Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          v7pGvtKZqcqbViAGaZ4fsEPmpwclj7om99UMF0KvJnI=
Subject key identifier:   38:72:3B:C4:78:E3:2F:6E:0B:3E:54:21:10:C1:68:99:15:A6:1D:3A
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0193523E15CAD809C54EC822495DEFEAB0B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          05DC
Signing time:             Fri 22 Nov 2024 05:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:20 +0000
Files and hashes:         1: 1wVxE5GX7AJptrxDz02u6-CMHgo.roa (hash: WXuG3OrrTmHmJwSfv02VhsrJAxf8cxZnlv7hfTWPhQE=)
                          2: 46o33-QVc4MvL-1adq737GUpI2g.roa (hash: 9vt3l98GGa9qBZenQ9TGNk1RF9y1zBGhbuQFOeXj/O8=)
                          3: 6cuHnp0iBZS2UcJhRokyjCPciCo.roa (hash: rXN6N+MnMGJrN/0d2JdkNwqt0WltlamLNcwpVGx5spY=)
                          4: 7FVzExg5k288F3KMcJps14w0KJE.roa (hash: BZJSa1VhXWNONuR9Z+Hx4l0TFL5JRbIJhm6z2IgmIJ8=)
                          5: 7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa (hash: yFuAylcjFhfwI7lj2y2jMW5pRcHUjLX+AzJFprv9xq8=)
                          6: FI0w7KJuOncIYB6DF0_bJ9l72MQ.roa (hash: oAmbxXXuip9OTF1Di0TutSwCv0JkJYeQi6qlS9yptC8=)
                          7: U2CJ5dyxPhWWgWkKP6COVXs1Jpc.roa (hash: KbXKttHuKMXln6TPafAMvta5YLVLDb0Kpr/j7yuCvaM=)
                          8: WLrd7ESKCIVsZTIkqYvxhalDksI.roa (hash: GEijsH+uKu9ygMs39PkSnonxtE7hLGQnLj7iNRzM/Fs=)
                          9: XLt3KRusRF4aB4iaRrdNkRrOIo8.roa (hash: p9+U0Ut7mAT90k4lXAUrl005iT/TZ9BF0fuhj2+nQrI=)
                          10: Xbpa_t0Aqf7Ao2Ke0kdZEjTJZT4.roa (hash: e8/B6vIihKuer33Gn3NaqyAQQIQ0Ei9kP42cg1OTLKQ=)
                          11: YQTXLjAxi1omvsDmsvcV2Cegte8.roa (hash: iLUfvS4cWpoWzelSmQxBA7lhnX90K7kancrALh2kPUQ=)
                          12: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: EKSb5G5bcfl18+xbJFcx6I8yGVrvOact3ZIE/UdAm0I=)
                          13: h1O2hZeKjjFc8cdU8FI5e0j9Bu0.roa (hash: X99JhvegVHsBHRV3lFha8j6b9bhdcjXaK4BZrNj5vso=)
                          14: kx2j0gAIqlzu_2JjKqPuDv9QZbU.roa (hash: opMfMGi1pEau18OjqgxkTyDt4JOPifKFjaMWiWju7Wg=)
                          15: m6CCT-4rIF_PfBsuoIrEQBvhI3k.roa (hash: d9SGPKv6ld/Fq1hflRtxG7v/80aw3Orlr0kM57c2CPo=)
                          16: qL_MT8XvZ8QRRW5KWSMB1J_plBw.roa (hash: 7UtaNF+27K+p4ctTT9/QGTU5Ep/A2KY2nEn4fr73Syo=)
                          17: sN2iaGB4Lxs9DJrImZU6d9XSNO0.roa (hash: yTfyKpgQvvxyPEuZ/FJVj3kb50aGftOShS+05PqkQ2A=)
                          18: t25OJGV5NvLRgoxXnJz-deTU6uc.roa (hash: OWcOgM2TqA6qWlRTloEiAGZOkiX5O95wBt/dIiERHpM=)
                          19: w2lj_w1whx0NXHLzhViOWiY0iEM.roa (hash: 4pdmjktZdeY1MAGFcbwBa8WdANG+ioxli+G+PEOI53Q=)
                          20: xKTRc2A3Y0Pc-13bWj9FU4SFnXs.roa (hash: IL36PxxJSsoNvW7tCa8VUEc0Z7ceH93gJxQoHn86ygo=)
