Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          j+tkBpt6dJr2Mj5Y90SBbAc90jYQjrOYX0y+QmEKFXE=
Subject key identifier:   99:CC:9D:82:44:59:4F:B5:58:BD:F9:B6:AD:6E:07:31:46:B7:39:A7
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       0193553F1BE361DF5FA419D6EEFD20469CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          0B63
Signing time:             Fri 22 Nov 2024 19:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:19 +0000
Files and hashes:         1: 02aJWT6otq36IUaTRrGIuv5j7rw.roa (hash: VGpbiSRQoVbcLKjkOQ3iMB2PUmhAEEoXIIe0AE+569U=)
                          2: 0osE71JmSyTOrMjVGenTeuuKgxc.roa (hash: UGjSCNUeoS6yxQkVPV9djeHdodqKhk2oR4iDlFAUeY0=)
                          3: 1-QNb7L1HRbo3wxPihiDu-SruilI.roa (hash: jTcZo5s/xdIu+5ZHLxjeVcxpA4Flno/wVc8CcVO6fBg=)
                          4: 1KPRYiPqNgQkD01y-4yIJyq1o-w.roa (hash: vYNmtXPqjQQxCJ3MQHJ0qJWlREkvvbPGFOjD9GAfJTM=)
                          5: 1bHoiqUesopG4S-BYFPLOQW2pCE.roa (hash: KjjqxXMXEJKUts7OPlp5wPXxUt3pNCvDjHVcbx644LM=)
                          6: 6c37zfN0inDJdqY3dKyontcC8e4.roa (hash: tAEVHarb7ccO9o50JmGcQPkkYRnm3kEJUfLc0wIPuKk=)
                          7: 7QWuq59JoEVo7Ku7Whs67MccdF8.roa (hash: xnhQg1iadigffrhJLi/UVVvWEECll9vMpIyLdIl72ds=)
                          8: 8T-3kj-ea0P6832Po8m37l7g5i4.roa (hash: DIuLz4hzZyXpmZuN+HLumeezsf/kGkCUT8yIXGW4xCY=)
                          9: AjvHf331roA25zYfb0x5vclFbhs.roa (hash: aW9VhicDizfEgQ5Y5WChODcLKSu6LB6dVZjVY9hYN9U=)
                          10: GwJgUCh_gQio_BcTsdi44InbgV0.roa (hash: arXwf568yHQjcKdbHYWZPuCqSIB3W1mwN8P5KvdxddA=)
                          11: H2VoO48Hm_yj9dEzuxzyt-8pfiM.roa (hash: QTm+jbwCoBOAo+gzXTt0uUBP6MnbQ4QGcaOd+GyRltI=)
                          12: HlITixtRJA5B8_rN76oqz12cZNY.roa (hash: FYJbj0dEjph4PtdhNdd6lbDbwuY0kwH2cPLA1Y4Gb5c=)
                          13: JGXgcU4vroVVCVS2ASyO4seovkg.roa (hash: 9cDVUJvgvG0inZ0NH9T86wosMgtlBWFqLmOTS+XSffE=)
                          14: N27NGihy8WmI6HIW_yhWSJZeU9k.roa (hash: Q+Td16nLax+UmqY0XNxT8IJJewf0jGZAU8j9g1646D8=)
                          15: N9KhVYv5q1aYK2lEFm5ALon_FVo.roa (hash: OrTYsfrtUv1QeMpmG50KNUVl2zhE6msN7jeoSZQiuDg=)
                          16: NTVBx724Tv7AtucWSPXlbPS5EcI.roa (hash: 30S+akiraRQ9uW475SfIVytCQb+bVdR5BCYv90StXbg=)
                          17: NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa (hash: R5ydMgwhbJwPLRXjezPN0UVvbP6FH9z33P63YOFbih4=)
                          18: OBlw2ayty3_ztay60BQM-4Nw6iI.roa (hash: 9F1q/lB7dKAgfTq6ogDoFurEnR4ZQUin1yKfZQVyKGk=)
                          19: On6A-OohhpReF0z-NR1oEXLBVT4.roa (hash: EeKnZk+tKU7cHkW4jIudGBehdwSUy6jG4ZHtAFD9m+I=)
                          20: U1fUr2EyxVTU50U1hrSZo8nGFmE.roa (hash: 5Y5WY7bIErp5QxDnlVkn4ydYbD2vk8m+PA3d/v86+Ak=)
                          21: b8D2gfkJBD67VX7mQztlyBtaZbY.roa (hash: unCoS1wqNhhJRTVJ6bLCLDXVLUOtTcNsAmmvkB6iFFk=)
