Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          H6toBJ5N68lijGLCP4FjIze80EMelPIFSXxVWd24H8s=
Subject key identifier:   1D:03:AE:3D:DE:0C:5C:79:CB:FF:10:23:52:37:5A:86:A4:6A:45:1E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019350C00476A865CE0FE8C5DD3D98A822D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          13D8
Signing time:             Thu 21 Nov 2024 22:03:01 +0000
Manifest this update:     Thu 21 Nov 2024 22:03:01 +0000
Manifest next update:     Fri 22 Nov 2024 22:03:01 +0000
Files and hashes:         1: 0Iz-7pERf4B3O0SFGJq-SEu3ng0.roa (hash: KPSi/hdadUwAmPUb0wEQfY0MXOXlxE1BREftO6vpmMo=)
                          2: 3zv6bv0i10s6AH2xkX2x65Cq-tg.roa (hash: TBDIXaTt3vegoMfPPey9RB9NOoYcnMryliWUNX/vatQ=)
                          3: 6Fc4SV2HHf9mEPybRtU3FCY0zZA.roa (hash: SBErEhpOxFEjO5GBNi82Bed4nEkq9LBQzVxc4g/jhIc=)
                          4: 6HsXin8nvk0w429rw1_4Tsb_Cro.roa (hash: W9ZJ/K+6i7LEhuNVMl+1WINcgeNyr68g7tVCJ8KSzCo=)
                          5: 7eCHg_CxfIicy1asNWcFPcZwhwQ.roa (hash: 8Flba4SsFMQ9YrVfDk1W99QwUJ6IlVMAwbRAbMSrGSo=)
                          6: 9ArX02VU-OjOKzCnPi3PCxujkWA.roa (hash: OkXq1ooxriYnHmUI9P6M3zr6ZvzIXQfTxpyQBMpMwSI=)
                          7: MSmJyH6iBvJEgE5a2H6xJkI7zqg.roa (hash: Mh0m190YiSIXIfTH54NJJVyumYO5eyqjxpZabCKOQFg=)
                          8: NIzz7Di7LXBgc8I1JV0gjH1xyPE.roa (hash: 7zvmI56A2FaryHXyxSBIUWh8sG5nAK5McFFY4bRN82I=)
                          9: VhPSTSBOgtIHUZf9s-YyFv4T6_w.roa (hash: TG2G8OFQRXRVHv6FrThOeEO4+fMK3bSevDqVIvvp4CQ=)
                          10: XPlQEBKPlrAUVyCtDPCRVfP7rLU.roa (hash: TV+6JsgLNUtz6NjpYJuN8806pmKEtFAYFP1qLJF1iDU=)
                          11: XfjtaX5Q2nW51-IV7dQGYSjK4aI.roa (hash: C7lMNdCegbsZgSK4bVKOmOizTyiierzoOquKUSCWJQw=)
                          12: bXh_eEMCs7I31OeuZeL0Inq4a50.roa (hash: XHgZ7CG2TlU4b0mTXyipC45fHWsY8ofrlAYh4vmnGq0=)
                          13: jZN77xnj_OvDTpTit4iEBCBnf14.roa (hash: 4t2TV6nm0buLlQwK6kY9OmWw8Dqco1Qg82JZizCTMXk=)
                          14: jpILug7ZtBwjRJREW-YPaIWszfw.roa (hash: aehlEYly/QKDDzoal5yzNFQGpQXG4szvuNerrodQf6Y=)
                          15: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: HBFhMu/7ur1CK7vxSG0emuGQ1N2hl0jJmnSHzv+Uvnw=)
                          16: l6PESaXru3XwZnhL3QEUM6POesM.roa (hash: 86jpAOalTeFF6dUqf5NNxmCa6QMbP1rBcLnDET395Xk=)
                          17: mpBlYx9ElBJbDAb9JuJ0w0KFbNg.roa (hash: h3cyDYHhxIS2iJVnV/DGZx5iP7DcU+Hov/FmbtZ0qaw=)
                          18: nez10ev3GCMSVjpgyLZW75sZm_E.roa (hash: wKHaUqmezQYFLjYgm+re7ULR8r+z2N2QQNVcCLBFRfo=)
                          19: obbszcYkCz5Yv3qsS-2s2wNWl4c.roa (hash: A2gZPzcUTWVZ6Aii4UHNsrIysEgvTAW27r+hKXLS160=)
                          20: pBUImblS5yyhXgiTrJtdcng-NUo.roa (hash: e1YVXqd1bfUxp+qzdCBgp+sO9HaHc9reb+Q3jUUWUV4=)
                          21: pMy17ooA24-d04K1qk0u5HggW6Y.roa (hash: 1X5BhhMkEtw1s43TfbUlhyUV9u6Ai+n8b/JYykqVyf4=)
                          22: s5Lz7uokRVJ_IZ6nYTkz_QoLMy8.roa (hash: PUS8wQG57NyBpbqrlY9m4knbPzDEzrzmSFM7272cMaQ=)
