Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier:          WpwF4N3cR1xZw0apGTNxexqaEAfp4byusnPmuttni+M=
Subject key identifier:   73:38:3A:D0:7D:1C:B7:A8:78:32:40:41:74:85:13:D1:89:16:0E:BA
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       0193516260E6DC3B6DBE0130E87203DE6ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number:          0BB2
Signing time:             Fri 22 Nov 2024 01:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:22 +0000
Files and hashes:         1: 3JwmBGKnjUoG4q53CyghuumO_sM.roa (hash: CvpBZNt85wYGgDpDNYzIThDRWthapFbLa+ijrpt5Qug=)
                          2: 3VyxR2gePiGJttTPEQrzSpZrN3c.roa (hash: C3U3Fj1QjZEDAFfuu2p266yGYKScx5yDzTJa+vpA2Os=)
                          3: 3i4xBCCLe9Dd0JMytLazUVglvo4.roa (hash: e7npCkNT3UZOPpCe8USp4Xy+EobAX7Z3qpon/sxuHAQ=)
                          4: 3s_jT0P4bkYYWNgmMJAhJGCVP3w.roa (hash: 7hf5/ymgvGNEVdUtATUYURLwfB85KRRDsMc5CKuifBk=)
                          5: 5N_OVr6TJalD2gnZPt1zP3VpYc4.roa (hash: QQvR7LjTfDOEP5Ah2jQJDy+NTnPixQDcdHKRLErwwHM=)
                          6: 8lOMJsbQ9M8szp2qR5MtnVxi-1Y.roa (hash: 4YMSA1gaPrMPsRU+9OT/2UJCSgwqNWajJwZLAmlsOEE=)
                          7: 9KBuaUEn9p-ZDoiDydO3lFC6720.roa (hash: 5r1hgZGTUwMMakPnHVHxZMT7wg2r4Ffc1NgOHYl6LOA=)
                          8: Dy4pP12uhqZW97WTKT0u_K9gFT8.roa (hash: FyUX75cxs/aeEGHEg7Q5eivx+XWrmeDwqDEgHK0f6sA=)
                          9: EXAPx6dPGjbWcv1m8PVaDKm26BI.roa (hash: zPSA+0SAvG9bGrrncwQz6gnJSXBPXZex1Du2ptY3r2M=)
                          10: G5BQnbQ6qMRxzIRY2Qha25BxAgU.roa (hash: Bf/bxk8xV+CFBC9inBaOy1olu671Jm8nQBlxID0+/qM=)
                          11: H-pJCNMRhYK6ENm6bS1T-sJp9gk.roa (hash: 11/VBVwyB1GzlpcH799wX1DlRUoX3DmcVGe49TF8jE0=)
                          12: I8SuJ8D_P16pAaDGZGDRSs49hiQ.roa (hash: vJfQ035vcmoHju7dzzOtq5QMExUk5tbvsV/mkqIcsjY=)
                          13: LT6oMW2Nzzj1P46JZlF7iLAisiA.roa (hash: TeyfV9DBgn/ohIXg9KRz53rD6LMHcCa3mwqRuh0YAVY=)
                          14: LaE4j-P_SmpC8EKJKgLtfTwh25o.roa (hash: 1454HYUUTR+AP8XuuWDcl6omHwykw/FDUxRzpxIKYj8=)
                          15: QmnPRpoC8bXnrHikkSgomeDWUqg.roa (hash: SBgiGpyvCtBKQE8L5prGZaNFElxB2tEymz+4JxKxE/E=)
                          16: UVSIND1ZuJjrPEEgiI4bwOFPZno.roa (hash: xPjGFU5QkhfTpJW3IMyqXePCjBZHsI+zh/RKTwnI9Xw=)
                          17: X1Ru5lnJNwW5MqKyncOjx0MmTbg.roa (hash: Z4SnZJmHxHgZjHWiNmODEA8aAK7Zg1TRC9CbBZ6fHC0=)
