Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          vP5JukskD9BSRH7gbexFuSaR3qRJoxeM5W171YW9/FI=
Subject key identifier:   A1:29:54:9D:91:E1:48:75:E8:D3:89:3C:F6:29:BF:0B:C6:B8:DF:D8
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019352E2DEC7E7B5071E07248FB6CED8935E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0701
Signing time:             Fri 22 Nov 2024 08:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:19 +0000
Files and hashes:         1: 1jdP8IDlmdIAcEv1RBTOVscQJWg.roa (hash: 4Eed6XwHmrSl95YkeBINcJpjNoRAPoqNOQ/bz1nAOJU=)
                          2: FoV_hpIcp3Ty4hMrXmcwXLAJH9Y.roa (hash: mWghZqfh4qQkQxCVj3wqDxHfdaIMT2d8Yj3WrBmoM+M=)
                          3: M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa (hash: 7PSZQcfdCXwU9oXf8s6bj9S3wnAWbhZ1R9mu/yRhy/A=)
                          4: S_Lg8ldnUSE1hLsw_y_HWUkguDY.roa (hash: u/Csg7rzUrfpCIOZTkoQJo1fuMDqy234IHWNPAFYXNk=)
                          5: TwTox001PaLbRpuAluslkdNgx7M.roa (hash: aR9/Wce6ZSeXmnMmrpVex311OcxIlWOe1mi/K1tV914=)
                          6: XrugsOiBWMzZYY4Ez12c2SbYcVg.roa (hash: kOb8grG8KWiUFptoffv0uQQONppmydT8ja0TFcwzXco=)
                          7: YkoxKZAxg8DIs6b3n8zyR1v6re4.roa (hash: SN52h5jU1TLHxmvp1a1+KlLgFtashDCSwGSAIH6rUFE=)
                          8: czaGubBfyfz5nobZOvSWlIMpTDw.roa (hash: vNTXsAdzCTrQwwCQmJW5EjhL4sHfzCIakOPQKa2mlTo=)
                          9: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: O5zfOuCjwOiS7yDCvfamOmP48eEmwN9cd6H1BT5ReKU=)
                          10: juae4r4xSVHK5HC9HCKETU4BkV0.roa (hash: B5uRNip7AKhn5MBOLWaXtw8Bq1yHZSaGeYGjN9sBRSM=)
                          11: nMa6bFZciSvcblXzWPXrSujXIak.roa (hash: e2DRpqzJDQ1qqEfNsUg9XX5GEO1J11Wl6D8NnSzD0Lo=)
                          12: oGf46cYsKwR0TwWfVZ74Y-LZ5uE.roa (hash: /reH46sjvBwfeHUJ1aF9ZtUgfb3pZNjc+9tgAFh2yMU=)
                          13: pp6_9S1p8Me-kts257xDYuqtXTc.roa (hash: QSaDAdGsG1mk7iJiGJWKZtQuneSxcLrv+IGP+JNH2Oo=)
                          14: rl0Fb9XvvdnNHyHGX0YHbM6_Sx4.roa (hash: pwDvGNgIKAEy/IYwBQgVUXmGCvz+ShqzHTyDdSjTdCc=)
                          15: x9bv_HV21Eo7tr2lOUKa7Cgz_mU.roa (hash: Tx5Idy8JR7RzONVgV+tJZkhpLs6ZUbRonlRZbbB8+mU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:de:c7:e7:b5:07:1e:07:24:8f:b6:ce:d8:93:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Nov 22 08:00:19 2024 GMT
            Not After : Nov 23 08:00:19 2024 GMT
        Subject: CN=a129549d91e14875e8d3893cf629bf0bc6b8dfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:3b:74:40:cd:eb:8f:a1:e5:19:1f:97:9c:
                    2c:42:00:13:69:7a:7a:9e:4d:c8:65:37:48:c3:2a:
                    30:4d:58:13:19:d2:d9:84:c4:bd:d8:1d:ab:10:e1:
                    9b:99:02:2e:3e:1f:9a:12:17:34:e2:dd:7c:0c:c9:
                    eb:45:e5:dd:61:bc:fd:1f:02:f7:6c:f4:95:fd:31:
                    f2:27:8f:93:7c:38:ea:85:62:37:2b:3c:11:3e:df:
                    c8:a5:35:f6:90:43:ab:31:b5:1c:07:02:4c:1e:6b:
                    23:fd:b7:69:bf:f7:68:89:2e:7b:9a:5e:ef:c1:9e:
                    7f:62:94:e7:99:b9:e3:fa:73:5e:ce:69:1b:61:bf:
                    9c:f2:0b:e6:b7:0b:64:a9:17:fd:ad:ca:27:37:9b:
                    7f:2f:ff:08:d6:37:ed:0e:23:08:6a:22:ea:55:9e:
                    df:1f:17:a0:f8:75:00:21:4c:e1:ad:94:a5:b5:e7:
                    4e:2b:71:6c:d8:03:f6:4a:85:2f:7a:de:a7:d8:6a:
                    4a:33:32:7d:4a:b6:c1:a4:d0:6d:01:2b:29:4d:ef:
                    b1:ac:59:11:bf:b0:a4:2e:19:ce:80:41:58:4b:52:
                    cb:5b:f8:80:3e:e4:9a:ec:59:a2:52:70:8a:5b:69:
                    ef:f3:86:bd:5e:c4:ed:68:95:da:6a:21:27:d6:ea:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:54:9D:91:E1:48:75:E8:D3:89:3C:F6:29:BF:0B:C6:B8:DF:D8
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:d2:d5:11:78:63:89:de:6c:52:f9:3f:97:be:fa:73:cb:
         ad:3a:7d:2e:00:db:c4:eb:64:dc:96:e1:18:c9:a3:29:b0:3a:
         68:ff:e8:54:b5:41:77:ee:21:ae:d4:ff:b8:96:f1:c0:e9:7e:
         72:83:f0:37:3e:bd:cb:af:0c:20:06:5a:e2:54:ae:42:48:12:
         c2:81:c0:d2:88:cf:c1:90:fb:dd:73:44:9f:00:a4:29:63:4c:
         89:4c:7e:a2:63:ed:fd:73:75:77:60:e2:ef:b1:4c:fe:0b:57:
         1b:f6:50:17:dc:75:cd:9d:9c:25:d1:2a:2c:98:a7:89:ba:ee:
         45:27:4f:b7:88:40:ab:a5:ea:a2:ee:b8:6d:26:4c:00:05:bb:
         93:1d:2b:f9:73:1c:20:0d:03:4a:62:6b:3a:a9:7f:e5:fb:4f:
         48:b6:eb:0f:9c:b5:5b:f6:cf:bc:79:bf:96:c3:2e:7a:9d:ba:
         58:ce:10:c1:53:24:7c:46:29:2e:f6:28:c1:28:ad:88:62:2b:
         ca:e2:bd:ef:02:f0:77:81:9b:fe:af:54:05:fe:55:e9:f9:5d:
         82:4e:1e:1e:c4:0c:46:96:a8:34:9a:9a:d9:e3:c9:44:c0:70:
         e8:74:f8:28:f4:20:62:26:d4:7e:6b:15:df:c6:60:fd:31:f6:
         9e:4d:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:14 2024 by rpki-client on console-fra.rpki-client.org