                          23: vP9Td1ZEUHX74eZZo8Kn2Or7mjg.roa (hash: XiqL6aHd9FQouBl44BB/rofyzh/8nuPHWVvGXnODFbU=)
                          24: w6iAoBrih5Qj4q5MYVKIWej5fY0.roa (hash: IM8saOwnpnuNES4PfXQKCvmU5kzk9VaQ0NBlO1QUmu0=)
                          25: wbvKTBNwpOlgCssOzuC4DGVwdjY.roa (hash: vEnrfMY1LAOPw8ijEMTFIJE4sHv33mWCdDLIxrTImzs=)
                          26: xI4YCgzkvMH1my9gUpACgdiC_es.roa (hash: PMoqhtq4PaBGXW9IeCXNdfIc4BDqHqAqXQRm3a/Mfq4=)
                          27: xXxdrSvKqTu4bYcLyLyP14iUiy0.roa (hash: IcwcHbi7zXCWkl0+eLNlsudxyzDpEqqAD0DRyZ4NU6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:c0:04:76:a8:65:ce:0f:e8:c5:dd:3d:98:a8:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Nov 21 22:03:01 2024 GMT
            Not After : Nov 22 22:03:01 2024 GMT
        Subject: CN=1d03ae3dde0c5c79cbff102352375a86a46a451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:e2:44:d4:fa:ef:d0:0e:94:84:15:91:b9:
                    b3:e5:de:6d:2b:6e:d6:d5:58:d0:93:36:9e:85:0b:
                    95:cb:e8:3a:58:d1:b3:eb:ac:94:8b:91:68:9c:2d:
                    17:74:89:9b:b8:a8:3c:ba:3e:74:74:73:69:f3:05:
                    02:24:01:40:f7:51:db:75:29:d0:8f:a0:03:dc:84:
                    2f:f6:06:ca:32:82:5e:f6:23:15:3f:78:07:81:8e:
                    1a:8d:fc:f0:e8:06:94:71:a5:cc:b4:77:e2:a2:92:
                    25:2a:ca:82:77:b6:7a:ce:c6:12:8b:87:cf:7b:9b:
                    57:13:34:c9:f1:ce:76:25:f9:0d:3c:4f:f4:93:72:
                    1f:e3:bd:6e:ca:32:61:36:69:8c:36:3f:21:ac:96:
                    46:5f:9c:98:4a:22:28:9b:75:c2:60:c3:51:d2:6d:
                    ea:81:8e:45:f7:1f:df:12:bf:68:89:4a:92:8e:30:
                    09:70:f8:c0:1a:01:b9:1b:63:84:2e:0e:a5:6a:93:
                    8a:e6:0e:a2:2d:79:9a:f9:5d:d5:38:6a:77:d8:af:
                    6a:8f:c6:a7:7d:b0:56:db:e7:cb:74:e0:be:28:0a:
                    83:ba:e5:d8:ee:f0:c9:28:c3:b1:2c:e4:05:dd:fd:
                    cb:35:87:75:84:c2:ac:bc:8a:1a:5a:36:e8:00:d7:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:AE:3D:DE:0C:5C:79:CB:FF:10:23:52:37:5A:86:A4:6A:45:1E
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:35:68:03:22:5e:cd:fc:53:30:b0:be:69:84:0d:ad:3e:
         b2:fb:d4:65:cf:fc:06:13:e9:e8:c1:e6:58:48:c3:91:d8:e0:
         5c:a1:bf:b2:b2:9f:9f:59:5b:5a:de:05:42:6c:3e:ad:c7:12:
         b8:24:39:95:d7:c7:28:7d:a6:4c:31:86:35:5f:9b:2b:22:0c:
         1d:af:8f:e3:ed:f9:aa:e4:d1:f8:c0:af:9b:5e:29:c5:9b:a7:
         dc:86:19:66:33:a7:c3:52:f8:99:de:8e:61:f7:5a:97:dc:ce:
         f9:74:64:39:3e:51:b8:33:91:dc:d7:43:73:74:83:5c:84:62:
         c2:90:d6:3f:7b:ea:e5:3e:13:0e:51:d5:0e:e8:58:ed:0a:3f:
         78:e6:64:2e:b5:86:2c:09:e5:68:ee:92:54:97:92:84:5b:c7:
         b0:25:4f:3b:81:9c:a1:00:f1:17:32:d3:cb:5e:7e:a6:40:6b:
         55:8d:ea:9b:0b:cc:32:a3:ab:97:16:9b:53:55:d3:7b:ce:da:
         96:b3:28:69:b6:3d:04:99:d7:dc:72:7d:58:49:a2:d3:d9:37:
         59:a1:9b:00:90:f8:75:33:a3:77:a7:fc:19:88:96:ad:06:a7:
         54:62:05:93:77:49:45:0a:e7:35:f2:44:cc:c7:12:9c:1f:09:
         50:54:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:28 2024 by rpki-client on console-fra.rpki-client.org