                          21: ypg00VatAkl0XJz_JH-aS139Xm0.roa (hash: 2MwBKgmUDqF8VG45kpQ8iivFEzF253DGR0ej8sCa+Sw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:15:ca:d8:09:c5:4e:c8:22:49:5d:ef:ea:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Nov 22 05:00:20 2024 GMT
            Not After : Nov 23 05:00:20 2024 GMT
        Subject: CN=38723bc478e32f6e0b3e542110c1689915a61d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:b1:47:bd:84:1a:38:81:d9:7e:ad:61:06:
                    be:93:15:b6:44:ab:2c:5b:61:ec:5b:a2:e9:e8:64:
                    bb:65:77:3f:79:35:76:fa:c4:cd:31:5b:f3:82:83:
                    ce:93:7f:63:8a:97:ff:25:66:3f:8e:5f:de:d8:d5:
                    8f:e4:94:89:21:7d:b4:09:a7:f6:64:ed:84:ca:d6:
                    ea:11:69:8c:c1:62:a1:43:e8:c9:38:17:f2:a5:96:
                    3f:79:21:06:ac:fe:01:67:fa:1f:5e:5d:0d:42:3c:
                    a2:41:aa:0e:bc:ce:73:af:1b:52:8c:5f:8c:05:a3:
                    37:46:d4:92:b9:0b:57:b9:5c:af:2d:da:5e:30:b3:
                    ac:b0:b9:5a:3a:ec:a7:02:e4:c0:01:19:85:2f:45:
                    dd:38:e8:70:20:c7:ca:53:d9:cd:8e:68:27:5e:c2:
                    4a:5a:81:6b:e9:31:59:33:65:aa:2d:fc:80:57:c0:
                    13:40:d7:a8:a9:0e:b5:78:41:f3:76:1e:f2:56:45:
                    24:15:fc:5b:21:42:5d:07:53:ab:57:42:95:74:2b:
                    cb:e0:d1:3d:39:06:80:03:83:e9:62:f6:84:13:47:
                    f5:2e:35:70:3c:61:52:b8:0b:27:92:e5:4b:25:d9:
                    0c:96:b5:49:0d:c9:7d:7d:f9:f4:9d:8f:dd:8b:93:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:3B:C4:78:E3:2F:6E:0B:3E:54:21:10:C1:68:99:15:A6:1D:3A
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:47:06:bf:07:75:ae:44:cc:c4:1c:98:89:0e:53:9d:d9:
         b8:c3:3b:81:4a:de:d4:b6:8e:6c:bc:06:4c:d8:c6:5b:76:3a:
         76:b3:65:04:4a:2a:7f:52:ad:82:c6:bf:81:ed:66:3d:f6:9e:
         8c:52:fb:c7:8e:af:6a:42:0d:0f:0f:c0:fd:f8:c8:23:1f:eb:
         79:55:70:ae:b0:2e:21:b3:3a:1c:a5:d0:4c:86:66:a8:3f:3d:
         c5:4d:74:3a:c5:79:53:03:99:f7:6e:4a:45:0d:bf:58:a7:b9:
         9e:28:22:f4:57:b0:5e:de:74:5b:c0:5e:90:b4:b3:4f:95:5e:
         84:85:e1:b6:3e:03:be:32:5b:aa:f8:ec:64:a2:f2:34:3c:e0:
         5b:c5:14:35:0c:1e:74:55:0b:4b:9a:4a:75:3b:35:7f:ed:fd:
         80:1c:fd:f7:7f:6b:5c:83:23:27:b5:1d:48:96:34:1f:f9:70:
         67:0d:5b:56:57:55:0b:df:8e:e9:b5:49:29:1f:6c:ee:91:72:
         d8:76:b3:12:e7:f0:1d:f2:b9:07:11:b3:d3:9d:b5:c8:95:be:
         5b:a5:0f:64:88:d6:97:11:7c:b2:9f:87:44:ac:fb:85:f1:97:
         cb:e8:9d:8e:ca:a9:85:ed:ee:91:86:07:9e:cd:57:57:e4:e9:
         8c:23:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:04 2024 by rpki-client on console-fra.rpki-client.org