:85:78:ef:a6:ae:df:5c:60:81:75:c8:d4:3b:
         e4:7f:99:6a:cf:57:19:0b:f7:55:44:45:b7:b3:86:7e:d9:7e:
         bb:0b:41:c7:ed:28:9b:32:91:4a:a6:b4:67:83:2d:8c:d9:23:
         19:4a:cf:4a:8b:87:51:f9:b8:30:22:14:9f:49:62:02:a6:c0:
         96:48:d7:b8:ef:65:f4:89:62:7a:ac:56:8d:48:ef:d5:66:7c:
         9a:f4:03:80:0a:4a:da:4c:93:67:4a:46:01:1a:bb:9a:11:ff:
         77:d6:d7:88:00:07:98:0b:5a:c3:37:48:f5:26:8a:45:7d:04:
         b6:4f:9e:8e:9a:7f:80:02:7c:a4:8d:88:e4:6c:48:c3:37:ba:
         46:4f:57:67:fd:13:cc:2a:a9:c6:02:de:1f:1f:23:e5:9d:43:
         19:7a:2b:f7:e3:c3:4b:3d:de:ff:ef:8d:19:dc:11:10:0d:08:
         d1:4b:00:bd:a9:e1:39:da:9e:85:f8:a4:be:51:a8:e9:db:4c:
         86:2f:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:41 2024 by rpki-client on console-fra.rpki-client.org