Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          iGIMZFzHqKzP5vEDIikwydodt/SgPd43/UJkRpbYuas=
Subject key identifier:   92:31:78:AE:BE:AD:A3:E0:FE:8A:08:41:65:1E:99:9A:00:CD:8D:07
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       018F45320F0AC8376775F2E7D1E4126F539A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          1163
Signing time:             Sat 04 May 2024 20:00:59 +0000
Manifest this update:     Sat 04 May 2024 20:00:59 +0000
Manifest next update:     Sun 05 May 2024 20:00:59 +0000
Files and hashes:         1: 1-HL-OdOeoc0m0SATYXxQK6IgqQc.roa (hash: 7YFOgkqgjrMbvbKd11ARpbaiU+siCmXEjyRumeoxFjg=)
                          2: 2_J9mL3XgD_kRv43Zxb1qpgeusY.roa (hash: BT4ikVgRDIfMHyLN6PDoERnZXkSxffK0jAs/wXbsVwI=)
                          3: 2rKhfOtmJwC6iklG8GDqXWNT6KU.roa (hash: sfZahddaVNy/2DOVmEFD38klTEjVU8k7cRw6FquvKKo=)
                          4: 51QwOsAkEg5uxXWA7v6JW8nhFFk.roa (hash: E7Ag2VJ0ybxWJOU0v6r+wf1w/JjAIjiXt3YeH++KfOc=)
                          5: 6U9fmG9AK5i2irSVP7PNutKCp14.roa (hash: +PqH4BgCUb96osKcUjxV8pD5M0HAKS5Fq7FgnwuKF48=)
                          6: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: WHCQmxJw3r54+G47yG/EdAyXUsAWjn+bjsdTD9ViSMU=)
                          7: CFeskGhQCWEZ1wTmhgIiHvZUVs8.roa (hash: rZ+olhHSGl/KnhRsGGqUBYCQOJ4hOJO7ZUIncIIkMGg=)
                          8: R0ReoQbqDH6FfeYwns9V34UdN7E.roa (hash: AvejWIfE0gmVad6xw3lVtCXpD7bWuI2e0QLPAeVe3mo=)
                          9: Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa (hash: +pN4Pd2383xnLXj68X32P7/s+lJrKmnV+dmvVXeVvZQ=)
                          10: cA8AmP9V4ZSyl9h6GuuHAhvaOjQ.roa (hash: MJmzqvkWXA6PsO6NPhu5H6ZbcPzMgGv17dSYyd5Lgz8=)
                          11: kBViyr5yGJFsHmc7FZeceyGkQOE.roa (hash: IF/jwV5BYFaipFzwpESRFaQsC9FcetdyGnrqOzSWFoI=)
                          12: lu8Rvs3fVMprmZmVVQ_1Clp3NdE.roa (hash: jGFGdv0gwktWpG2AYOh1czpziVNBvimJ1wKyvJbDDQs=)
                          13: p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa (hash: 4G7/rBDu1fOzBYxyJFAnAShLkdyb3ZlulWYd0dhl6oQ=)
                          14: sBjpCv4IedKx9oUK0VBG9teqHFk.roa (hash: X/sBvhOXJKf6a1x5ECJCEWLDjhz9NXwm4uJVzHyoefM=)
                          15: y2GV6aTaUOUJnMwRp7T3xTGYpsc.roa (hash: TfpM/sCLBeNscirhAgRcOVJis9xFdjJrS1YdbIm/Gbw=)
                          16: z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa (hash: u9oA2bHZw3lUSP+WTjTj9gYnq5LWD1Tw4yifxX9/ry4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:32:0f:0a:c8:37:67:75:f2:e7:d1:e4:12:6f:53:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: May  4 20:00:59 2024 GMT
            Not After : May  5 20:00:59 2024 GMT
        Subject: CN=923178aebeada3e0fe8a0841651e999a00cd8d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:18:c3:58:08:93:6c:c8:79:da:b0:14:59:
                    b7:b8:4c:23:4a:b9:0c:21:c1:05:e5:a8:87:40:e6:
                    18:b8:73:9e:76:eb:41:a8:07:3a:f2:27:fa:35:d2:
                    8d:ec:28:28:29:9d:3a:56:d3:5e:a6:d6:cb:a1:7f:
                    6d:4e:68:8b:22:70:b7:fb:36:82:71:40:82:3c:97:
                    5d:81:dc:ba:d4:39:e8:4b:d1:13:90:ea:a5:21:8a:
                    10:e1:8a:f6:8b:b2:83:fb:40:c4:be:d8:03:16:c1:
                    47:c2:8c:61:ec:5a:7f:7d:8c:f1:f8:cf:42:be:8f:
                    10:e7:ee:0d:5e:cc:65:b5:cb:ca:da:18:e4:ef:c8:
                    7e:2e:75:cc:b3:0c:02:0a:9d:3a:fa:92:64:1e:5a:
                    04:96:31:79:2d:59:16:10:cc:01:3f:01:97:18:bd:
                    18:cb:32:24:90:d7:35:ad:5b:f3:36:45:5f:d8:04:
                    61:f9:73:d6:41:8c:1f:8f:52:2c:77:64:f5:6d:1d:
                    be:84:0a:d1:55:6f:c2:b8:4f:ce:b8:e2:b7:c8:c1:
                    37:bf:92:8d:0f:57:de:a1:53:d0:1f:16:54:17:e6:
                    ac:78:4b:b5:e0:3c:36:ae:5b:b7:41:94:53:4c:28:
                    3c:a9:b4:ba:ff:af:d4:5a:18:27:bb:5d:95:da:12:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:78:AE:BE:AD:A3:E0:FE:8A:08:41:65:1E:99:9A:00:CD:8D:07
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:27:81:33:ac:96:29:0b:3c:e3:74:72:af:ef:09:6a:6f:29:
         8a:3f:6e:eb:4c:82:73:fc:b4:c3:24:b9:25:fb:28:db:55:4f:
         22:1d:c1:57:89:cf:df:3b:2e:4c:85:6a:d5:ee:bc:86:cf:d4:
         d8:a7:f6:45:4e:68:f9:16:7b:ee:95:01:25:4c:b9:c0:62:24:
         02:4b:a3:5a:8f:de:85:5f:aa:6e:fd:ea:fb:5d:d7:4f:61:99:
         2c:72:da:57:7b:9f:2b:ca:2c:9e:d7:97:3d:e2:6e:6e:34:9f:
         5d:45:25:ff:d9:eb:08:aa:90:71:e9:e2:bc:7a:32:1c:8f:4d:
         d9:ec:f9:a3:96:d5:14:29:12:7f:e6:a1:cf:51:27:ec:2f:cd:
         fc:df:97:6b:85:28:ad:c0:0d:be:90:7a:1d:eb:84:0e:0f:20:
         a8:05:39:7f:38:15:78:d6:80:4c:bf:86:e4:71:36:78:cd:e1:
         f2:d8:e1:a8:51:eb:f3:a7:b0:27:59:72:3f:c8:62:e0:91:6c:
         d3:da:44:c5:91:2b:dc:82:3d:8d:08:55:17:f9:f3:2d:1a:a0:
         14:00:66:e7:f8:8b:58:1f:c9:ff:d8:b7:73:5c:89:d0:d5:b3:
         35:f3:89:6a:41:d8:21:1f:39:3e:aa:a7:bd:5d:43:41:ac:1c:
         0a:9a:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:13:48 2024 by rpki-client on console-fra.rpki-client.org