Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
File:                     XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json)
Hash identifier:          bwGd8lLCZsYVvAahwDt+ErNDKN47gxT1eLcUFdg94TI=
Subject key identifier:   F5:EF:A0:E8:25:5F:10:23:54:2F:9B:80:5F:6E:61:FD:3E:FA:87:19
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018F836DB787DB5B6154C628DF5141ED2C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
Manifest number:          0E9E
Signing time:             Thu 16 May 2024 22:02:36 +0000
Manifest this update:     Thu 16 May 2024 22:02:36 +0000
Manifest next update:     Fri 17 May 2024 22:02:36 +0000
Files and hashes:         1: 0h42V4ugE74JlWduoQtP8s71SNc.roa (hash: HvAkbWXnDBWc0C1zXnWr/QsikhXVbjhfNidTog/tjAM=)
                          2: 1-RkX5OHIqkZAwwZrfy_Yw5tGVHQ.roa (hash: pB2d5UmDbwWH6TUlta/z+rvmCOY6D4LEyE166c9aZrs=)
                          3: 1-TukFg7Jlr0aAeRcbJUHvPv9CS8.roa (hash: GO7gc+VroePomYfx7mLBOq16/1UGcn/evw+knJr9U/A=)
                          4: 1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa (hash: +qbwYVJdu/904q480GhdikgzEVZ2ZfLTUpE0EmoAgbM=)
                          5: 1V0SIb1YQCUIdn6z0bt7Fur5gmQ.roa (hash: KDjWA35utE2XbamX7W7gvqafYqSUj23PtLgyvGYxbx0=)
                          6: 5-u1Wy3zT9LdZ-_yCeSqFca10H8.roa (hash: o9IJD3P5op5PEPi0GYeI0w0z3pnGjbt0vgyjxP1xuPY=)
                          7: 8xshEYk9MNFWwI3psRb5MzgS41E.roa (hash: ByZ8j3yYVQ8J+rPbQkT5daknpgs+aWRvqv308k45lY4=)
                          8: B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa (hash: BVQbpK4VvZLxVp4u/AkgPIy/tiZ6UVdM+E433I+etq4=)
                          9: H644qvSIi4hwUIb-CyyYUM8rMus.roa (hash: scsi2At85IjeoWklfO7y9OkKDqP3ef8nX067Dkj+VCI=)
                          10: KOii9uYG_rGSxg7apsPGRm7AjvY.roa (hash: jVCWo9toqc/VQlNVbdCM/uByApIjlw7MRVeFjpKaZ/M=)
                          11: Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa (hash: xrKPGXj2RKYeUbtbwtL9V3UVkh6Yg0IiGn5ggG50Zw4=)
                          12: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: LK2ZdW0nq0faaQYUJV3MnLucIYxgSfnSZ2ZZFNDtMEc=)
                          13: eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa (hash: BhyxtlXqcAofnuqBwhv9Kjqp3Z99p6OsZP1kYIBSUZ0=)
                          14: gi3g9lMZqk5LsCUgiLcraEGfl6A.roa (hash: h4Urw5Saf0kr5tR/QvGZIcGQErZllYDwAdh3ZVNABcs=)
                          15: mUrmeukjQNjozVMBDAi2xF2cBcI.roa (hash: rZTOHZQa2h1xc475bSkNWYD6hOh9BtvrNV19F1O5gpE=)
                          16: mnpmKP9eXJZL8NCsRd1UfqQxAxg.roa (hash: /0LyTrloEsxXB+aLlDk951U60bydmxq4oINr2WcXLfY=)
                          17: nKW2zwZz6vvH_FAbrFUAfXGOn8o.roa (hash: l77nfiOE4V4ciOEpkp+s7W9zcLHQbi9KyhlUes94y/Q=)
                          18: plBciUQQ0ImO2Mhbuam2n_zesjY.roa (hash: Fw/VM4/6pBdVS8mDllOT3UQE3loPzcYi5+HAjA0T6sY=)
