Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          vscRsyOL0kNjxGGyBZpe0alT+U1WI7nfhnMM6Bl+HJc=
Subject key identifier:   D7:82:C6:28:9C:97:CE:82:2D:A7:7B:0F:06:92:A1:E2:C9:C1:B8:7A
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       0193542C592035648551265B78382E7C463D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          137D
Signing time:             Fri 22 Nov 2024 14:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:12 +0000
Files and hashes:         1: 1-HL-OdOeoc0m0SATYXxQK6IgqQc.roa (hash: 7YFOgkqgjrMbvbKd11ARpbaiU+siCmXEjyRumeoxFjg=)
                          2: 2_J9mL3XgD_kRv43Zxb1qpgeusY.roa (hash: BT4ikVgRDIfMHyLN6PDoERnZXkSxffK0jAs/wXbsVwI=)
                          3: 2rKhfOtmJwC6iklG8GDqXWNT6KU.roa (hash: sfZahddaVNy/2DOVmEFD38klTEjVU8k7cRw6FquvKKo=)
                          4: 51QwOsAkEg5uxXWA7v6JW8nhFFk.roa (hash: E7Ag2VJ0ybxWJOU0v6r+wf1w/JjAIjiXt3YeH++KfOc=)
                          5: 6U9fmG9AK5i2irSVP7PNutKCp14.roa (hash: +PqH4BgCUb96osKcUjxV8pD5M0HAKS5Fq7FgnwuKF48=)
                          6: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: mP23j7W/aVKtexahGYCYe0J9Ui/7//5wrM8VeYQcqnY=)
                          7: CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa (hash: rZ+olhHSGl/KnhRsGGqUBYCQOJ4hOJO7ZUIncIIkMGg=)
                          8: R0ReoQbqDH6FfeYwns9V34UdN7E.roa (hash: AvejWIfE0gmVad6xw3lVtCXpD7bWuI2e0QLPAeVe3mo=)
                          9: Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa (hash: +pN4Pd2383xnLXj68X32P7/s+lJrKmnV+dmvVXeVvZQ=)
                          10: cA8AmP9V4ZSyl9h6GuuHAhvaOjQ.roa (hash: MJmzqvkWXA6PsO6NPhu5H6ZbcPzMgGv17dSYyd5Lgz8=)
                          11: kBViyr5yGJFsHmc7FZeceyGkQOE.roa (hash: IF/jwV5BYFaipFzwpESRFaQsC9FcetdyGnrqOzSWFoI=)
                          12: lu8Rvs3fVMprmZmVVQ_1Clp3NdE.roa (hash: jGFGdv0gwktWpG2AYOh1czpziVNBvimJ1wKyvJbDDQs=)
                          13: p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa (hash: 4G7/rBDu1fOzBYxyJFAnAShLkdyb3ZlulWYd0dhl6oQ=)
                          14: sBjpCv4IedKx9oUK0VBG9teqHFk.roa (hash: X/sBvhOXJKf6a1x5ECJCEWLDjhz9NXwm4uJVzHyoefM=)
                          15: y2GV6aTaUOUJnMwRp7T3xTGYpsc.roa (hash: TfpM/sCLBeNscirhAgRcOVJis9xFdjJrS1YdbIm/Gbw=)
                          16: z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa (hash: u9oA2bHZw3lUSP+WTjTj9gYnq5LWD1Tw4yifxX9/ry4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:59:20:35:64:85:51:26:5b:78:38:2e:7c:46:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Nov 22 14:00:12 2024 GMT
            Not After : Nov 23 14:00:12 2024 GMT
        Subject: CN=d782c6289c97ce822da77b0f0692a1e2c9c1b87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:cc:af:18:d6:7b:f7:ac:b7:4b:17:24:8e:
                    2f:d2:ca:95:b4:f0:4f:f5:ae:fc:17:80:9c:a6:9d:
                    cd:e2:74:00:17:36:b4:68:77:16:a0:44:f8:54:7e:
                    90:9f:c6:06:3e:e0:63:36:aa:81:ac:37:96:a1:1f:
                    21:ed:ea:2d:69:8e:0d:09:a0:46:1e:08:41:6f:e0:
                    99:4e:01:74:dd:c9:23:97:93:a7:2b:9b:94:e8:81:
                    ea:cb:88:45:1a:97:bd:48:ae:9c:44:15:c7:cf:2b:
                    af:94:e3:c4:0b:48:40:a1:d7:1d:72:49:89:f8:33:
                    2a:64:b5:0b:cb:6e:a9:c7:58:da:c1:0f:ce:d3:8a:
                    6d:34:64:51:1c:13:1d:34:81:74:46:50:87:3c:ad:
                    e3:8e:67:b3:63:6b:14:9c:0c:9d:f3:22:6d:7e:e1:
                    9c:a0:08:5e:ad:5c:74:22:14:d9:78:e5:58:4d:05:
                    ce:b0:fc:42:73:46:59:7f:b4:65:a2:0a:a4:a5:f7:
                    b4:6a:d4:b5:b5:61:24:73:6e:3c:47:b1:24:87:c5:
                    a7:c1:5f:70:1f:e5:4c:fa:e6:49:81:46:cf:0e:cf:
                    5f:52:bb:63:ae:99:f5:02:3e:4e:68:1f:ed:97:ff:
                    53:f4:a7:05:7b:a5:7d:67:9d:86:22:0a:d0:a3:70:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:C6:28:9C:97:CE:82:2D:A7:7B:0F:06:92:A1:E2:C9:C1:B8:7A
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3c:96:cf:83:0b:a6:40:fa:20:18:75:b2:67:3d:eb:0f:5a:
         01:bb:78:df:8f:e5:6e:35:fc:c2:e8:76:47:c9:3c:2f:a9:9a:
         dd:49:76:3a:5a:87:48:5e:97:8e:5d:26:de:93:37:ab:0e:d1:
         6a:6a:08:16:e2:ae:43:b2:14:d8:31:4e:a7:ea:4f:0a:4b:0a:
         47:3d:43:c2:92:4b:b8:fe:13:90:3e:a0:db:5d:b9:8f:71:9e:
         ba:fe:67:0f:d3:c8:20:a4:5d:e1:27:65:e7:fc:6a:e3:1d:a8:
         b3:83:1f:97:8d:3f:3c:dc:98:70:a2:f6:3e:6d:b2:e3:9d:df:
         e8:52:52:18:f4:ee:1b:02:b8:77:96:55:ba:de:62:6d:8a:b4:
         55:c1:79:78:43:a4:62:6f:c4:00:14:19:28:dd:6a:d8:e2:78:
         46:33:94:f2:6b:48:eb:7c:13:e2:33:e4:bd:a5:38:ed:77:44:
         cc:58:88:22:f7:60:b5:48:18:12:68:63:64:5d:63:55:c5:85:
         e5:46:9f:97:bd:f6:4c:3b:b2:90:0d:7d:d0:6c:dc:a7:68:f1:
         dc:fe:11:03:c1:3f:a0:49:83:b5:d5:fd:c8:d6:e6:e5:d7:b7:
         b2:b6:de:d9:0a:db:2e:b6:11:41:f6:bd:25:9f:af:02:b0:81:
         86:40:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:04 2024 by rpki-client on console-fra.rpki-client.org