Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          piAQybe39IXdeGad/uhsbka1wWicCwD7Baw6LavMkGw=
Subject key identifier:   D8:0A:0F:26:00:94:E2:B1:B3:A6:CD:95:B7:82:6E:8B:4C:C9:72:D9
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       0193523DFA3F604C0126269AD4B51CF344B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          0D12
Signing time:             Fri 22 Nov 2024 05:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:13 +0000
Files and hashes:         1: 1-sfwA4U4h3lTo5KucSq-ZE5Tp2E.roa (hash: ptQu0fd2HlWOt2nEcfjWaFm5qfAMnW412u7uq7g2OwY=)
                          2: 7g63JuL9uHmXcL4qOG1F3EqOMxw.roa (hash: CgqnxpznS3GTrXtyLzgoMUjTwKd7awAtMPLPSWi60Cs=)
                          3: 8_dsS8Stz6tn9y-M5SKMoQp0-Zg.roa (hash: 0kuMt/1qGwmmbLC/G2DNAlWjSeKiZeNH2M8/yNWNW9U=)
                          4: Dv35v0OXG9-I7d3zjJmj90hw9v4.roa (hash: wo1j5uSxpgfhG8VhaoUo9TrIKoFJXddkw5IJ2RMsRa4=)
                          5: HqFJzFf-i-JwqGcjUnOUj8hama4.roa (hash: c9Xvunej8yOrdNHfsroII2LRD0Ceg0sveul/GPHBwCo=)
                          6: IIpK14csdcY0oNfTAoZcw7g5A4w.roa (hash: WZLr7O/Y1hValjhcSRF6yGfMn1jFhZXTTM5O/khCrzE=)
                          7: Sjda_fX4b-hcjKYXP7M3QRPo7OU.roa (hash: 1Q0A+JylAFgSoVPzoFq6PQzAUQWwlcWA8Y3bebSqMEQ=)
                          8: VeKC6pKrzOdNAMHzi6N5KgqGHFc.roa (hash: ilCt7CJetrrQsb3NNHDWl7najJbd432UHkpFHIgP1Q4=)
                          9: Wlb1CYPV7Z9Ww2oeG9BEjagxt10.roa (hash: CrxXvQdil88zxtH+taP63smDjzuGfVCRiW9mzTOgQ6s=)
                          10: Xl_gQ2mvj-OK0hTC6bCHCz0omxM.roa (hash: SHr41zUFbYFDH/gKZaJyVoUeJ0W7ObUs5WPRsQn9w0E=)
                          11: YUBDFPdXXpAU3mdNFtZ7CQcrpjc.roa (hash: +CkRHY+01TCKIekjQoVtsYPNLBLBhT/zGgdfFhtN1Gg=)
                          12: aktxosgal4QJyxHc9O_25p1jtvQ.roa (hash: 9vh8YSTb8YSMTAg9DS0UqbRhaduqGRGUub+JZGBzKA8=)
                          13: bA15-9Jfu26bNaXLmUXBr9lHnss.roa (hash: hEkqhHF5nNImb+sIoajIYh9OHF4fAwG1cpwQfOOxIuA=)
                          14: bAe6HmBc8Hy2C6CCKxnCvNGEHek.roa (hash: KCrqW2Y9DO7cmWhpF2Ep36tW7jbmFKd5CaGpdXTzcQ4=)
                          15: bLXdN6bbCn_Cur7QGqpqsA2YunU.roa (hash: PYo3xfxjHEWKQpmIkgchQppi68dGWboW7h/udyEnR5o=)
                          16: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: K2H4oubcizG2SZUyRsEnuYm25A5w56gMQE0WlenZGAk=)
                          17: jy6uxOfZicDqQsvZGK1v25-jkbc.roa (hash: Qy4uOl+g3Z0FAtnJE/LnVYs1ZqvnRhO6Upz0U9+LZNQ=)
                          18: k0dvZtgq6V-dLBS5au4CuRr6-i8.roa (hash: Yf5qi0MN5qS0EcMcYTLHComeduZxyRDgtMzpRVl7Cv0=)
                          19: mK_UmUYHojd2x0Vs9eu_BlHppFU.roa (hash: uKa602vqMIDqHSSc/ds8sw0D+BA21c5WBVLz62R3o7I=)
                          20: ph4tWqoG-OgguSgXJ6z7F58XWYQ.roa (hash: HshvwfrGybgqBlI2RrbclyB8wA2QXYZVfPH0hWOueZI=)
                          21: pqIs1Da65u_EucMPfwnMR4aPMY8.roa (hash: gVcAuVYmyuS1JvHUQ7GhO4uuZdvMoEbrfJtLIZLIrdc=)