                          19: zmbCsknJH083v6TVx-XCpSuiAcQ.roa (hash: 0Y4kTb80Lx01GeN5FqaZUfEbjR4Cfrg/Bqv4XWrtaSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:b7:87:db:5b:61:54:c6:28:df:51:41:ed:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: May 16 22:02:36 2024 GMT
            Not After : May 17 22:02:36 2024 GMT
        Subject: CN=f5efa0e8255f1023542f9b805f6e61fd3efa8719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:76:58:2b:7e:53:d8:92:4e:5a:cb:81:b0:
                    38:21:36:ed:8a:d9:2f:a5:88:4e:b2:ca:d7:fa:96:
                    8f:c1:52:37:b8:1a:b9:da:56:a0:1b:87:de:48:fb:
                    f5:7f:79:8a:c0:a2:42:7d:05:f7:8a:7a:c7:ea:89:
                    5b:df:c5:ac:af:90:60:fd:59:ad:64:ab:55:f5:b8:
                    92:5a:20:09:25:e2:52:6d:e2:f2:71:74:af:97:21:
                    f7:24:13:90:fc:e1:e2:4b:f3:e3:37:47:0f:c7:6b:
                    a2:06:6a:f0:72:74:94:c6:0a:d4:d1:68:a6:62:23:
                    ac:0b:8d:06:95:e3:94:5e:17:cf:48:4f:ad:ac:b8:
                    f7:ad:4a:3b:bf:bb:74:74:ed:9e:4f:56:67:43:c4:
                    21:79:bf:00:7b:1d:3a:83:48:7f:43:cd:c6:20:3b:
                    0c:e1:cd:1b:fa:17:82:0d:da:39:6f:cf:07:21:83:
                    d9:5f:40:78:3c:ad:d9:a0:8c:03:fe:76:47:f4:97:
                    11:13:01:4c:21:2b:75:d6:1a:54:5c:29:8e:80:3e:
                    b3:66:50:27:73:87:8d:01:5b:97:6e:34:71:0e:a7:
                    82:1a:c5:96:9e:75:68:04:8d:35:2f:0a:e7:7d:31:
                    6c:35:65:9d:4f:6a:4a:8a:12:aa:3c:2c:78:ed:8e:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EF:A0:E8:25:5F:10:23:54:2F:9B:80:5F:6E:61:FD:3E:FA:87:19
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:1f:52:9f:94:14:28:97:f4:08:a3:e2:73:6d:eb:0c:a2:
         0d:20:b3:93:50:7c:ef:b5:6f:a6:6d:12:26:ab:48:22:8f:dd:
         3c:8a:81:15:b4:d4:2e:87:26:32:66:6e:4d:5b:60:7b:12:5d:
         23:53:74:bf:cf:22:47:b7:22:55:d7:9d:72:65:42:68:ad:c8:
         ef:57:f1:51:9d:67:11:ea:8c:33:d6:5e:08:53:73:46:ac:41:
         ec:82:93:bc:61:cd:7a:97:6d:38:49:2b:04:fd:82:3b:6c:3e:
         96:83:37:29:90:32:78:bc:ba:8d:46:a3:66:da:6e:03:08:c0:
         9d:7d:c8:af:3d:ad:3e:f3:e6:a2:63:9a:72:56:57:9d:52:cc:
         da:7b:af:b9:60:be:65:a4:eb:ef:f4:aa:29:4b:6e:a7:d2:72:
         f9:15:b9:99:74:8e:59:d8:f6:ce:f0:c6:5d:18:09:bf:02:fc:
         bc:3d:0b:4d:10:99:90:64:33:04:f3:d5:aa:ba:35:41:54:8b:
         96:5b:19:41:ad:3c:46:af:ce:cb:a4:a1:61:28:b0:dc:de:e7:
         2c:ae:44:0a:7b:ba:29:7c:37:69:d3:64:ae:f7:bc:99:00:a2:
         e4:71:a6:de:34:56:08:f9:af:50:2c:ed:02:fa:3e:59:00:9e:
         01:c0:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:44:13 2024 by rpki-client on console-fra.rpki-client.org