Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
File:                     F5MB3Mf65PfOAeSYenfLgqM2q_8.mft (raw, json)
Hash identifier:          84opiCvttufrU5ILYecScRyMrnwTAA//NI0c8QIB0Ns=
Subject key identifier:   15:1D:28:A1:26:66:6E:26:7C:BB:54:ED:2F:0F:27:40:CA:E0:AD:43
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       01935688C7D0F3E21704C5756996C6F6C6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:24 +0000
Files and hashes:         1: 3BqZM4gah3db8NGRKCbkmFWPBvw.roa (hash: xy29DSbhqZPVJH7x+frM8UEIKBgwLwoAJAGebUIG/Jw=)
                          2: 3S5hQ1fuD2afYCpBMWYcYyI8Wvo.roa (hash: 2vlkCSeukztuXRyau4/ZAodm6+Sqpqxdk+ZI+MAn82w=)
                          3: 42BxOrY47trzUY241Lat7s8s6bs.roa (hash: xXwwr1Z37TVhBX+xu9eWCeTA9rVK6Ndxyvc4KqJppew=)
                          4: 5GbfiJ23l1_I7cYYLZsSRImOHoc.roa (hash: +XMOq7ju5ljYeX/Bwauc3L4kXso/KOZShJIi7Qj9auE=)
                          5: 7YOgDZ3N-JUEmEwyBnyCvN02rms.roa (hash: /KaQ0iY9H0FYxCR3q1tOiTiZeUNcCWtkafzJ7AjzrQE=)
                          6: CZCsLmWAtamk8hPoM1dz4oO-oGE.roa (hash: 0YrsW9XbT3fjKoTm1NwavviDxQr4r2kHiysLJayur7I=)
                          7: F5MB3Mf65PfOAeSYenfLgqM2q_8.crl (hash: JP6AJWAewIbkGmWqwkfcqtUn9hqIMrvh+K8x2o/1RwM=)
                          8: FgLM9cCx4QKe9sxKezfCVVMIRRY.roa (hash: 47ee8QkRa/YEZy4NEgaI1KNuAtneG6Ko9Ht7QzKz3oA=)
                          9: RofCJdTLYi_DnwBaMpzoNeZt9bU.roa (hash: glHxrEzpwvq4xssgFqafrDV5YKQ1Tf11FfcJ0Wu/D04=)
                          10: To3MA4BpWRqwixoVnhewSjEYzT4.roa (hash: 9lbf2v9hyi9SM1tsdgIMsqC0/VTZFt0QJ3oOnF+VAtU=)
                          11: U-DMdsIn0pa6a6YbCybOiCdspxQ.roa (hash: dWa6aZBDEgU5mvJL4ajfDmdyit16aF4NBp0b3Ej2k7o=)
                          12: U9pf3yBNWK9FzsLtCKWrRg2txEo.roa (hash: X8G23lpq/eyxZlgnp4XzV/rRkeWmaicDk/Pr7VtTWsY=)
                          13: VizVaO6G61bKlEHaenNZwjCS1Zc.roa (hash: lFiCdz6rNQAF8KJvxH/oKvxL/IPYriNc8vMvEyt7iPo=)
                          14: _L2Iikk-jC09tVtWQR0284A1Y0M.roa (hash: Q86lP666xvRPwjhYqRx1EfBFtVMHREn3fdZ8e3cpyhA=)
                          15: _TiiZziwspE9wW85WJinR8FkGZg.roa (hash: hIW1KJP/RC7/krR0pMm7/w5HBpT6GcnFXbusylVX3UY=)
                          16: dIKnVDdffbYxYe8Xn_rzW1-cuQA.roa (hash: tfKghvC+tNh8db2JH9hzrwA1QgLYCdf+lE/QjuFD9X4=)
                          17: eVzUY6Ubr2U9z8tyhBBF6DnYc9E.roa (hash: 7K7m+Xp52Rz/VeRcveDpW2C3XyxRJkMcq9uHhjiA9hA=)
                          18: gZ5Pzt7MNb_Hfa2C7BvypeoPIno.roa (hash: n6ASLtmwnk1rrz5qFS4eIz7+1dgid5tdquxCDhhtEpA=)
                          19: jPRJ5scaaTf8Vo0zx4M-L2EBrAM.roa (hash: 7e+fj0oPT615lgjDE/jZs0glVe4OmY/8Hj0RydXSmtc=)
                          20: o6DCl-735Gw3HFRiuslykk0QhfI.roa (hash: lIT76ir20Zao6uadVXXIzXS/4JbZTWcIUB1lpgUbsF0=)
                          21: rxjmspn5zBaJCwCHriwqgyXYtz4.roa (hash: XZMvDIPhl8F1yuLcRr9JaGPeG/1nTsNBUIOvFxDptBM=)
                          22: u7hVF-Xk10f-fxQic85mTu7Bgz8.roa (hash: swy2/y0+2xSDilZKevKbvEG5hofRPNsTIwU/ccy9KG4=)
