Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          2EpboBRNVcP613tG2rDWLoiJS8bNMMqrFumzRluelvk=
Subject key identifier:   26:DF:BB:FB:FD:C8:FB:6D:D2:48:FA:27:46:F6:31:B9:7F:B8:60:ED
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       0193523E1873481992A9B1473F2955971F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 05:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:21 +0000
Files and hashes:         1: 1ALR0hi1VYmVYauVmxC1s7ZSdVw.roa (hash: LQvTReE9Kilp88mvV3z0W8zBrVDVUBTkV75n7kQbexs=)
                          2: 1tAFnbECFNcjmU_vcKCN5OSZIdg.roa (hash: OYY7YzQNALMP+t5wQQjQ6QURSMNXkpc4G9N34eI3Ms0=)
                          3: 2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa (hash: duXyeqqQkFnSoOc3RYEDJ/yo7uPZwrercJ6L3+8EjPI=)
                          4: 2qHFsXMTN1ioeEUSWv8oWnAHl2I.roa (hash: xHnP54lraFviqpAPpowmq0RNizOsOTUMG104mg28zYY=)
                          5: 3-7GmlQLr1rLalz6mpiWGnBdCAo.roa (hash: eSQABfJ2n7bJ+bYF8sxBKMxEF4rDSl004n3jiWGaZ8A=)
                          6: 4ZD2S_AJzN_VK_aOSxyCGJBeF2E.roa (hash: 4ncvA+i8V7w9arIq0SDF21VGk18LdSQsYmvhy+GpJ48=)
                          7: Abyn5J8Lj0FZMp6p1DeMxTPCkok.roa (hash: HJiNzKiFdHDOxC5SJlZoyo48N+fbZ/tUM2+K+vYkGYY=)
                          8: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: z38mkNRE/wtAQQ+nPhDh4TNLq8jEeQffuKehz8jNT2U=)
                          9: Q1TIyJpbXDc4qNPPE6NW6EFQQ1w.roa (hash: /ZxQ72JF3LrvgUS877Cb9ylOYpF8Pl/ZOWpKfZWqRFg=)
                          10: SGQ_dQP4q4E_0a7HK4STGF2zsjg.roa (hash: 8IpIukYkISbZusPEV4PYS+sTsicJHGyceiHlwXmSWoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:18:73:48:19:92:a9:b1:47:3f:29:55:97:1f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Nov 22 05:00:21 2024 GMT
            Not After : Nov 23 05:00:21 2024 GMT
        Subject: CN=26dfbbfbfdc8fb6dd248fa2746f631b97fb860ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:bb:4f:c2:d9:7c:db:12:fd:2f:3d:4b:8b:
                    d4:68:61:41:e6:ba:49:b0:37:55:65:ed:46:e7:23:
                    00:21:25:62:6c:3e:39:52:3f:3d:40:58:1f:9c:89:
                    ba:8c:f1:7e:7b:0a:df:85:50:00:a8:f8:f4:7d:23:
                    0f:d2:f6:e5:16:6a:f3:98:07:01:29:0b:85:4d:05:
                    85:ef:34:99:d9:4f:86:de:ec:82:d5:20:ce:b7:d9:
                    05:95:ff:cd:df:bc:8a:a2:77:2f:9a:c7:50:7c:ea:
                    e3:cb:34:c9:c7:9b:8d:bb:70:09:c5:4f:8f:68:98:
                    80:44:84:ae:d9:d3:c9:38:d5:96:31:e1:74:68:5a:
                    26:a2:f7:45:ff:77:80:de:f0:88:58:33:0d:37:9f:
                    8c:24:1d:c9:33:00:0d:46:1f:60:e6:c1:52:a7:6b:
                    20:74:a0:02:50:e9:15:78:a0:c9:54:24:48:91:c3:
                    d3:95:13:6f:33:b1:52:97:a3:da:3f:7d:98:be:f6:
                    9c:a8:4f:61:0e:23:98:56:63:2c:0f:cc:ad:cd:b7:
                    ab:ef:9d:41:e7:f7:bd:45:e5:cc:d1:8e:fc:8b:90:
                    b8:af:e2:6b:49:80:36:ef:88:b8:07:1b:1e:eb:75:
                    6a:2b:9a:4f:5c:06:f2:d1:26:1a:5a:da:c1:78:52:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:BB:FB:FD:C8:FB:6D:D2:48:FA:27:46:F6:31:B9:7F:B8:60:ED
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:be:a4:b1:bc:b1:cf:0b:82:90:12:c2:16:4a:ef:d3:88:22:
         88:53:59:c8:52:8f:a6:75:9d:71:e7:e4:fc:16:06:d0:c8:25:
         cd:86:ef:7e:73:a2:a7:4f:8e:2a:39:40:42:ba:fa:91:e9:a3:
         e2:ff:98:d8:46:f3:13:1e:df:2c:8c:c9:72:78:4a:1c:52:d6:
         4a:29:2c:eb:65:0d:f6:ce:16:81:39:44:00:f6:57:09:a1:b1:
         de:78:39:af:9a:58:2e:6f:77:59:a6:79:50:b8:5d:ed:8f:f4:
         f6:cc:ec:2b:56:70:94:d7:cf:f5:a3:22:8c:de:4f:73:c9:9a:
         6e:73:a8:e9:a3:b5:8e:dd:d3:2b:52:55:79:63:be:8a:a8:d4:
         df:ba:38:55:b1:a5:7f:37:db:98:ac:a2:a7:3a:3a:6c:22:0c:
         1f:53:14:06:bc:e4:04:e7:a4:6d:4a:51:5b:a9:20:95:f1:82:
         c7:22:7a:5c:2d:c3:51:dc:19:81:48:d7:93:55:ce:cf:bc:4e:
         8a:2e:07:61:1a:ea:29:aa:31:8a:80:d9:0b:3b:ec:26:30:5a:
         b9:8c:1a:c5:d6:1b:2e:f7:0f:90:f0:5d:ba:e4:18:22:e9:33:
         6a:f9:9a:a6:77:2b:57:90:f7:a6:51:3c:33:46:8c:90:8d:99:
         36:62:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:47 2024 by rpki-client on console-fra.rpki-client.org