                          22: t5R1-ZkJ4C59QSdf1_Sv19SGBNU.roa (hash: FKbUay8c7MIkjkvFlLAVX/n9ii9E/emMfurJHAXOyvc=)
                          23: vlHZQvk6cFXxkwouFUDYLfeEupo.roa (hash: wioMynLfOoSLxgrWZLgjn267r9Q/PkPQZ2IIZ+XSXPg=)
                          24: wcK7yLNeadGUHgZlSwqolo-ImJ0.roa (hash: CDa24p0uvKPJGCAJgQ7OkHbu8xKnyn/8t3te0O5vKzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3d:fa:3f:60:4c:01:26:26:9a:d4:b5:1c:f3:44:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Nov 22 05:00:13 2024 GMT
            Not After : Nov 23 05:00:13 2024 GMT
        Subject: CN=d80a0f260094e2b1b3a6cd95b7826e8b4cc972d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:8a:04:07:b9:de:ce:35:b1:d3:7d:2c:d2:
                    20:fc:76:a9:70:b3:e5:67:e7:39:ee:16:29:2d:36:
                    b4:8d:c5:c2:08:4b:1b:54:e9:d1:62:d9:9f:7b:ea:
                    d9:92:6c:b4:58:59:26:3c:dd:c4:e7:9e:b2:69:0c:
                    32:7b:67:34:54:38:08:2c:62:da:4d:59:e5:da:d4:
                    f6:14:da:26:7f:6d:8a:e8:e7:c2:34:ba:9e:49:7a:
                    7e:f2:33:64:31:aa:c3:25:57:cf:c2:c9:d9:c5:05:
                    ec:62:9e:b4:02:bc:3d:1a:e4:3d:fa:2e:60:78:f5:
                    a8:cd:7a:ef:ba:41:dd:ef:07:25:56:5d:05:7b:d5:
                    64:04:37:8b:3b:19:19:04:51:70:bc:b9:9e:92:8a:
                    d7:a1:99:6f:ff:79:14:d9:68:23:d7:c0:55:02:5c:
                    97:36:31:12:a4:bb:f9:29:bd:af:90:cc:8b:b8:71:
                    70:83:5f:8f:15:fc:b5:b4:e9:11:60:aa:96:b9:78:
                    5d:11:a7:73:55:44:29:80:a4:99:a2:d4:2f:c8:da:
                    e4:17:fd:08:85:dc:e6:11:9a:d4:a3:aa:6c:03:5e:
                    73:bc:bb:20:9a:ee:30:43:1d:02:07:f2:d5:4f:fe:
                    a5:94:ea:df:bf:4f:40:42:68:e6:3b:a9:6c:7e:bf:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:0F:26:00:94:E2:B1:B3:A6:CD:95:B7:82:6E:8B:4C:C9:72:D9
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:01:97:ba:6a:ab:97:ba:40:49:f8:06:2d:a1:b0:7d:10:d7:
         4b:14:6a:7b:68:94:91:29:43:65:c4:0d:ff:43:88:5e:54:78:
         33:d4:29:9b:e7:88:50:1b:51:4e:d5:37:ee:65:56:5a:e4:6e:
         6b:3f:34:b3:1c:c1:57:52:55:c2:49:69:b3:7f:b5:9c:14:f5:
         ca:0c:f4:72:33:3b:7a:55:45:b8:7e:ff:ac:8d:79:7a:76:34:
         38:29:4a:f0:46:75:dc:82:44:8b:ae:5f:9d:0b:07:8c:6a:ac:
         ed:00:9b:e4:d9:4e:92:da:06:4a:c3:b6:16:a8:f3:d6:6c:2c:
         ef:dc:b9:7d:60:56:b6:1f:df:6a:ac:dd:d1:c4:59:a1:7d:3c:
         e0:d3:2d:f1:d5:ab:ca:39:9a:a3:73:de:10:c7:b9:e4:13:c8:
         fa:6d:03:95:f8:65:86:c5:b3:06:b8:bf:cb:73:2d:53:43:ca:
         98:9f:27:a9:56:fb:74:df:49:dd:3f:9e:52:48:13:2a:18:ba:
         05:62:2e:2e:8a:25:9a:a9:46:37:10:c9:f5:04:70:3c:f5:ab:
         4f:fb:ce:70:6e:18:fb:7f:21:63:d1:90:50:18:e8:a4:b9:0a:
         f9:20:4f:b0:f5:8b:49:5b:83:7f:68:19:1e:79:20:b0:d2:c2:
         b9:a5:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:31 2024 by rpki-client on console-ams.rpki-client.org