Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          Xbwc605OgjULxA/Jj7qSkGEGCgllS1Xnf7NSULMzCkg=
Subject key identifier:   B1:17:DE:3E:0D:DB:5B:8B:FA:1A:7A:27:01:3B:2F:98:6D:0B:29:C5
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       019351D076802092EE0C0E514D560FF34CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          13B2
Signing time:             Fri 22 Nov 2024 03:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:36 +0000
Files and hashes:         1: BCBNGQjh7SPJ0NONs3nXGZtDwFI.roa (hash: ytC1qPeuKIvO2IvsfCqrwxHs0WSOkeaPD3zy9Bgk5nI=)
                          2: Byastpa_kqc0EX9PthasXKTiwHM.roa (hash: s0WVL56jI3xmCJsZwSTnQpAPDcGp1f35GdE0y2PaqpU=)
                          3: FJZjpSGKilP5OycZunwqKrYvqw0.roa (hash: 9pvM6u5aBw+PuGiYS3Z9ai+BgAsLj5dGFTxkozyaujE=)
                          4: FezaxJ2DTW0_O1y8cD_GUeuILck.roa (hash: Vi38KR01iZFgNyL/JO3bOpLzRfbMAuvPY2Rc1DpsxXY=)
                          5: K_G5dhQIpIUcHVPzKOBcANtm6-4.roa (hash: avQ58Gvg7mbu0Le92BlXhysfNQ2J0oZDw/1VryUOvj0=)
                          6: KtZHeh9RUgjPS59Z3mILX-WmEsU.roa (hash: eUVjmIkBHFnUG4UPOM/qtWyhaTnClpsLCOw3rY1v9zs=)
                          7: KzB2ZS78khFNdB_CGCXy1WLNFHY.roa (hash: Z0zNhcTmjO69TAnMPnDwJB5erHhNYKFG3CbS8fWq10U=)
                          8: PfSqzrWEMAcR8IPn5aqsENkrrYU.roa (hash: uhZg5HgeewV2r+jtLJAQ0FmU/6uQS3+cUD3N32TUqgg=)
                          9: S3B8RrSC0HYnkm2IyEh3Lt2ZswY.roa (hash: RXwGuapzLjBPJXXQiPzQMlD8UULOJvQu8+ntcp3StYo=)
                          10: YYcN7VDkhMikXJNuf_ycNmWBOk4.roa (hash: xxhkhgyTC5cbzs4ogaiOlMsjZQp6z/Pulckh7U+x2IE=)
                          11: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: /zQmDYZN/Bx394pKYOtBh2Rg5mX6Ym+V7XAk9UwXXJo=)
                          12: _pvLgB436U6Ho8_3wc1uTePp9dk.roa (hash: jY3FMP2nBjq2jbTSWy73ChkriYnB5uu0VtiCiZKBk1A=)
                          13: a0xFAGVUICbO7Bu6bpYCzUHOrIU.roa (hash: NRSHZ0Vvo+f5QmLMqJXnY1r0RADdAeKEIDNvb/lIfB4=)
                          14: fEYDfX4hG3B4jE7kbTWkm0hjZDE.roa (hash: Ef+DqRks6z8AT1j32zNVNv46VCkfmOyXHGOUzI0e1cU=)
                          15: hxy8ZnEK8lE1NoJAdYIUSeF8AhU.roa (hash: P15ytQ4hFOy/52GneNoYJkqRS2eAQshjH5P92QW5MrA=)
                          16: l1RqEgbrkRN7B6cgHsvRAj0q15E.roa (hash: N7VZMQr5ObDc4XTpo/lztaWinL28cw+r8GkFRgNLwAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:76:80:20:92:ee:0c:0e:51:4d:56:0f:f3:4c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Nov 22 03:00:36 2024 GMT
            Not After : Nov 23 03:00:36 2024 GMT
        Subject: CN=b117de3e0ddb5b8bfa1a7a27013b2f986d0b29c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:be:ad:7b:9c:bc:a0:53:84:f9:fd:34:02:
                    88:ea:26:34:59:da:ca:fd:bb:b4:de:36:ff:bc:84:
                    c8:a7:47:ad:e3:5e:c0:12:70:08:e7:15:2f:64:a2:
                    75:ac:67:4e:23:a6:2f:db:1c:c6:03:d5:67:f9:a5:
                    e8:59:49:32:cb:17:98:4d:09:26:d9:a9:02:65:e8:
                    36:3c:50:a0:29:07:ea:47:34:d1:6c:1d:96:15:4c:
                    93:44:57:e0:3f:d4:d9:75:3b:79:67:3d:66:06:f1:
                    8d:fb:6d:6e:80:47:0d:a9:f8:94:c5:1f:96:e2:20:
                    af:db:6d:66:de:32:8a:bf:8c:2b:45:bf:80:76:b0:
                    7d:17:6c:9f:a9:df:4a:6f:1b:c5:18:3f:c0:39:2e:
                    f6:25:70:4e:b7:e7:84:2d:c5:c0:7a:67:81:33:69:
                    25:93:55:b5:ab:b8:89:01:03:6b:e0:87:fe:13:79:
                    33:da:32:e9:d5:e1:31:ae:da:9f:ac:e7:cd:24:1f:
                    8d:fe:60:3a:c1:5f:4f:a1:41:73:ef:8c:aa:ed:8d:
                    76:c3:be:3b:43:c3:ac:d4:ab:85:97:30:fe:fe:1b:
                    34:a1:eb:10:de:b5:34:4a:08:c3:bb:b2:87:e1:75:
                    fd:32:a2:a1:13:6a:20:66:f2:b8:50:ff:d1:f7:3e:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:DE:3E:0D:DB:5B:8B:FA:1A:7A:27:01:3B:2F:98:6D:0B:29:C5
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:c4:0e:a9:db:8c:ae:27:49:fb:ba:8b:e9:96:c8:19:ce:
         50:29:9c:ae:1f:b9:78:b1:7b:27:c3:5f:23:2d:35:d7:0c:f9:
         1c:87:e5:05:3b:5a:58:40:e6:69:d3:5e:34:b9:13:30:7c:c3:
         b9:85:68:05:4c:bb:b4:37:56:2f:48:ac:ff:48:63:68:e2:e5:
         db:27:1e:4b:07:41:37:fc:80:1b:93:83:dc:29:53:4f:2c:ef:
         14:0b:e9:cb:2b:40:03:11:ff:da:83:e7:c7:bd:8b:60:90:e5:
         17:29:44:b8:da:3c:06:ea:c9:e2:a4:83:dd:41:ef:92:54:c8:
         98:2c:a5:cc:62:72:61:b1:eb:3f:b3:40:17:d1:ee:97:e5:f3:
         e3:7b:8e:55:e6:dc:30:77:47:07:69:91:e3:39:4c:89:cb:37:
         66:8c:51:f8:4d:b8:58:d2:2f:46:e7:df:67:41:95:f3:8d:19:
         1b:c6:7a:9c:fd:d9:41:04:ff:df:2d:86:12:55:3b:1f:ad:21:
         40:ca:72:59:4c:97:27:81:49:9d:4c:ac:43:ea:dd:67:94:ec:
         66:1e:6f:2e:ff:ac:b0:86:ea:93:f1:76:9a:27:ea:ef:ad:65:
         fc:86:07:64:f2:3f:cb:1a:24:61:d8:46:25:8f:cf:9d:45:f9:
         b6:7b:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:32 2024 by rpki-client on console-fra.rpki-client.org