Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          cUcvNksJjoQ4kSjHKKd1YvSkgpV/rB+yurGEb2LXrYk=
Subject key identifier:   AD:46:FD:88:A4:74:06:60:FB:8F:FB:84:F8:1A:81:DF:EB:54:0C:83
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       01935508BBD75D752AC85FBD9A3E5A7BCD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          1383
Signing time:             Fri 22 Nov 2024 18:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:55 +0000
Files and hashes:         1: Au6DgRRxXOC5_uEHAY5BHYrESl4.roa (hash: xLoQPk2MtSaIuM8/5pUN+xQjyA+PWA0jzmidIehb6CE=)
                          2: Bvy_IdJhaG4le-ow99i1WflIK-M.roa (hash: TV7P3whbR0CH6NPxDA8Jh2zSgmSCL0HuEkVZu4IDCaE=)
                          3: GpSW7VY6BjcLOVsgPwMlLOa11Tk.roa (hash: lVkbuOeZKHMCVq6dkiijHHN4VuBBaHHpIxdDNbLxBkM=)
                          4: HITJMFcfpCQfp5xaqgDDb2Y45-M.roa (hash: 7S+GokfFPtP9AC1os9WYE3tV52O0cd15Sqwejv4TTwc=)
                          5: Kh07wp0LLeNC_E3MeZu8-dfjpiQ.roa (hash: yF+YmPeSmhKgtiTPv28VRDFmexn+EA7FPIA0BF5/gQ0=)
                          6: dr3FvpX0zsC5u26y8bl6QOFyXy4.roa (hash: jzgJElxmelriLlO3cJzAYs/rPlTKtYsrKy8LQ5ADQEM=)
                          7: eSE017sK5Yopx05RtQOnJWltMIw.roa (hash: 6vgMT5BFz1Xr0r967OA3QEF28+qxAI+/K9XZv0V2I1E=)
                          8: iy8RGwWEOoY0OK_KJOONxBJs-rA.roa (hash: Wl/ODDP+OjXQRoYxhVEUVKUpxTjcOReVKrJyoRHsrSs=)
                          9: j4iK8X4eDkrdOGm5iVsoO01Biu0.roa (hash: 0OZtdf9nGjEDUXjaW78Vz1GDfgvz9nXwvG0zWdK9V6Y=)
                          10: p0pY8Od0JvfEazAbiKJO0JlAxFg.roa (hash: oFixOfQ8DZ7xTyIBht0RmE0rocdMflkufAJtik1zfDE=)
                          11: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 0ZpzNNqryO6uxRkwvp928eTw+hSIHUV49LGEStOFUoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:bb:d7:5d:75:2a:c8:5f:bd:9a:3e:5a:7b:cd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Nov 22 18:00:55 2024 GMT
            Not After : Nov 23 18:00:55 2024 GMT
        Subject: CN=ad46fd88a4740660fb8ffb84f81a81dfeb540c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:38:3e:68:84:81:c9:c1:bc:a6:ae:09:f1:
                    07:ae:e6:23:dd:c6:db:e8:92:a8:61:ea:b9:9d:44:
                    fe:22:0a:9c:e4:80:52:76:d6:84:f7:9d:f0:8a:62:
                    d7:14:3a:65:5e:63:4d:95:87:27:76:49:f4:80:76:
                    44:c1:6d:35:0c:2d:4f:4a:b2:3c:f8:0c:1a:63:07:
                    82:20:c5:da:ab:3c:4d:44:8d:32:6d:bf:86:bf:e6:
                    8e:ff:67:d3:61:24:a9:97:0d:85:a5:44:cf:e0:20:
                    4c:c9:ff:93:52:d5:95:82:16:54:d3:7d:d2:1b:a7:
                    af:f9:b2:55:3e:22:83:ec:b7:8e:bd:3f:4d:0c:bd:
                    76:89:15:2e:fc:d1:bf:ab:2d:85:3f:b0:5b:16:c1:
