Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          236ybMn9SkMT6GbYwjmApbTrO56w9npRuLdMH9Igo8Q=
Subject key identifier:   93:C4:91:AF:6A:29:97:7B:1F:8C:01:B2:CB:3D:C8:95:5F:0E:5D:AD
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019350CA387A685D524A55FC0AC738A4B259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          13FE
Signing time:             Thu 21 Nov 2024 22:14:10 +0000
Manifest this update:     Thu 21 Nov 2024 22:14:10 +0000
Manifest next update:     Fri 22 Nov 2024 22:14:10 +0000
Files and hashes:         1: 0Ar0wlqwghSfTnjNQdVx5daWVKM.roa (hash: YqeD70fPCBZLTkyGsTI9wVD0E12YB5tEhPnwmDruBUk=)
                          2: 1-1oBeXXzjbs7qfhZPsB3V3Bu7sI.roa (hash: Y+A+lvylGyuMgIBusXiJmvb61QKuz/oDDKFD3AYfD0g=)
                          3: 1-gwpD7zKq0lbIHGrQud5449_S1g.roa (hash: MKXpIuGJOx2Ej/oKWXWgDwotKChn3vxaQ25+RWWfmbI=)
                          4: 3pv4v0EivgJCPPwiUT87dq6XFRg.roa (hash: D35pDE53Ob/gQu9zE84eAGS1n7605IGgIJM3PoKqOzA=)
                          5: 7ReSVoSFuJTUO73VmGaO9-neOPA.roa (hash: Ck7u+tV3a5E7NvinuE41Df6E9nnohxDuXWLS9P82D20=)
                          6: 7Vfxpn9iDVfG-mwX3qw_dwC835A.roa (hash: qqGR59e1qckyJOuES2qTJd7EimXTXVArgFpocONBdIQ=)
                          7: DWhrt5wNMdvhNSmiTuZNuD9EnpA.roa (hash: Q9ebwyqTGCIsS5odSYAfxWZkb5RZ5cJuUflL15pBYXg=)
                          8: HPpJwq1Rdvr6rcJ8wrzuK8hRn_U.roa (hash: 0w7Ubp7g+bRxknx/VG6oVu3I1SD4IIUzCdUMntPl5Qk=)
                          9: HkMXgQgePY3RdIfive86DixoqU8.roa (hash: h2yCtuZwj3/fqFMG17UU9VRSDxZoqPNK7Vzz9Xvacuw=)
                          10: L7i9jquUVEN12XY-7DmAhnrvaCU.roa (hash: AzWUqaeQ23SOdwPtbdpmRs+1Krdd11heZcjcVWPjF6Q=)
                          11: MHwVK56c0CU6HbQZz96CaNPChQ0.roa (hash: /RWJfaAYqa3k3xtZBm0aYD2Q+T0lq6V0SMY2xxBCEnQ=)
                          12: PkKP6xpm-NY1VuTQexcicrcN8pY.roa (hash: Ukal8KmlZlz3QHXQtDB3UD8S4X3DSQhCcdYx18e7WeY=)
                          13: R0yFLoljqCNP6eCrRDT9niVYkIo.roa (hash: U5C4t5GWshWWoXrVC83DMPGGQtiPpYgS2B8nfqVdj1o=)
                          14: RE7XdvQuPqbYUtB7QYr6pFOyG_c.roa (hash: sNg1EV+xqQk4nuPF4TQ412u3Gm1hhoy4MmpPrjuI+UA=)
                          15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 23IDU6rn766z+6PzHBBtfbc/BdQLOCCVqLGJnKpTI3Y=)
                          16: THTTTPQt1NwqzQ6hmAwHKbNq1xo.roa (hash: bLk/E3NLOsR4HG9U9oyIyT9zxDb5OWgpB4d5A+DD/WI=)
                          17: abfUHnjVwKfNfRcesaZSYpaYlS4.roa (hash: 1HtALoKofx2uHWBFhRHcsVvCYSgbXMr7L3NRkNzasLQ=)
                          18: dTJTZK3RvulD5r7ehghl-VQVaKc.roa (hash: cnM0lLdmHPRiaAsLeKSkvSjUgGwGbC8y8moNZC+xal8=)
                          19: fDgow4igK-0xM73aMw708ZJ6Ljs.roa (hash: wpDZV1g0+YNpQ+LRCIjzQhfzLEI8QSGizNDplk+q3SY=)
                          20: g5Z7-3kDhboRX_LUZaYD1KOpLuA.roa (hash: UwYa5KefavEY/c8PprkroaKCVVTKWSCyKEwsnWSDRK0=)
                          21: gHj_xRUxCGNYHIUpSht9PO7y8pU.roa (hash: MksQKi9hK2I2dlsx2UXVFTVEKMd4uGgVHY8H+K4d1lQ=)
                          22: gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa (hash: vNfnHgOaZKGux0a94suXIC6Y3FMoSETfiplXI7zoHLg=)
                          23: i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa (hash: +aufc/VtxP0DH56cISq2IPlVl1PcsBiFP3UrLERS7FQ=)
