Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          XSgcQIUBo+ZryAlzOV0UTCrBQqDqV386Lz5yiN8EooY=
Subject key identifier:   9D:6B:89:79:96:89:4E:17:40:67:08:17:D4:AB:0C:C9:DF:21:F2:2F
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       0194BB96C4DA6B44159A9C8589205F54F7A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 09:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:07 +0000
Files and hashes:         1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=)
                          2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=)
                          3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=)
                          4: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (hash: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=)
                          5: 9WKsimr4vOF_rpwncL6ruOF18YY.roa (hash: xH/VPFrvixhNlhTD8hrquKiIRK1N1S8LQ39X4kWgDbU=)
                          6: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=)
                          7: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=)
                          8: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=)
                          9: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=)
                          10: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=)
                          11: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=)
                          12: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=)
                          13: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: /mzUj12Mxhzi+Qbyyla2EBxFnuRJg7KIF8w8qeuK4ic=)
                          14: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=)
                          15: lJKzT4vHn4_RNrGZ7RT83InY1Uo.roa (hash: 1M7WfjegVNptr4D+2mX5sIz0gMGS0MMNadIY7FGYqNo=)
                          16: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=)
                          17: pyjq9eTJ16BICExepyy4hHdzJBY.roa (hash: 1qL3K1S3vi6SKpgKIPcn0F7XdPnvihL3lLBBWXETN6c=)
                          18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=)
                          19: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:c4:da:6b:44:15:9a:9c:85:89:20:5f:54:f7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jan 31 09:00:07 2025 GMT
            Not After : Feb  1 09:00:07 2025 GMT
        Subject: CN=9d6b897996894e1740670817d4ab0cc9df21f22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:8f:ab:52:1a:3d:a8:88:cb:48:a0:b2:8b:
                    ae:c5:ac:d8:55:91:09:9c:a6:de:f9:3c:3d:6c:8e:
                    4c:98:79:17:26:d1:17:ab:da:bc:4a:ce:f7:ba:c7:
                    31:bc:64:67:df:f8:f6:30:5b:c9:f4:b8:59:e2:fd:
                    0d:cb:6a:0d:21:7d:b3:54:57:d0:40:a2:48:09:6e:
                    50:d7:0f:77:38:01:2b:8a:b6:cc:95:fd:bb:86:f1:
                    77:44:14:f9:c8:71:44:20:e1:e2:85:24:5d:55:d2:
                    c3:46:e1:19:a6:96:3f:47:24:b6:58:a1:b7:88:aa:
                    f2:a5:3a:3e:44:c4:2e:40:b0:8f:55:c3:b8:12:2e:
                    8a:8d:05:b8:9d:3f:6e:78:3f:f2:85:95:21:cb:28:
                    4e:be:df:3a:f5:e5:ee:84:de:19:1b:36:c2:c4:20:
                    f8:09:43:05:bc:7b:04:19:94:0e:df:52:33:70:ad:
                    3f:1b:ce:b4:de:a1:70:15:a1:22:e3:2f:35:13:3c:
                    ee:ac:8f:1e:8c:5c:1c:05:7c:36:6d:32:a7:c7:c5:
                    f6:7d:34:9b:ab:7b:93:d2:8d:5f:4a:6e:f8:93:36:
                    cf:02:d9:27:bc:ec:94:af:40:ce:25:ac:4c:76:e5:
                    03:76:fd:84:a6:a5:45:8e:36:92:aa:eb:ec:c3:8c:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6B:89:79:96:89:4E:17:40:67:08:17:D4:AB:0C:C9:DF:21:F2:2F
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:a6:40:da:d1:38:bc:be:c9:28:7e:9e:00:3e:c1:68:14:
         2a:f4:c7:2b:6a:ac:be:8c:d1:74:6d:86:11:c6:65:a2:ab:ab:
         c9:d4:21:2b:f8:8a:8b:86:4a:b6:b9:48:94:77:c2:6b:76:11:
         7c:0c:26:40:d5:33:47:bc:e3:93:af:e8:66:c3:3e:ac:43:ea:
         9a:b0:8a:3e:d5:17:1f:17:f9:70:d0:36:e2:9f:17:6b:ca:fa:
         42:00:42:94:f9:f4:c5:51:f4:a3:d2:65:be:66:c0:d6:54:71:
         3c:a7:52:a7:e5:65:b0:77:43:d6:f8:c6:04:32:64:3f:64:19:
         02:dc:58:34:ec:9b:ad:8b:d9:a1:32:0a:20:9a:bd:ca:94:45:
         97:68:fa:75:02:5f:72:6e:80:b8:e2:48:84:45:5b:7e:b7:e1:
         c8:6f:e0:dd:82:13:9f:30:ef:17:f2:88:c8:d2:ad:26:2a:e7:
         25:35:15:c8:17:72:e7:36:3e:b9:18:b5:60:37:8e:dd:f9:f3:
         93:ab:dd:45:4e:95:dd:a6:40:c1:cc:7f:2e:6f:cc:a7:bf:5b:
         fd:14:16:ba:96:94:af:c4:97:fa:c0:d7:ed:96:02:01:7c:b4:
         2a:a0:4b:d2:33:d9:3d:87:35:95:b0:3d:6c:01:5f:ea:e1:42:
         4f:58:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:57 2025 by rpki-client on console-fra.rpki-client.org