Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File:                     HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier:          +EH/MKrwBZL6ZKng1TPQDFMbUoaidPizt5ZawbKoBII=
Subject key identifier:   0B:2D:36:53:A0:4E:BB:E6:5A:8E:25:CC:CD:21:E7:7E:C9:89:76:52
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019350F4A1A24F543767FCCA91378ECA3AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number:          1385
Signing time:             Thu 21 Nov 2024 23:00:29 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:29 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:29 +0000
Files and hashes:         1: 1-3yzwFMc2ZB8Cz0VSUsEWDGz6gQ.roa (hash: VflV+DaJBSp3rGIumJ0P6EnRkL/IwCA7KbpPBB5uMHE=)
                          2: 4cPQkZgue2nXQMjoJtLCRhz6yPU.roa (hash: DIHbn8wN+GM5uhGWLqhrGb0HVOwqpEOppW3eu1LD1G0=)
                          3: 5eoEXQ_3WvXppqlohy50yxtm18E.roa (hash: 4DYkWMRXIyXgkKjoucZM0a9GOBE/a9lLrT5AQ/l7zNo=)
                          4: 7lgKtf9sNL4j3Lv5I_O8H_8OzrI.roa (hash: r7al6Ww9nL8Au7tu3L91ef9yCYqvvltWR2dHriSBnwY=)
                          5: ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa (hash: 0tYWznCDvmHGBoUhdxe1z5ox8EgWu8jKLO+Kf+ar6vk=)
                          6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 0sMMVK7uZAhY/Xusp4tdLRFdBFanD5DNnomHpPkijCY=)
                          7: KWP8glNzaUxDx7ImTRsmAJhFF18.roa (hash: KZq1LBkEz6vE/VUFwSze6mzoGNLjjepumeI3sNxgREI=)
                          8: LA53G5NMoMtLWw9CsLpgsFxITwU.roa (hash: lQtOJKjwvZkVB7FqCMMA6/28aQRwXZITlSnCxiQeM2o=)
                          9: UofF8XU3exWeauninptt64WR7xg.roa (hash: uyQs9cvae2xtwhLBboAWSW3Lw9mAKxZrThDTKOY76+Y=)
                          10: XLpZ-BKg0b-YqYFdQUnHT85OOkg.roa (hash: sYn9aEKPtsgL8VHGrDx8zotYQKupq7SZ6tTvap3sH2U=)
                          11: YDSbhUJS34wcW7m6rawPlxi2Dok.roa (hash: ZihpgAvk/MwAXi4GFOu5euNT7wlJZ8jUuEVochSYHkg=)
                          12: dEqc3UOoNjkcBENYHZ0uatmL18o.roa (hash: DWoNloh6v1CwMPJanUPaFRfiuxm/qX6c8c7Qn7qzcpk=)
                          13: f64qbOKXPE_reQ2MKBvkpRdSaUI.roa (hash: Al5CkC72oJHlxtpEvaGH/4qXI/KTUuygkyzB3Gqq4CQ=)
                          14: mDZSGswva_DXidUdZ4fet0FT4io.roa (hash: uIM3YQj+OOsCc9T9yfF/Q5aHW9wL9gvz/cvJ0/BnM2c=)
                          15: wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa (hash: e7NfJf5g8+my0XAZksaKPtinFgJH4DUn90+YMDhe0p0=)
                          16: xbxcmlS5w3DcHv2KTiQiiNSMu9A.roa (hash: I2CTkDJOqt4hcJ2m3/cKWZO/An6GpsK0lheu83mIDpc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:a1:a2:4f:54:37:67:fc:ca:91:37:8e:ca:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Nov 21 23:00:29 2024 GMT
            Not After : Nov 22 23:00:29 2024 GMT
        Subject: CN=0b2d3653a04ebbe65a8e25cccd21e77ec9897652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:ad:2a:1d:32:37:56:d4:05:73:21:86:8d:
                    02:95:71:2a:f7:ec:69:ca:a8:eb:1a:0c:a0:be:ae:
                    07:db:fd:f3:0b:3f:da:9e:35:3a:81:f0:41:21:91:
                    d8:f2:cc:b7:b2:a3:6c:c4:ee:99:b1:37:16:01:6e:
                    bb:5c:3b:4a:d9:e9:e9:36:a7:61:4e:c6:53:09:5b:
                    7d:96:7e:1b:39:c4:d3:c5:79:4e:6e:bf:ea:62:08:
                    a0:92:7d:22:c7:24:e5:5f:15:5a:d2:7f:27:49:f0:
                    81:e5:27:8a:84:a5:c2:aa:23:3a:b4:42:e3:40:f0:
                    27:39:a3:65:dc:94:e2:43:f1:f6:61:5a:1f:87:9b:
                    57:88:83:fa:6b:ce:f7:00:e5:ba:d3:54:a3:42:12:
                    98:a7:a6:8f:e0:9f:cf:b2:d7:92:48:14:a1:ee:c3:
                    d3:cc:e0:4b:3f:43:30:7f:4c:d2:d1:d5:0a:ed:46:
                    38:4a:8c:09:02:a3:f3:4e:52:be:27:13:3b:b8:a4:
                    ab:ab:a4:6f:6c:e6:99:07:d4:35:c9:6d:b9:a3:50:
                    b2:6b:c3:96:9b:c8:65:db:f8:59:88:61:03:f8:4e:
                    b0:1e:69:5e:bd:f4:9e:94:05:59:9f:39:f8:83:b0:
                    cf:0f:4f:03:ed:99:54:b6:54:a4:b6:2a:52:d2:b7:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2D:36:53:A0:4E:BB:E6:5A:8E:25:CC:CD:21:E7:7E:C9:89:76:52
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:36:b7:06:b9:74:88:b6:20:2a:2c:9f:4e:eb:5e:8f:16:81:
         a3:c7:08:31:97:c3:e5:76:7e:53:b7:12:c0:91:7c:96:cd:69:
         81:c9:6a:6e:a0:aa:20:bb:6b:bd:db:e2:82:cf:54:d2:bc:71:
         51:75:6d:22:c0:63:b6:55:e8:8b:36:c5:b8:89:83:05:62:1b:
         b0:05:28:eb:76:9d:19:db:b9:3e:8c:7d:c3:15:72:6f:95:f9:
         ee:05:f6:e7:52:06:73:4a:ad:27:9c:9e:43:9e:75:8f:ad:d9:
         de:ad:56:01:cc:2a:a4:4e:6f:6a:79:8a:31:67:3f:17:e1:df:
         08:09:0e:c6:71:a9:83:1e:24:2f:f0:a4:ea:e5:81:f7:34:94:
         9a:1e:35:21:dd:9a:b9:28:55:0b:bd:4f:ac:9d:0e:95:30:63:
         f0:07:e4:c4:75:ab:f5:64:fb:4d:e5:72:fb:31:7d:c7:26:7d:
         6e:3f:7f:de:51:74:a6:56:30:25:2d:01:69:cd:2c:ff:a2:29:
         62:77:5b:91:19:26:60:3c:56:78:92:53:50:3e:b3:86:1c:1d:
         6a:2b:f4:7f:5a:a9:74:7d:7a:32:7b:00:92:6d:1a:3b:f5:00:
         27:91:87:1c:1e:a2:cb:dd:d8:7d:a4:2e:3a:27:13:87:b4:fa:
         05:d7:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:29:09 2024 by rpki-client on console-ams.rpki-client.org