Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          cws/95VjxcviXuuiWL3IbpGwB8QGsnL9rVmh7qa3qLA=
Subject key identifier:   FD:52:CB:C5:9A:8B:51:23:B1:13:54:41:18:80:B6:A3:2C:7E:2B:C5
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019362FA99A0A9BC6D9C3356C52067A2F462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          13A2
Signing time:             Mon 25 Nov 2024 11:00:10 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:10 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:10 +0000
Files and hashes:         1: 3YKwlMveisSzPbn-tW0PvzxMseQ.roa (hash: NbGrqi0fCFPs/E1UO0vxHp3LOom6BAEbB4LWqLM6GQI=)
                          2: 3v9J4vNv-7iiTXeav5Q8DbDTSIg.roa (hash: qtcattQJfesVSQRY0z4xm7Gm0X2Xf1P1AAcjb3Z+U6I=)
                          3: 4iq8k8F6CxojtdZYaD9M-GDcHQw.roa (hash: Pqx1NuZddDbhMPi+xxVWbSh3UolUsBJFTp1v2POhUsQ=)
                          4: 74twGgGzH-KLln_Jx5ZJHKeuIQE.roa (hash: 4lomE+DhVSO6R0wQjbGF5DlW3gbbq8buSXrg1UozDYs=)
                          5: 7sUybcmEI5DrMe92GoSGvF2zA30.roa (hash: IzUeuPL9Zn0w/ZiFVif4BsWrzBiFpupoUSS83ZxJMhw=)
                          6: 8lmNy5Yj60QUcRGQEadeJre2rk4.roa (hash: AlUF45g3noekUknA4pLJPQakHJF5Mt9ZC5CZFQlsxDc=)
                          7: MheB0kBk7_Juz-JLby0FgWbCCMI.roa (hash: 9j+q/o7noxu0ZCV7xXkY2PllbvE65yCHHry9Yei+qOk=)
                          8: N9bjWdW6-2JBdmplLKEKg2vGJfw.roa (hash: jdYO6joQzp8tGnqIL0VDI+YEamqrJGPpE1G1krM9wSE=)
                          9: PfuIQJWGnoXGniszOGoPQXpH8Cw.roa (hash: HLrae4M2pNt3W33D6G4C8E1K2PZcSc3Mg/Q3RdLjONk=)
                          10: R_YsGj-VAZv7ABWgGQcpSs4cvl4.roa (hash: AtnzT7K0lroMVQZaIqd8ZodVf2mbFvGHQcpC2NEULIA=)
                          11: WPiBhM-qmXw7kCLlIqNvgIf7Xww.roa (hash: zfrcLIK3f+w7enlTL1bhx8vNgA1/h9MJcl16s7QD9r0=)
                          12: io4wdCRfEoltjJlS55OCRO39VaY.roa (hash: of5zdEsNXsVZ/neVFXW7+CuegUZIK1xVhSw42YrxI7o=)
                          13: noeycDSAU8aLwrndfpkxrIvBumM.roa (hash: i1R+Ow6WzYakFfYy5nYc1v6ep91jj5lukG1kJ5nkFkM=)
                          14: nzuQXPcumd53aG_hzKz0JRrZ-S4.roa (hash: fBYQ+cv0U/hTaW8NP6Gf/tM5dlTwkkmXeQkzcTcfl+s=)
                          15: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 4K/JrVh0xf4Fxfi+tsz1xyeYaTF+i+D5UAA2LF0P9dw=)
                          16: u1nzbmJlHanwi550hpGS3Ome9L0.roa (hash: XMajDyqBCKkX9KuBNec3ZveKETO74oJnseFatDGN770=)
                          17: uqziA4FOaduBcPwd0ZOmX9IkNOM.roa (hash: DGR/kQs/IVAz6B7nA8WISuMp9LMyswW8ML6PVxofMAQ=)
                          18: wvyPvAKuwc-ET04gJXDvs4UeTP0.roa (hash: PObyliJf5xS576pVGMB70hrJjon0XWBBON131Hwz3HE=)
                          19: ymfWan-OZeBzZXEY7kxmiChnV9c.roa (hash: 3WnvSaXg36b0BA8jyjsISz5Eqtrec34yMkA0dhT1KQE=)
