Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          j34RHrBlRSi1/FrVXlJ2ywgTQWP4PjSOx9HRo7bqBeA=
Subject key identifier:   C7:24:20:A2:22:49:C2:DD:7B:20:3F:B5:2A:FB:75:DA:D2:04:5A:65
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       019351992AE5A2160727A77539292C303E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          10D4
Signing time:             Fri 22 Nov 2024 02:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:12 +0000
Files and hashes:         1: 0R3HKPvaLGo5XwxWtv3pb7eMF8k.roa (hash: swWV//Z9e4bsvEizHUmsftfoYcEaDm9hxuX8YLMdbTw=)
                          2: 1-nke-fez5zrZwhNSQ5KOwL1AbQ8.roa (hash: 3FvDtr6anC8P8oZykYNoHJF5fbrylCSBu4bEHVSDKAc=)
                          3: 6rndazStRhujioBo258P1qoEokI.roa (hash: 6wE2CNetUvC2npq5P1oHVbWJr1WIckeukGLMJrAehUI=)
                          4: 8AuhcfEEKRYItTQR2Jzn24jpH0Q.roa (hash: UpDWF5Jm47svdTCLuOJWo29C9tGMJFSEL2+I7wUYfO0=)
                          5: 8C-31IdH_3gqqXlZ6K_RXMVfdFI.roa (hash: GvtxATMK14ue1B5dVnjwIP6T5X5d8bT+XSsmHEf3lSg=)
                          6: 9UrruotFS7qOEkYxt1B0lLUOzK0.roa (hash: KyzGLXsoGQnJ/wQzvhnn8rIJTHO/Iw4q8l+4NEEYGcs=)
                          7: GgG7mhsdhXiKLzMaykhJkKr7XQc.roa (hash: ThHO0GR2tTK56Cek+hOZF3ZgwKtV1BPggarDdsG/xTI=)
                          8: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: tyNv9yPZMh+AnLBkL7hj0vJi2S0BdzyT2rmhjq6vJ0o=)
                          9: LlQ3T9I_EgsQeFFLw2Yh5YAdyOc.roa (hash: tA8jPai58KlNBdFWmiZy7u4vKi7VBfLlMWaP1G9yfAo=)
                          10: Mcr2grpdZ6ceJcF7dJAFb5qY09c.roa (hash: qz8niuYFBYG7dAq3MamzEb9NmZfRLOCRyXOmOfohvVI=)
                          11: R0tAQ9KjIKBc2QiDyFzcE7i5K0w.roa (hash: SVbesCqfYBucQwRnkPBALlRK2xgIi9KhpTB7E9x5VJU=)
                          12: X8i2WUIHeMMAMXhte2eivaCZS6A.roa (hash: CXcpnLAbgNQRrOYKxiexYs2FXHaaspTSzPfgRFKe2VY=)
                          13: Y577KKfqIsp7QDdMBl2F4MY1-G4.roa (hash: 0cmOffiRW3TLrgkplG0Ai0LBg6YXtDmTeyCVkJpysTE=)
                          14: cSepb9T6Lng0m6WYRtjgXpO0YaU.roa (hash: UyEm90Xriuqzt4t95YgibwEyy/yb5W/6O9YIwObAhU0=)
                          15: lRKEJCWf1G-9fiu8MNvh_SrxEhU.roa (hash: cwPKS0Zi5ojw2cm1hJWLbEhJSDfhkK6HWI0wSMrwbfs=)
                          16: nUmuqQtCmwZJovIT6p8aelgI-S0.roa (hash: oREHW4GSEh6DMeYwrQihMuc4QtcFuWqaZQDWYDWgOls=)
                          17: nmUkDfDDTPgitfz3dY_aY1tDCjg.roa (hash: NP7P+2GDvkLL/CYJj9Vth6JTrRX3cU6c3OGkFaNoM5o=)
                          18: rCaJXWTXMHeftsm0uha6bLyatyw.roa (hash: fBst+utr/pa+HIrl84EdnssR/80byA9TrB3JxM7TKkY=)
                          19: rfUWy7n6kkKWkmeKyLO_OGUOSJM.roa (hash: EykVmkaSTvi6kfX1ZVeOAoNnesOJWsZrfDgrJMzNx0c=)
                          20: tOzvSomg2VWv1IjQAXLRHrIVAcI.roa (hash: Oap7WaQ2Oa7PXrx0CSPBJeLX/S5JuZsPryrc+Vh8dc0=)