                    79:7d:74:ee:54:90:f7:74:e5:7b:2a:6d:93:5a:16:
                    87:34:91:04:6e:1f:d7:6a:fe:dc:42:76:9b:d5:56:
                    0b:bb:5e:f3:38:69:e3:bf:8a:e3:38:f1:80:1e:6b:
                    72:12:42:5f:b5:a0:ca:be:05:8f:06:f0:31:15:7b:
                    9d:f7:d2:e7:4c:92:99:d9:e9:e9:8c:5a:50:56:a2:
                    3f:e6:47:31:35:4f:ea:7f:9f:a2:45:a9:4c:e0:f1:
                    2c:72:d5:52:ea:19:f1:d7:57:e1:e4:76:b0:b7:e9:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:46:FD:88:A4:74:06:60:FB:8F:FB:84:F8:1A:81:DF:EB:54:0C:83
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:6c:71:d8:0b:76:c8:cc:f9:0b:3b:f3:bf:d9:ba:3e:46:
         75:b8:3b:7d:9d:7e:9c:5e:de:f9:92:b8:51:18:a9:ef:a6:76:
         c1:84:e4:93:43:1c:d3:13:14:7e:f9:8c:76:54:e7:1b:3a:74:
         a9:84:21:49:50:d1:cc:35:56:c6:b8:f8:5b:9a:49:78:f1:e7:
         24:bc:46:ce:e6:14:f1:1f:f3:d1:95:b1:7e:b2:83:a7:33:df:
         51:5e:78:1e:b2:39:b0:40:11:ee:f9:d1:22:85:c8:bd:20:19:
         ca:2d:be:b5:1d:d1:3c:61:97:6f:bc:22:3a:23:46:cd:4d:83:
         bf:e8:39:e7:5e:21:37:89:e5:41:01:0e:9c:c6:e0:d0:9d:0c:
         b4:86:cf:12:c8:66:c1:5f:bd:05:eb:58:b8:19:1f:a7:2f:bc:
         52:9a:cd:c3:bb:5a:1c:23:d6:32:4e:98:c0:dd:01:85:cc:cb:
         90:3c:cd:b1:11:3a:82:40:08:2b:a1:50:44:e8:80:b7:66:e2:
         dc:3f:06:ee:93:11:63:16:23:78:68:92:a8:25:3d:33:f2:a0:
         7d:00:84:f0:9e:d0:ef:e5:aa:79:8b:dc:9b:b4:7c:bc:76:3b:
         6e:36:ea:76:e6:70:f5:ea:18:c3:ad:8a:30:f6:ae:27:f5:f7:
         82:3b:a6:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCLvXXXUqyF+9mj5ae81jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjQxMTIyMTgwMDU1WhcNMjQxMTIzMTgwMDU1WjAzMTEwLwYDVQQD
EyhhZDQ2ZmQ4OGE0NzQwNjYwZmI4ZmZiODRmODFhODFkZmViNTQwYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5s4PmiEgcnBvKauCfEHruYj3cbb
6JKoYeq5nUT+Igqc5IBSdtaE953wimLXFDplXmNNlYcndkn0gHZEwW01DC1PSrI8
+AwaYweCIMXaqzxNRI0ybb+Gv+aO/2fTYSSplw2FpUTP4CBMyf+TUtWVghZU033S
G6ev+bJVPiKD7LeOvT9NDL12iRUu/NG/qy2FP7BbFsF5fXTuVJD3dOV7Km2TWhaH
NJEEbh/Xav7cQnab1VYLu17zOGnjv4rjOPGAHmtyEkJftaDKvgWPBvAxFXud99Ln
TJKZ2enpjFpQVqI/5kcxNU/qf5+iRalM4PEsctVS6hnx11fh5Hawt+keZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1G/YikdAZg+4/7hPgagd/rVAyDMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlpscdgL
dsjM+Qs787/Zuj5Gdbg7fZ1+nF7e+ZK4URip76Z2wYTkk0Mc0xMUfvmMdlTnGzp0
qYQhSVDRzDVWxrj4W5pJePHnJLxGzuYU8R/z0ZWxfrKDpzPfUV54HrI5sEAR7vnR
IoXIvSAZyi2+tR3RPGGXb7wiOiNGzU2Dv+g5514hN4nlQQEOnMbg0J0MtIbPEshm
wV+9BetYuBkfpy+8UprNw7taHCPWMk6YwN0BhczLkDzNsRE6gkAIK6FQROiAt2bi
3D8G7pMRYxYjeGiSqCU9M/KgfQCE8J7Q7+WqeYvcm7R8vHY7bjbqduZw9eoYw62K
MPauJ/X3gjum4A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:24 2024 by rpki-client on console-fra.rpki-client.org