                          20: yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa (hash: LL1HdLP30LFwtFKZncvgRBTsUxfcvh+tFLF1k1q/EmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fa:99:a0:a9:bc:6d:9c:33:56:c5:20:67:a2:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Nov 25 11:00:10 2024 GMT
            Not After : Nov 26 11:00:10 2024 GMT
        Subject: CN=fd52cbc59a8b5123b11354411880b6a32c7e2bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:9a:21:8b:da:58:d5:da:68:af:92:2a:b4:
                    ae:a5:5b:45:a0:85:06:f7:27:cc:11:4d:0b:ac:6f:
                    08:aa:1c:6e:b0:49:fa:5a:45:b3:a7:85:d0:59:c5:
                    a1:96:78:23:33:8a:0a:fc:12:53:63:51:59:22:6b:
                    8d:fe:e7:fb:4f:d3:a3:d6:0d:e7:49:6c:31:1d:02:
                    7b:69:c7:a7:03:3d:f1:10:57:83:ac:39:c1:aa:a7:
                    52:1c:95:b8:75:ae:b5:0c:e8:3a:51:d2:71:0a:fd:
                    c6:c6:c9:30:5b:d8:fd:1b:20:6a:cb:55:bd:c1:50:
                    e7:78:0c:a0:6c:96:67:89:9d:b1:43:3b:85:54:87:
                    b8:32:3b:11:a4:05:ee:48:38:f0:37:fd:7e:10:03:
                    f3:1a:45:e6:17:3a:f7:86:b2:0f:18:ee:b9:a6:8b:
                    cf:b5:c4:66:14:a0:e4:1f:ab:46:e2:1d:02:a9:d3:
                    88:14:74:04:0e:b6:1b:29:be:b5:9c:11:b5:2d:cb:
                    8a:fa:a3:fc:49:60:c1:6f:07:18:43:26:42:0a:f0:
                    7a:c6:73:b2:88:b1:27:98:4a:9e:a1:f0:d1:5d:19:
                    b1:32:84:89:cb:6f:d0:de:8a:cd:25:ef:8c:c1:a3:
                    da:a1:f4:0f:c7:e1:96:1d:1d:b1:49:39:65:96:50:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:52:CB:C5:9A:8B:51:23:B1:13:54:41:18:80:B6:A3:2C:7E:2B:C5
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:09:5e:34:db:f6:2d:f4:46:3c:63:a3:72:d1:17:62:b7:4f:
         80:6f:d4:b1:c8:a1:3b:4c:f2:14:f3:d7:e8:11:f0:1c:b4:3a:
         ed:b3:85:b5:a7:a1:3e:73:c6:63:26:7f:52:3b:04:0f:b5:af:
         6b:d9:62:82:cf:1e:da:c1:84:1c:6f:58:6f:30:23:1d:2f:76:
         ce:6d:bd:9a:0b:67:3d:f7:14:56:fb:72:b1:c8:6a:94:8c:21:
         4b:ff:64:9c:69:60:58:77:08:74:63:4b:6a:40:fc:7e:be:cb:
         af:71:f8:14:09:b4:40:6b:36:73:c9:39:05:f3:24:4a:c1:23:
         d5:48:c1:ae:83:dc:ab:0f:76:63:f1:58:55:12:e3:1b:2f:48:
         6d:c7:cd:ca:11:cd:98:0c:61:de:18:fc:40:30:c7:8a:11:3f:
         70:1a:df:e5:02:fb:ab:91:d0:38:62:cb:ab:d7:d9:b4:8f:41:
         cf:21:a7:90:4e:66:e1:9b:b6:2c:4c:a3:7d:2c:05:86:c3:2b:
         c8:eb:2f:e4:0b:78:eb:75:59:1f:cd:17:62:e0:78:c9:71:61:
         39:a8:26:33:2c:d0:e2:10:25:d3:10:88:48:33:00:1d:6b:52:
         a7:73:5c:d9:52:55:2f:e5:76:ad:15:10:29:b7:3d:c5:97:f1:
         71:23:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:15:37 2024 by rpki-client on console-ams.rpki-client.org