Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          cgKJ9uex0uFWbbkCSBNTt5L4nAsSnyFU6TnGMpUixKQ=
Subject key identifier:   69:A2:53:31:17:24:7C:D6:93:B0:3B:28:23:33:01:5D:2E:CB:E3:D5
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       01935162C73F1F082117C39A8F36B7968704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0998
Signing time:             Fri 22 Nov 2024 01:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:48 +0000
Files and hashes:         1: 0FmTnBMnuM8CqJKRzbeXAkp0I4o.roa (hash: i629uKssaNv3QUt1y581X9Lg1jqct2mganKXsSuOIGA=)
                          2: 1-VJwgbKCQbjnWsAOmvQzwQQL2I.roa (hash: 1cSJCbLXLvV56b+3dPMZhn5LwzCYtSYMBQw2dOKqS1I=)
                          3: 1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa (hash: 6goMk1Kr7rz810o84x0pUgRnU14FKOLkmHsz+YXSL3o=)
                          4: 1-wqY4T9kMNzfBzXy5zMtdu5nKcs.roa (hash: esmU+dc7CzdfYUSxDYH6H16129M2pFmdHskmJs+Yqgk=)
                          5: 2g2Txe5bM5HkDkE93pfn3J-H6zA.roa (hash: 2YlAZlVFeanWD+HVL0HHKBK9NbpYKZj/xXaIKnUquro=)
                          6: 61Z_0Yl1Ls-nqVgKYxVDPpYV6MA.roa (hash: ddla1jqlqBDLe80bR0Y1WoLELnKy80MfpN9DNdZ/xao=)
                          7: CWf_qK9Xms_E5BzAHckc9nJFJoQ.roa (hash: peq/pAWODx6eOku2RmbnvEUO7g3/C6DE5qNC+zODJjE=)
                          8: ERH0M8rBZY63h5hGwmwrgI0jkUQ.roa (hash: 2AULkqQRDVYaR9FJ2OUk2FKylspp1AqXmGZcuJi6gsw=)
                          9: G2uYqyKdzHx8Ts-CoIv7al2Q3RY.roa (hash: ReXyvqIbYYC4U0IB3LS0BjlhdA3A6DRbPO3zdzNEV4g=)
                          10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: Zk5LwAfI4h6lde3zHS8IZn+S4nJxBUUImAKPLacWnz4=)
                          11: V_t8dxwfbbAmHrUMP0owL-KHOyI.roa (hash: nYXqPGGa+VpMEzCTf5skAH0H2zY6c2C3bfYxubFQzrI=)
                          12: Wy7W8HTr_QJiY_reE0-4LYFNBMI.roa (hash: d8RUhQ9zU6ou3c1Fn5XXn4SRpzN5PhuRf+aYWQeILUc=)
                          13: WzNFl30SpTGro4t1aTCIojupjOk.roa (hash: igNH8Jfb+KjGNL+hvMQ+ENVPWn2UsTTD7oMm+mKGLjQ=)
                          14: a2WW0_7N8tPOLevidLaWxdzOVCo.roa (hash: s3Yc575DPaM3Q5O//GaVHB1jatiXf1PeLam3YIIiuIg=)
                          15: dmHMJaRnXcooVoAGEmQNVEEkj-c.roa (hash: lSIVb2yGgPGT4Lw+8aYfejS0fIyMOajul31WaxiAuMo=)
                          16: iyfQ4fQn8FUSvWOQoTRQwotwxhs.roa (hash: 0EHWFey/1Qz7WrE2ehGnf95LJeN8UUGRJFFSyYNNKqo=)
                          17: jLgR7wU8jpfqYagjR4kV3UJaZQE.roa (hash: mE5Qrrp0Eqmz1hXxUIs82XsIjX902aX34pfC20ak1bc=)
                          18: jsgLkfgxBptAvj17kkDR4qjAyLk.roa (hash: 6lWgM9untHlAdvo2Avy6egquV0IHp63V7w7n9lOYQu0=)
                          19: wbXZXmDtfX06mZznQ42RomlcMh4.roa (hash: JtwXSk0P9RPCgrVpsPf+QRdS3FAcDJdV4Cu0CCdyd+Y=)