                          21: vgIt_iq9tk8qxfV4W9y72m3p1HU.roa (hash: 7WFvQ6efwirSO3JkbFiAbpThAv21zzWe2sNIe1tPU6w=)
                          22: wblRrkdqz0BMoHYQYXIoLYR3D9c.roa (hash: mQNcivvfX1lIGQUZpX1rBGtJeKuQbVQmWKE71aDxB4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:2a:e5:a2:16:07:27:a7:75:39:29:2c:30:3e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Nov 22 02:00:12 2024 GMT
            Not After : Nov 23 02:00:12 2024 GMT
        Subject: CN=c72420a22249c2dd7b203fb52afb75dad2045a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:4d:74:ec:e5:fa:75:a6:eb:2a:20:55:7a:
                    23:dd:0d:8b:7e:df:37:07:0c:01:1a:42:bc:43:8d:
                    c9:36:e1:66:70:d8:3e:ba:b8:0d:0b:fd:82:9b:21:
                    48:d0:36:76:af:20:e7:94:93:81:14:c6:e8:db:3e:
                    fa:7a:c6:5b:c0:78:5e:98:ca:58:4d:c2:0a:5d:35:
                    d5:af:f8:4f:22:c2:03:9c:34:e6:05:91:0e:4d:39:
                    b2:0b:8e:30:d6:e8:9e:44:d8:f0:de:ee:f7:3a:a5:
                    77:60:6b:df:e7:82:64:73:9c:d2:62:80:6e:84:b3:
                    08:1b:9b:43:e7:84:64:0a:28:84:e9:7f:98:b0:d6:
                    57:38:76:c9:d9:ca:86:77:9b:41:99:42:3d:29:72:
                    ee:05:c1:ce:14:de:14:f6:bb:32:09:92:af:02:ba:
                    66:8d:9a:f1:cb:84:37:de:96:0f:25:b5:d6:5c:9e:
                    a4:96:64:a5:cd:ab:c3:ae:90:5c:43:32:a2:be:45:
                    bb:5e:3b:b6:14:6b:e3:c1:fe:b3:8c:24:39:7f:36:
                    31:b3:62:6e:06:63:5b:ce:2f:e3:e0:3b:b6:f8:b1:
                    b9:7d:01:c4:79:b3:91:eb:b9:e2:67:9a:3e:60:6c:
                    9f:5d:e5:28:b2:13:99:55:79:7d:d4:72:75:e1:10:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:20:A2:22:49:C2:DD:7B:20:3F:B5:2A:FB:75:DA:D2:04:5A:65
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:4b:53:25:b8:33:08:6f:8f:9f:cd:0b:59:cf:09:c2:5f:
         f8:3f:ce:0f:05:27:a5:6f:6c:bd:85:67:b4:8f:98:f4:61:de:
         2f:91:6b:ad:39:70:ec:42:9f:26:15:fa:65:c9:00:65:77:47:
         5c:c0:b0:44:c3:05:59:36:51:74:f9:68:de:91:02:51:1a:2d:
         0a:ed:90:fc:b3:bc:cc:9e:6c:8a:86:7d:d3:82:cc:ab:09:c8:
         bd:fd:d3:e0:d2:e9:57:90:5d:49:14:14:e6:7c:da:c9:66:24:
         27:7b:5b:4d:d4:5e:db:52:eb:ba:ff:f9:89:46:80:e6:48:5c:
         aa:be:48:dc:73:66:ff:cc:75:cc:cd:d9:dc:dd:13:1e:b3:f8:
         78:2b:57:75:20:29:d5:08:07:2e:c8:db:e3:47:32:a6:57:3b:
         b7:68:b3:a6:93:16:b5:93:7a:9e:76:5b:df:00:53:82:23:3d:
         22:4e:59:2b:1a:11:9c:c9:1b:c5:d9:ff:f6:cf:66:62:aa:a6:
         ab:62:94:25:59:41:da:50:ee:f8:d1:7a:f9:18:18:b6:fe:53:
         48:20:7e:c5:75:f8:c2:12:96:26:b6:bd:2a:68:8c:51:1c:6a:
         99:46:10:fd:ba:b4:5a:85:da:0a:eb:5a:c7:36:23:d6:03:75:
         dd:44:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:41 2024 by rpki-client on console-fra.rpki-client.org