                          23: u8sxEINF7Wh02dONC6LnE40SNhM.roa (hash: MCuTc6eMMNc4x9Sb4bRjFlsC3apXaJd+ZCk4SUvUIz8=)
                          24: uPW5nX_fRQlXG4AVJl4K6-BKYZk.roa (hash: +1BivVtLeGeBKW3iPUMtmgcuAXP7DDu3hHVVMkveVLo=)
                          25: zYegAH-ad7d5onhBOC83dQwCFf4.roa (hash: mfvcBp5EuSQPnl1M0ZApi4+1cY71wCI+8pDFgRrY7V0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c7:d0:f3:e2:17:04:c5:75:69:96:c6:f6:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Nov 23 01:00:24 2024 GMT
            Not After : Nov 24 01:00:24 2024 GMT
        Subject: CN=151d28a126666e267cbb54ed2f0f2740cae0ad43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:a8:98:65:3e:0a:48:1e:17:53:99:c7:d6:
                    16:2a:b6:bc:07:6b:07:ba:0a:19:13:83:f5:d1:92:
                    3a:ab:75:9d:e0:94:d1:29:52:1e:71:26:e3:30:95:
                    97:ba:b8:4c:5e:5a:10:9c:b6:d2:ec:d6:0e:62:23:
                    e0:ef:6f:73:d2:f7:12:d2:5f:07:01:04:4b:99:89:
                    7c:08:14:8e:6e:d8:59:cc:24:d5:59:b5:55:5a:90:
                    5b:23:06:18:0c:36:f0:d6:f2:5a:50:be:90:97:a8:
                    b6:76:00:b0:60:08:53:32:29:36:9e:b4:34:4a:19:
                    72:96:65:69:1c:0d:a2:9c:89:e8:d2:46:d1:18:c8:
                    7a:99:d5:de:ee:44:15:2a:14:99:82:85:dd:91:b7:
                    4c:32:9c:f6:13:87:05:ae:36:7f:1e:31:aa:c9:ca:
                    72:f5:00:96:fb:ba:09:68:53:34:d1:28:77:3c:94:
                    11:ec:83:e6:93:89:83:22:3e:cf:32:5a:5b:29:ea:
                    bd:b7:d4:46:71:4f:6b:63:8f:1c:13:a6:77:96:36:
                    13:09:9d:a2:5c:87:df:32:a7:17:51:93:1c:ca:5a:
                    b1:b6:8a:2f:06:2c:5c:72:67:bb:ba:3a:52:e8:7f:
                    3e:01:d0:13:10:6f:4e:57:b1:ff:f4:a0:58:98:e1:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:28:A1:26:66:6E:26:7C:BB:54:ED:2F:0F:27:40:CA:E0:AD:43
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:79:01:0f:2f:7f:ce:d4:37:77:55:1c:d0:dd:b2:0b:55:17:
         31:60:c0:40:9a:b5:d2:f3:b1:ae:38:90:f8:1f:76:dc:f3:cf:
         d0:5a:42:12:ea:1d:5f:b8:99:de:38:92:cb:35:aa:89:d4:ea:
         eb:db:37:fa:37:0d:d6:29:2c:98:84:97:73:96:23:f7:db:80:
         7f:22:0d:e1:2a:b9:87:07:f9:db:18:31:42:9c:8a:45:97:88:
         8c:5c:81:cd:1b:46:e0:32:cc:5c:f8:dc:8d:55:c9:b3:a1:e2:
         c9:b9:5a:80:d1:dd:97:76:57:4e:f7:ec:7d:31:eb:e9:66:44:
         8b:01:18:88:5f:23:e5:7d:e0:17:96:a8:76:67:63:a1:2c:cb:
         83:32:6b:2b:0b:92:e4:f2:fa:8a:15:67:03:e3:83:ee:9f:07:
         85:7d:47:80:14:c6:81:35:db:2d:86:16:85:ee:33:c5:47:a4:
         2b:2d:92:30:35:7e:de:d3:d1:c4:d7:5e:e8:b5:ce:a3:90:23:
         10:99:fd:5c:0d:ba:e6:36:af:65:8b:2c:48:7c:af:08:dc:64:
         ae:fc:54:5f:e3:8a:e0:22:62:d5:f1:46:89:8a:32:1e:31:26:
         ca:80:6b:93:d5:31:b9:b3:18:dd:f5:1c:9e:44:c0:a0:ac:a4:
         1c:a9:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:03 2024 by rpki-client on console-fra.rpki-client.org