Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File:                     gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier:          394e4yRQmV3u+CKjStHZyqPD5IhNCyUS5WP9jWpitwc=
Subject key identifier:   47:3F:47:1A:4D:B7:AB:BD:79:5F:1D:13:98:A7:3E:18:45:D7:D7:05
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       018F136B5ABC03E2F63D792B73B54E3DE662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number:          118A
Signing time:             Thu 25 Apr 2024 04:02:33 +0000
Manifest this update:     Thu 25 Apr 2024 04:02:33 +0000
Manifest next update:     Fri 26 Apr 2024 04:02:33 +0000
Files and hashes:         1: 110_suLtcjswCXLqOyWkehAlU3Y.roa (hash: LZVYuOhSk5WjJ+YkyMYZB6v7TaCXjd09kgiXNAaH1Gs=)
                          2: 7kf1Kgp_VBHLsACwCdQsOibMjpE.roa (hash: KdE9VKQvdPoDGTjZPu+QF2OtY2ePQ34h6NLVBoiJflo=)
                          3: 904vUlY6k3TFGLQzL_3HR7oGxjo.roa (hash: +mxDI2rDLpgEvk8E52qM83WtuOOhfflZ2v8kqYR9zH0=)
                          4: 9QagZGTfrzWYic4RVf8zUllKgl0.roa (hash: 3P8Qlq/waR3Im72g4SxxsbIf0ZaXUU+b5Q7j/8DUwkE=)
                          5: HQ4t1CSuPhhWf2sKVrhm8ZLTsAk.roa (hash: gLe6Rel21AQqgNlotBeKJENGTOC08zVA1BbwIF3bRyE=)
                          6: Nw6Ynoxi4SUJEijhLAS6dnz-9F0.roa (hash: LBtL3gfUYYY1KNSn6cGCQg+uAz+SksfSu6YHNklmnjA=)
                          7: PcHsOPvvBLW0cdBkMBpM18lkcLs.roa (hash: hWo00H+0ozAIpSCAIicb/huVM4T9A0n0cnTl3V4zF20=)
                          8: VuxsPuHqELXN7rYQyrQl5rgwbGU.roa (hash: lTTtJ4aYTG4OkgmqS/tg5o3bTqxRYiR7e9BboObghHE=)
                          9: ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa (hash: SSTHtwgd5HleW54wSTaEsUWSjqdtdToKKXkxVmuxWRw=)
                          10: bDHnN1ewGBDOb1NpqCuc5yx9Qgc.roa (hash: 0/qh9xJ9CnUJxUn7raKHV5tmfGcjGYb5Z3I7zfWZGX8=)
                          11: dRVb5fPlNXC11aKfjjgHOjjx67c.roa (hash: IFIiMsQ3vO7p68Ay6IyjjumBks2zRcZbS67rDiPLDsE=)
                          12: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: UN9efbRXk8fzfXr6+NKS4+SU9Q6AuaPeoZ5aNznRS2g=)
                          13: i1rrvDpEAUYTYS-Ej-8r5YgBrXc.roa (hash: DYOXMATeFWVj+6IX5mYakfth8FdtHFLf9aLaKPJH3ok=)
                          14: iYU_lbM2ySGzJ6PBenclEjfwp6o.roa (hash: 1ss6udgc+5lkD3srUnQuRPwemAcc41tyhbGh8xEphok=)
                          15: iuGhXTInPWKlbre9IuLF6ZSvg0A.roa (hash: ni1mklqJxWktBMB04MiJA5SIznBEW12NWZnOrp7RvDo=)
                          16: ojEIE9xUeewMY44GWt_SHDeMTAo.roa (hash: PgD7SHmkSGiVf1wdkkC/MHTPCWldezQ0mPs6NheMbmo=)
                          17: pBZLCHsKLy0jHfpODXEfDBVhn6M.roa (hash: 7n82bgK8x8PUx2/PnavSfsOWpeSj+aKrBa1fJv19u7Y=)
                          18: w5j608_2d4CuWu9JPKmxbNR6qyM.roa (hash: 6er/h1D5qh4vFjhwksVsxcNz4MTBtenWeVQfOjWpacA=)