                          20: zkQ8Yq5VC6h46JFKXW5jf0Xzses.roa (hash: PDMilvIIr9o0ZBn7RhwsfuCnpHOersLhK9yG9VT48Zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:c7:3f:1f:08:21:17:c3:9a:8f:36:b7:96:87:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Nov 22 01:00:48 2024 GMT
            Not After : Nov 23 01:00:48 2024 GMT
        Subject: CN=69a2533117247cd693b03b282333015d2ecbe3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:6b:50:71:d5:02:56:a0:12:21:c4:b3:60:
                    44:ce:b0:31:27:1e:75:3f:5c:87:32:91:25:ca:f5:
                    db:07:de:2a:dd:94:e1:99:78:51:1f:2a:15:ce:05:
                    6a:f7:86:2d:d3:4d:fa:42:03:58:23:19:2d:ae:b8:
                    96:bc:77:2f:db:6f:2a:81:64:ca:bc:54:73:81:dd:
                    3a:c3:48:84:5b:29:f5:38:6b:d6:9b:c5:cf:9a:31:
                    0d:0d:3f:22:49:07:6e:27:28:1f:14:63:2a:47:31:
                    80:6b:f6:cb:6f:63:bc:ce:bb:6a:8b:56:6a:7a:84:
                    8e:94:26:4d:1e:cb:a8:1a:da:7e:c5:75:ce:08:cf:
                    dc:89:c1:d5:2a:4d:4f:92:9b:2a:59:11:2d:eb:7d:
                    34:b3:35:b6:ce:ee:b8:74:fb:73:65:11:8e:5d:6f:
                    e8:d8:91:1d:b1:f7:dd:0d:a3:27:3e:ae:11:98:c5:
                    e5:11:22:59:14:c7:35:52:4c:9d:32:87:ab:3d:cf:
                    6f:0d:69:66:dc:00:4d:d1:a4:d7:fc:29:3a:79:f3:
                    9f:49:25:12:b3:8b:18:92:3f:0e:22:da:4a:72:a1:
                    fc:53:ec:7c:47:93:8c:22:a0:5c:c6:e2:ea:2a:66:
                    c3:7e:be:50:32:6f:7c:fa:c8:75:f4:e9:1e:f6:f6:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:53:31:17:24:7C:D6:93:B0:3B:28:23:33:01:5D:2E:CB:E3:D5
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:ff:04:4f:82:ae:77:81:95:b9:a7:24:5b:5b:8e:f4:6e:
         d9:47:d9:3d:0b:94:8a:06:7e:c9:78:aa:4b:cb:52:5c:e0:e1:
         65:52:19:69:49:25:50:5e:9c:79:7b:fe:61:eb:94:5f:7a:2d:
         59:21:1f:b4:3f:33:77:35:69:0b:c6:ff:e8:79:c0:32:98:2d:
         a8:a2:f4:56:0f:96:e5:fd:f0:dc:38:e5:59:b9:c0:72:dd:95:
         fd:7e:53:0e:d2:27:22:cd:ed:93:b9:fa:47:1f:0f:02:c1:62:
         ad:fe:44:6e:3d:13:32:aa:00:f6:64:bc:38:42:78:2b:2d:f4:
         6e:ec:47:6d:e6:e2:55:99:2e:72:fc:6e:8c:10:2d:ff:6d:53:
         ec:fe:c4:83:c0:64:9d:86:06:dc:1d:05:a4:8f:bc:88:7f:96:
         a3:a3:68:cb:77:c4:3b:a3:4b:34:ac:d5:17:9d:0c:1d:79:14:
         09:93:ad:d7:ed:ba:87:2c:ea:f6:4b:03:5c:28:58:6b:0e:95:
         c0:d1:7b:6d:c0:04:fb:58:cc:dd:1e:d5:c8:c5:e4:9e:76:c6:
         df:fc:3f:b3:84:35:96:a8:7d:b4:02:05:8f:2e:93:67:c1:8c:
         36:da:92:86:99:6a:24:a5:8e:09:7c:8a:4b:8f:5c:74:4e:6d:
         88:04:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:50 2024 by rpki-client on console-fra.rpki-client.org