                          18: YAM5KGzr__y4rqNbogklOH-h9FU.roa (hash: xEpqqLk4/fLMD4LS7epceKETT4argK2JfAituroWvQ0=)
                          19: bLiDi6czciTucLu2NWD18et2GK0.roa (hash: WBWekoeQreuxysMK/ZbtP5FeElaKHXQ3XFltJiNZ7Ew=)
                          20: c-QM_zmXNlOh3pbpb27Q7-EGACQ.roa (hash: HMXne9H6PTeybpi3SKf/Brk7LvuFcUO2ZKV5+ADNKY0=)
                          21: cBllttsSQnYz6p5qLULJF0wl5Wc.roa (hash: SzSS1n+KXjBJMsEOBptwnz+BzQlIlqBaAs+FDrh0wIs=)
                          22: c_FoCQObkQ4Vxave_pYU_UrBPcY.roa (hash: H0d2KCgxZ+tFBCJcFvpYqUdjqrM3OKkVbfM4TimW9o4=)
                          23: d19O-SlLEZeJXIsq2fCQ4joNRXg.roa (hash: BYn1jhOUXkk2yQTlpiWuL6EideJJ4fUHLOKcIxhhZTY=)
                          24: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: vBsJ+152821ihcMRkHOGxcn9wNwInUummwUzkyZVHTg=)
                          25: em4jeeGDyI2Leeko2gkILinzDcw.roa (hash: +Qx0Xn1kqUWUwEQB/gtE33C5i4xsBgO6+Yj8But4MVY=)
                          26: f017qKo0c2dN4ewXBSd_HVQK4GY.roa (hash: J3YBUMnwIm+kjwGUFNK3tjgmaEdUSucOwVccVTncZXI=)
                          27: f9vAB04D264jStUTMcjHsmu2CT0.roa (hash: tEnjtz4KNCSM8UkWeM90vIRtkHvZa0tGvwjmf02eilE=)
                          28: fEeF8506iFOoeoGLkgJw4C0RabE.roa (hash: iXOzbUztIbDhcs1qDUKFrUcLplvIoVEedNJKKUi9QKg=)
                          29: g5Eq0CabVNCARWlMxF5EoStF0z0.roa (hash: wL5Em4S9NLbq9o+6j0uIQhg/VFmZnd0cP8erRYXP6u0=)
                          30: h2VmKIMp1HroEEE1oUFSsFJhCzE.roa (hash: 6aqIvVnLLrp+bN7ya/QMdon1TwWWpPEGWewv54riuDI=)
                          31: iSa6D8K9RAoGPVyjfm0oekRz0_g.roa (hash: Vm7xk4NcVtI+LQyPzmk48y8aQXGegjYTDq0REFa+QZ4=)
                          32: jZj7GB3JfAe4Zk_W88ImrRuytIc.roa (hash: QVkxld7t01/X+z04OMeegB/JFHhibhKOuWcal/EXFoA=)
                          33: ubX36AROQgJ1y-yroPTpx2aFRqU.roa (hash: TzZ+Nq0vWF7DB3+uAglpVhlRykxDNFM4orNSpqxdOSc=)
                          34: uuQcYEgiA7ERViPljaDYhQw-5HU.roa (hash: hf5SMHEU94t1t6/cycetcwcPV8IsQCIZgJgo1mco3eU=)
                          35: vIANjG0774VB2_TgAfbG2Qm9Sdg.roa (hash: X2IaT4in6i66sGqc8h/pCZQkGtfiV4EHEGojRTFggM4=)
                          36: vdrQAOZ8OFmDENkyDxCbVWB-MI8.roa (hash: pGL+dg1Hf1AU9tAujtgYHRq7PTyi52VvMOJPiXbM8Cg=)
                          37: y2cUyg-taYmCtaccxoT0zThzGhg.roa (hash: O06NMdy1ZcnworAQ7e72Ns6udm8KG4O/nU2pwhnM9Qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:60:e6:dc:3b:6d:be:01:30:e8:72:03:de:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Nov 22 01:00:22 2024 GMT
