Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          jnHJCKvKbSDWmOhdbGAyeunZCtdRv6aoP86VF5RLsxc=
Subject key identifier:   7A:82:E5:4E:0A:1F:45:BF:C2:3C:87:B3:1B:5C:E4:75:3E:79:D6:F7
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01946E30EA600DE5BBC734008DD9AADD5DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0A61
Signing time:             Thu 16 Jan 2025 08:18:06 +0000
Manifest this update:     Thu 16 Jan 2025 08:18:06 +0000
Manifest next update:     Fri 17 Jan 2025 08:18:06 +0000
Files and hashes:         1: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          2: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          3: 6JXerbrsuLioFMLBaMW6HIp8-c8.roa (hash: zH71WBDxUqan8pwlYgSOa/jpEFPJ/A9dYkcx/TKDltQ=)
                          4: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          5: 7CBPhDHSl2zQAyLfGL8OgbF2qtI.roa (hash: 82jeQS20fUJ30Mx76IFKR7yj6BzFksheGqOtYMhWStc=)
                          6: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          7: DwYRxgYeXApocC24tYlVvUen_78.roa (hash: iHpSxAM52sPB00v62NkUUPRqOKe3WSIQZRaMIsejpUg=)
                          8: E0BTLtOGRCgE7shsJ9zHdTovgwI.roa (hash: M+X7/sSR8qzYuzwNgQxNvGCDZocwzQo8c87DGDgS4LE=)
                          9: Er3dNMnHTPknGpD6BvBEfgWznsU.roa (hash: fK3hyT2Fqhpih987SVxP45DJd4CEvVsVeF21OdADq1E=)
                          10: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          11: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          12: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          13: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          14: YuzK84yE-VeaDfqQ6O3J9o15Kv0.roa (hash: EVKp3DpwGwk3zHFDB6I7C6vUQecOQerB/cDYFjxLfg8=)
                          15: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          16: alg23em52u81qKf3TWMm9rQtp00.crl (hash: LV2BTaDHiomfHmv5IDzlwrE3HisY5tQx60wO6v9bCBs=)
                          17: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          18: gICPhcTsoI0YK3iOPq-o_7f9fls.roa (hash: K7UF3wrsSvyCn4ea12qY9ZcQL+bzMHsZZGLPE3oFOeQ=)
                          19: ilDsB1oCh4sjhvENVw42i5WUlqk.roa (hash: vSxvsrihNX9SUSeA3egKFeCzHd0zX/pJIX5pzpkntKQ=)
                          20: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          21: m_-w8MFMUmsKtyAMzo-gKd4PsF4.roa (hash: PNaFxj917iX4GEfcQQyfGoc2Ozyldd8hXlcOtZgzFQ8=)
                          22: nrYj8o9ctAMrHUvy9NUmZP_gBbk.roa (hash: iSC7Rfd4GDJ/zn6hnztEkSiK7bq2TkJWx8kIhr2koeY=)
                          23: pWyS-1rGhe2Aw9f1rNU9tefSOlA.roa (hash: XwvZFy1dcfS2BAsvDZswVk/7bvjG7bXbvgu2fwgL2Vc=)
                          24: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          25: s_boRMsxilQWE8157RLOKzIWIJw.roa (hash: VFxN5+gRgYJCBlCCrJNx1xL78Rg8kJ1C8LU6TrYm+VI=)
                          26: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          27: uoWV7MMzn3AnRE_gKTcrUP-b4Ok.roa (hash: uN1GHLjKYRfZ5EMKbcr39g1ywveU6cpqZXuIVANglSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 08:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6e:30:ea:60:0d:e5:bb:c7:34:00:8d:d9:aa:dd:5d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jan 16 08:18:06 2025 GMT
            Not After : Jan 17 08:18:06 2025 GMT
        Subject: CN=7a82e54e0a1f45bfc23c87b31b5ce4753e79d6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:51:3b:d5:40:cf:e7:e2:ff:aa:c6:3d:ef:
                    f5:c2:30:f2:3b:b3:d7:09:93:cc:82:34:dd:af:13:
                    ab:d5:04:51:90:7d:01:67:d3:88:b7:1e:ec:7c:fa:
                    55:23:fa:8f:a0:ad:fc:e3:6f:ce:c7:25:9e:64:f6:
                    ed:29:b3:c5:41:b7:d4:67:16:19:08:c4:a0:1b:cb:
                    a2:1b:ab:b2:c7:64:1d:e3:d6:1c:d3:d0:e8:db:61:
                    40:e7:0a:f4:af:d4:77:7b:78:bc:b0:19:bf:d8:3f:
                    f9:4c:9a:b7:d0:bf:d5:26:e4:91:62:26:02:f3:c3:
                    23:cf:93:64:ec:82:33:ed:4e:d4:73:72:50:c5:1c:
                    f1:be:96:24:da:9f:05:1b:3e:08:da:94:1d:e9:05:
                    5c:39:b0:22:3b:58:ce:78:c2:8b:6d:b6:1d:ef:2f:
                    ae:f4:dd:09:27:f3:8f:0d:4b:66:c4:86:b5:69:f7:
                    c2:8f:1f:63:b2:4b:65:55:62:7c:5c:93:8f:61:8e:
                    ad:3a:a2:10:9e:a7:5d:e5:af:1f:a2:c4:17:42:78:
                    27:db:46:60:24:d8:54:39:92:71:b4:5d:38:b4:44:
                    77:2b:86:41:47:3a:db:e0:ae:fa:9f:d5:36:0e:51:
                    4d:6a:1e:9b:75:53:a9:24:3a:69:eb:24:d3:42:8c:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:E5:4E:0A:1F:45:BF:C2:3C:87:B3:1B:5C:E4:75:3E:79:D6:F7
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:34:f6:8f:57:50:29:12:cf:99:f6:df:c4:cc:96:4e:a8:d9:
         a8:a6:a8:5c:d7:a1:90:40:a0:63:fc:ee:46:08:98:e7:3c:fe:
         14:17:9f:4f:6d:50:c9:21:cb:23:0f:c8:e7:9a:0b:05:50:15:
         5c:02:66:91:ff:de:a3:93:59:63:8a:8c:50:e4:97:a3:b3:9e:
         ce:df:bf:de:77:e5:13:cb:84:f0:1e:dd:15:ae:6f:87:9a:eb:
         91:1c:ca:59:68:ae:ee:1a:a6:6f:df:a4:d6:30:e1:7d:cf:75:
         98:2c:29:d3:c3:18:95:04:5d:4c:3c:a3:84:34:84:0d:82:74:
         d5:d6:99:6c:93:64:c7:53:5e:d1:23:42:0b:eb:d2:00:04:f3:
         e7:5b:05:de:9a:82:ff:6f:10:c8:89:e7:cb:03:b9:a9:92:3f:
         b7:cc:fa:62:01:a2:cc:7c:63:54:4b:8b:37:5f:e7:71:a4:c3:
         09:13:fd:f2:e2:7c:c2:09:5e:27:c9:b3:61:d8:40:93:51:e5:
         09:e0:03:68:0c:24:00:a3:35:7e:26:f6:84:0b:22:11:de:00:
         65:d2:11:82:a3:9e:33:1f:85:95:70:1c:55:0a:48:f9:c2:33:
         5d:74:70:4f:9b:16:ab:58:6b:21:4b:5d:d8:05:59:3f:23:54:
         da:30:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 17:34:07 2025 by rpki-client on console-fra.rpki-client.org