                          19: xw4WIuqW5_z8TP4XYEMcDEU0zW8.roa (hash: J+sxzIL4Q+xHnYghee36gCxx6Mrl2S3igMMVaWAZ9J8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:13:6b:5a:bc:03:e2:f6:3d:79:2b:73:b5:4e:3d:e6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Apr 25 04:02:33 2024 GMT
            Not After : Apr 26 04:02:33 2024 GMT
        Subject: CN=473f471a4db7abbd795f1d1398a73e1845d7d705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:78:d6:3e:ab:f6:1d:f1:46:1b:b2:09:42:
                    03:e1:2c:3d:40:dd:dd:ef:73:74:33:12:3e:0c:f7:
                    b6:0f:1c:93:3c:f6:98:cb:4b:20:04:c8:28:b8:86:
                    ff:d5:82:c5:78:59:61:77:55:9c:7c:6c:fc:cc:35:
                    22:41:2e:85:fa:2f:1b:1e:09:8d:b4:02:0a:d5:55:
                    52:e2:03:5a:b3:2a:51:d7:5e:7e:4e:c6:1e:ea:71:
                    4c:21:e6:7e:68:89:d5:3f:7d:04:59:54:7a:5d:b5:
                    33:5c:e0:50:1e:a2:0a:64:14:c8:f7:8c:31:fc:ba:
                    e6:20:63:2a:8a:51:9e:b0:25:7e:82:3f:d0:85:77:
                    78:ad:51:8a:a4:18:cf:c0:9b:45:e1:1f:ea:f2:01:
                    d7:76:46:db:5a:e9:2b:ea:73:fe:e0:bc:bb:27:73:
                    b6:9f:70:5b:16:51:77:fb:d4:32:c8:5b:38:26:b6:
                    ad:1d:08:73:8c:b1:5e:8f:cd:6c:bf:6c:07:c1:1c:
                    1e:07:58:45:ac:e1:69:0a:2b:d2:17:54:55:a1:0e:
                    26:6d:8a:51:3f:d7:de:aa:28:89:9c:6e:13:f0:3b:
                    45:9e:c2:6e:ad:c2:05:e8:1a:a9:d0:81:49:c0:91:
                    5c:33:03:2c:9b:c5:5f:c3:cb:25:a3:99:b6:02:ce:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3F:47:1A:4D:B7:AB:BD:79:5F:1D:13:98:A7:3E:18:45:D7:D7:05
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:9a:55:eb:b0:7f:04:16:32:6b:b5:0d:a1:2f:98:69:d3:
         a9:b2:d7:91:f4:1e:77:c1:2e:c4:a4:0a:0b:ea:16:78:83:dd:
         6d:71:cb:df:ab:d5:51:c2:8a:4e:fd:47:2e:1a:e8:f9:fc:05:
         83:81:1e:b3:a5:f1:91:ec:8b:0c:be:fe:3e:0e:23:df:67:a4:
         a1:71:45:cb:dc:97:74:38:25:b0:7e:a3:b7:e6:bd:69:05:64:
         11:2b:20:47:e5:2f:7f:3a:19:4b:a3:ca:42:fc:da:9c:97:0f:
         91:75:80:3f:1f:9c:07:da:7d:a8:ce:d8:73:2c:38:0d:c1:00:
         3c:60:05:d6:b7:9a:0a:8b:4b:b8:0a:7e:76:10:33:7f:c8:76:
         2a:a3:91:77:5d:26:25:60:33:93:7c:aa:45:fe:4b:77:fd:4d:
         ac:c0:2e:b0:79:64:17:15:44:8e:26:ef:35:b8:28:e0:96:8f:
         07:64:19:68:54:10:7d:bb:8e:98:76:ba:54:16:0d:4d:b7:95:
         54:2e:a7:99:85:b4:68:50:1f:98:25:26:4c:dd:8b:c6:99:8a:
         91:e6:fb:fd:87:f1:ce:97:c3:b0:8d:ed:fa:69:fd:67:93:f6:
         87:9c:d5:5b:7c:29:c5:45:b6:0d:26:b7:c6:a2:9d:2b:02:a5:
         fd:c8:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:55:33 2024 by rpki-client on console-fra.rpki-client.org