            Not After : Nov 23 01:00:22 2024 GMT
        Subject: CN=73383ad07d1cb7a878324041748513d189160eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:ad:72:00:9c:2f:0a:a4:b2:ba:f1:df:a2:
                    d1:85:3a:5d:32:f6:ae:40:0f:72:6e:01:2a:45:f4:
                    da:98:97:51:97:ef:82:4c:d3:ba:6b:27:4f:89:9f:
                    3c:7e:5c:2b:e7:08:71:1c:a2:36:36:64:4f:d6:08:
                    ec:8c:f1:6c:92:26:d7:cb:1f:e8:4f:12:24:c3:71:
                    22:28:33:de:0f:37:8d:66:86:42:c4:67:05:86:01:
                    07:7a:40:57:19:29:a6:24:d8:62:42:56:3f:27:cd:
                    50:5f:87:4b:9a:d9:3b:cc:23:9f:74:57:99:c8:b1:
                    ef:4e:a6:cc:6c:c4:ab:e8:94:9e:87:e3:eb:89:03:
                    34:ba:f4:7f:b4:8b:d4:3e:96:cd:ac:0f:a7:54:9b:
                    1a:ad:41:7a:13:61:05:c6:b5:c9:51:c1:f8:d8:f0:
                    ba:55:eb:d6:fc:ab:4a:de:5a:3c:eb:c9:98:4c:5c:
                    d4:cb:a1:42:4f:b7:8c:2e:04:53:a3:ce:61:43:30:
                    71:2e:16:6b:ef:0c:ab:6d:67:57:e6:72:67:af:ef:
                    a9:fe:2f:99:d5:c3:2b:4e:f8:16:7f:84:08:44:47:
                    0e:92:a4:f8:9d:0d:f2:0c:ad:40:7c:79:82:9d:66:
                    ea:8c:5a:25:7c:0c:05:ef:01:5e:6f:2b:47:08:56:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:3A:D0:7D:1C:B7:A8:78:32:40:41:74:85:13:D1:89:16:0E:BA
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:27:56:29:0d:1b:5a:54:83:fc:f4:ba:93:88:eb:24:a7:
         21:e6:8b:21:fb:b5:17:2b:69:03:49:c1:05:c4:b9:a1:4f:45:
         c8:6f:81:22:09:71:82:13:eb:bc:d4:e2:ff:94:a2:3d:39:de:
         75:ac:db:68:bf:18:fa:c0:ee:ac:ae:66:e1:78:df:7d:cd:6b:
         cf:46:85:1d:6a:c3:0f:74:6f:26:76:53:b6:fe:31:e0:2a:04:
         cb:0a:04:41:81:d8:07:fa:46:5b:d3:7c:90:45:4e:77:36:42:
         e5:c1:b9:68:23:07:9f:4a:b1:e8:cc:43:f6:bd:a3:f5:d2:ff:
         f3:27:45:af:22:14:a1:0e:85:a6:01:08:c0:30:19:ec:92:90:
         fc:2a:b5:66:2b:12:c9:da:9c:26:4a:09:82:44:d2:11:1c:2f:
         0c:cc:0b:d3:2d:c4:85:e6:e7:d6:8e:0e:6f:de:88:75:10:27:
         18:0f:2e:1c:6e:51:12:2c:d9:a6:74:57:bc:b0:4d:37:56:b1:
         29:00:ff:2a:82:85:e8:01:03:2d:c4:a2:78:5d:5f:59:ee:0f:
         62:9a:49:da:3c:a2:d2:7d:34:7e:de:0a:b3:4f:5e:c9:5e:d3:
         59:80:58:3d:ed:c7:d1:be:e5:ab:f4:ac:48:d1:88:11:c1:c3:
         7d:6d:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:21 2024 by rpki-client on console-fra.rpki-client.org