Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          txO16q5YZTz0IC2Xf05DDgc5APGzm9pYasPZ51MbuaM=
Subject key identifier:   5B:D6:4E:49:BD:05:B8:91:8D:60:67:8D:B7:BD:A5:78:51:5E:B1:55
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019011E6810B088D016F5A6F5A50A4B3F12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          11CD
Signing time:             Thu 13 Jun 2024 14:00:37 +0000
Manifest this update:     Thu 13 Jun 2024 14:00:37 +0000
Manifest next update:     Fri 14 Jun 2024 14:00:37 +0000
Files and hashes:         1: 1-HL-OdOeoc0m0SATYXxQK6IgqQc.roa (hash: 7YFOgkqgjrMbvbKd11ARpbaiU+siCmXEjyRumeoxFjg=)
                          2: 2_J9mL3XgD_kRv43Zxb1qpgeusY.roa (hash: BT4ikVgRDIfMHyLN6PDoERnZXkSxffK0jAs/wXbsVwI=)
                          3: 2rKhfOtmJwC6iklG8GDqXWNT6KU.roa (hash: sfZahddaVNy/2DOVmEFD38klTEjVU8k7cRw6FquvKKo=)
                          4: 51QwOsAkEg5uxXWA7v6JW8nhFFk.roa (hash: E7Ag2VJ0ybxWJOU0v6r+wf1w/JjAIjiXt3YeH++KfOc=)
                          5: 6U9fmG9AK5i2irSVP7PNutKCp14.roa (hash: +PqH4BgCUb96osKcUjxV8pD5M0HAKS5Fq7FgnwuKF48=)
                          6: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: fJVyfloDI/q0K53iPUKv5ewpy8xPJfk7V2RsTCCxN6E=)
                          7: CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa (hash: rZ+olhHSGl/KnhRsGGqUBYCQOJ4hOJO7ZUIncIIkMGg=)
                          8: R0ReoQbqDH6FfeYwns9V34UdN7E.roa (hash: AvejWIfE0gmVad6xw3lVtCXpD7bWuI2e0QLPAeVe3mo=)
                          9: Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa (hash: +pN4Pd2383xnLXj68X32P7/s+lJrKmnV+dmvVXeVvZQ=)
                          10: cA8AmP9V4ZSyl9h6GuuHAhvaOjQ.roa (hash: MJmzqvkWXA6PsO6NPhu5H6ZbcPzMgGv17dSYyd5Lgz8=)
                          11: kBViyr5yGJFsHmc7FZeceyGkQOE.roa (hash: IF/jwV5BYFaipFzwpESRFaQsC9FcetdyGnrqOzSWFoI=)
                          12: lu8Rvs3fVMprmZmVVQ_1Clp3NdE.roa (hash: jGFGdv0gwktWpG2AYOh1czpziVNBvimJ1wKyvJbDDQs=)
                          13: p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa (hash: 4G7/rBDu1fOzBYxyJFAnAShLkdyb3ZlulWYd0dhl6oQ=)
                          14: sBjpCv4IedKx9oUK0VBG9teqHFk.roa (hash: X/sBvhOXJKf6a1x5ECJCEWLDjhz9NXwm4uJVzHyoefM=)
                          15: y2GV6aTaUOUJnMwRp7T3xTGYpsc.roa (hash: TfpM/sCLBeNscirhAgRcOVJis9xFdjJrS1YdbIm/Gbw=)
                          16: z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa (hash: u9oA2bHZw3lUSP+WTjTj9gYnq5LWD1Tw4yifxX9/ry4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Jun 2024 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:11:e6:81:0b:08:8d:01:6f:5a:6f:5a:50:a4:b3:f1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jun 13 14:00:37 2024 GMT
            Not After : Jun 14 14:00:37 2024 GMT
        Subject: CN=5bd64e49bd05b8918d60678db7bda578515eb155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:02:45:1d:a0:c1:eb:05:e3:76:65:22:d2:
                    4a:5d:35:73:0c:dd:28:5a:39:bc:81:03:50:49:d3:
                    b9:16:7c:4b:b6:fc:76:6f:7c:68:a4:a6:8b:d2:71:
                    f0:eb:ae:4f:83:d4:11:2e:bd:bd:85:de:d7:81:db:
                    b6:10:8c:e4:5c:c6:3a:57:3f:f2:04:d5:d5:43:2c:
                    eb:56:d4:01:c0:56:97:a8:31:7c:99:56:f3:e9:11:
                    74:a3:c2:82:16:1d:31:fa:84:e2:a8:51:4a:c5:d1:
                    3b:e2:61:17:45:98:5f:65:c7:4e:07:39:f8:0c:81:
                    ea:23:fa:9b:07:78:6a:00:49:bd:1f:3b:40:c0:ba:
                    4c:7d:4d:cf:29:d0:53:1f:fe:d5:64:04:0e:ba:e2:
                    ea:8c:3f:20:12:76:c9:8c:bf:71:a6:71:51:a1:7e:
                    9f:d5:74:b1:f1:f4:59:bb:60:fd:bd:c8:5b:8b:d7:
                    6c:fd:cd:ef:f0:32:63:75:b8:72:8d:a0:3d:d3:5e:
                    f7:80:b5:80:d3:b7:1b:3e:5c:ba:cd:15:3d:03:f7:
                    d2:34:07:99:3b:61:75:60:fd:80:2a:0e:9a:a2:cc:
                    52:c8:ee:60:bd:0b:18:01:cc:61:90:08:c7:01:81:
                    b1:26:33:da:7d:b4:82:dd:c3:04:b0:1b:73:c6:8d:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:4E:49:BD:05:B8:91:8D:60:67:8D:B7:BD:A5:78:51:5E:B1:55
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:ff:c6:f2:da:ed:2e:7f:f4:69:5e:83:a0:de:27:e4:8d:
         2b:65:e5:f6:94:8e:ed:0d:b0:d0:ca:aa:54:58:1f:ff:25:b1:
         4d:83:a3:9b:41:8e:03:e7:00:d7:16:54:e3:6a:22:ed:03:89:
         4d:e4:f6:e8:35:c4:b0:2c:1d:74:bf:1b:bc:0a:97:77:5a:65:
         e2:0a:9b:e6:8e:4b:7f:1f:b3:b3:db:51:cc:0c:7f:d1:ed:c3:
         bd:60:8a:8d:47:b2:c9:bd:ff:38:1b:3c:44:2f:46:ab:43:7f:
         bb:36:24:dd:e3:35:5f:02:7f:50:a3:ec:33:61:3e:a6:47:2e:
         6e:0c:62:22:fc:79:d0:e6:7c:e5:c0:bc:00:c0:19:de:07:d2:
         5f:e1:43:d4:15:85:32:60:95:c1:b6:73:7f:78:34:92:11:65:
         89:42:c6:20:9f:5f:ea:62:f7:bc:55:69:81:39:16:bb:01:d5:
         02:66:81:14:48:5d:f9:a9:89:71:e5:c2:5b:4a:be:ec:dd:55:
         f5:fd:f6:a7:4d:3b:4c:20:90:62:fc:58:09:e0:aa:59:8f:77:
         13:e2:cb:31:8c:e0:98:ef:e8:34:34:e6:3a:2a:6f:52:86:98:
         d2:f8:24:c9:ee:b4:1a:11:78:bc:65:d8:bc:23:b4:d4:76:68:
         95:63:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 19:03:22 2024 by rpki-client on console-ams.rpki-client.org