                          24: kDXH_gu6uRQjpd89xDlemGDwnBQ.roa (hash: VG62IGiI1VQ/kPZqAFFTObfyyVRkATPG1me6ut3utLE=)
                          25: ksRq-P4M9p9IPLct8N0acQ6aq1A.roa (hash: xaJIHD5zvMEPrcUgSJiP2FkpV8MBMDsu/w5rOSKghLs=)
                          26: oWs4I-J87MIxd8g8fV3o2oYJl6A.roa (hash: PTR+fX1YtkmuFscfoP1s/L3sWhPoWvF7fUT0B0CLVJI=)
                          27: uXcD_7LQqYQ9YxOP1HpjvLSK0QU.roa (hash: /B7bhyRsaABX8zFXoOrwmePknLsYPYAv2hkhr/lAHtk=)
                          28: vtIo4CLbl3ph6096UtzMxK6Ew10.roa (hash: j9xVxWNIN7GFOpSPXCH7DliIQ/9SMF5pabHmJ1fx6cc=)
                          29: wR-JG8BbcylwwAu-O5IYVuoYG70.roa (hash: M5NeyGOTdVIKjfunNQFXHDLKLTLUefIS2EcU0OLg4M0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:ca:38:7a:68:5d:52:4a:55:fc:0a:c7:38:a4:b2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Nov 21 22:14:10 2024 GMT
            Not After : Nov 22 22:14:10 2024 GMT
        Subject: CN=93c491af6a29977b1f8c01b2cb3dc8955f0e5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:c4:48:aa:00:67:7e:55:5a:55:15:c9:ed:
                    9d:f2:fc:5b:79:74:39:2b:ad:0b:89:f6:92:61:28:
                    c8:26:64:71:31:4d:b8:db:2b:c3:c0:4b:0c:d1:68:
                    91:80:11:c7:d6:e1:8b:70:9e:da:97:71:e3:24:19:
                    7f:ab:53:4c:fe:63:d7:60:b5:19:34:7f:1e:24:70:
                    28:ef:21:74:a1:ca:dd:53:a4:1d:d4:51:8d:d9:85:
                    bc:63:e5:b4:83:aa:df:bf:ba:25:93:a1:c5:11:13:
                    5d:e2:3b:c1:86:65:c4:a2:69:a8:8a:44:cd:99:f3:
                    a5:b7:53:e6:88:73:4e:b7:cf:e1:68:96:54:19:5f:
                    2f:38:1e:dd:f9:0f:36:df:15:90:6a:bd:e4:51:47:
                    5d:20:11:7b:bb:cc:86:bd:b3:b3:c4:bb:57:be:ba:
                    c4:83:17:7a:db:9b:8d:c9:33:ba:82:fd:74:7f:f7:
                    93:78:99:72:d5:cb:99:a2:15:4c:52:8e:78:38:4d:
                    86:60:3b:92:d2:eb:30:31:2a:15:c4:d2:90:0b:ae:
                    99:a9:74:85:99:1f:96:c2:03:b8:10:99:dc:06:52:
                    00:d9:19:53:41:19:fb:a9:0e:c3:2a:df:f1:02:b0:
                    d2:37:57:aa:f3:87:bc:5f:11:8a:6e:5d:7c:ba:7b:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:91:AF:6A:29:97:7B:1F:8C:01:B2:CB:3D:C8:95:5F:0E:5D:AD
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:6c:85:25:58:4a:4e:a0:f4:9b:3e:39:6e:00:e0:74:2e:
         53:18:13:0d:5b:08:80:b8:19:8b:e8:fe:bc:40:fb:74:10:fe:
         1e:7c:96:45:7d:00:7a:49:81:8e:1e:16:65:47:78:7e:40:a9:
         01:76:9f:ad:24:8b:b8:0e:d1:bb:aa:2f:7e:01:cb:ef:77:f7:
         45:30:43:76:26:d9:7d:42:51:f1:ae:49:09:5e:c5:c5:41:2b:
         ea:f7:a1:9c:2d:dc:5f:46:31:7a:23:4a:ed:7e:64:f4:f5:a6:
         5a:cf:ff:e1:27:83:9f:04:4f:09:2d:1d:25:5a:f6:63:e2:63:
         94:25:6f:8c:d1:a7:5d:df:e8:12:b8:7e:90:37:48:a1:0e:63:
         e2:78:ec:25:74:38:5d:bb:b7:bb:f4:56:64:c6:c6:0f:4c:ad:
         c9:b8:06:87:25:4c:ec:c2:0e:50:c1:d5:ac:bd:0c:54:3b:8f:
         4f:ac:fb:17:3e:1c:18:1f:c8:8c:6a:2b:dc:94:32:e1:8e:9b:
         87:fe:67:d4:82:2b:61:1c:6a:4b:e0:4e:88:aa:8a:f3:4d:13:
         b8:71:6d:de:2a:fa:f6:77:36:64:02:ef:77:3f:f0:0c:e7:0a:
         6c:f0:62:09:4a:82:59:8e:0d:a5:6f:73:db:0b:cd:16:e1:cd:
         97:03:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:09 2024 by rpki-client on console-ams.rpki-client.org