                          22: kuwbf96A9rw2pbo7uPM40Rl8CC0.roa (hash: a2L9elBFo9A8yoERXaG6fpRoICxNShtECkHlwZ/4P+I=)
                          23: lL6YsvPnlwMo1Lxlp4GV2Jwb5tw.roa (hash: D6jnnGijHDcQqcFcjTIMS4dyUy06NUz/giAwJVBGr4E=)
                          24: p5yYJq700BobK9jLhXTNrsv5bL0.roa (hash: e81TR5f32uyYUqv5tcNLrlL7sZIm/pLpm5hLIvWVeIo=)
                          25: rTBtx-Bmu2ZOtpRDtfhvIKyTitM.roa (hash: Iq0BbV7w2uJ4gdlJ4bQ6gjr/K/TFORb3rq+dn6mMlZs=)
                          26: uVYCwA9OuZbcSScp-zoQmH5isBA.roa (hash: xghGco4z4yZj6nmJqZPMUehS8IhcqMHjFRbMEsmFbY4=)
                          27: vzABXDGryhPruJDzz69xyEnMs5A.roa (hash: hzBNpnkrz+OQUbJEyerHfwFpveacKFwUD9HhRkZSDsA=)
                          28: wiv9ohIfO88AdDjHXiP2id1UPWA.roa (hash: b7MEyRIl3D8G2gcd1nEeLfNMlpms9v7oYChebhQJqik=)
                          29: zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa (hash: ekFnkI66YVxFkSg+glTclvDPNEE8lHAbbrvtxQNJQgk=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: q6evS00CYv4OqPEkiHdRGx4KTt0JeNPxW+5fiD2ZAmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:1b:e3:61:df:5f:a4:19:d6:ee:fd:20:46:9c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Nov 22 19:00:19 2024 GMT
            Not After : Nov 23 19:00:19 2024 GMT
        Subject: CN=99cc9d8244594fb558bdf9b6ad6e073146b739a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:96:b6:94:51:ed:ec:d1:4c:14:cb:fd:36:
                    0f:d3:c3:8b:37:37:78:c2:2a:1b:e5:96:20:e3:75:
                    0c:98:5e:8c:c2:1e:41:6c:87:d2:c4:a8:ac:95:ea:
                    a2:a0:da:d4:5a:1b:d0:10:bd:00:ec:58:0a:b7:94:
                    e9:c1:d3:e9:ce:f4:a0:6c:1f:87:83:01:7e:f5:45:
                    97:c4:f2:b5:5b:bb:ae:6c:33:15:dd:b1:43:32:94:
                    6b:c4:dc:64:9c:9a:e6:30:40:b2:8e:ab:cd:24:9a:
                    70:ae:9b:8b:17:1c:d3:3e:3d:af:39:0d:df:57:87:
                    76:73:ff:8a:ea:92:07:5a:d6:00:c2:7f:81:4f:6b:
                    6f:e2:20:be:58:0f:ea:cc:dd:21:88:0d:c3:f6:40:
                    b5:43:99:33:dd:09:52:b9:f6:20:c1:f2:78:de:ea:
                    81:48:ff:8f:88:1d:8a:48:54:69:15:07:e2:38:b4:
                    12:96:aa:5f:d8:12:c8:d1:87:2e:d8:01:20:3e:11:
                    81:c7:2e:fc:8f:b0:f2:d7:10:78:9c:6d:55:f9:c8:
                    33:15:99:11:45:6b:1e:a5:17:4c:c4:61:88:92:13:
                    57:c4:59:17:81:0c:e6:fa:c4:95:2c:61:43:e9:06:
                    a0:d8:02:7a:ca:f0:a5:98:cb:88:16:71:d3:83:3a:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CC:9D:82:44:59:4F:B5:58:BD:F9:B6:AD:6E:07:31:46:B7:39:A7
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:52:e0:35:74:97:c4:30:54:2a:16:c8:d5:2e:2e:46:71:
         51:0c:25:ba:ca:80:ed:b8:fb:8a:9e:5d:f1:47:54:0a:97:c8:
         69:be:e4:bb:a4:5b:0b:ad:4a:95:2e:35:83:bb:89:66:ec:fd:
         2e:b7:99:f1:41:35:38:2e:f4:fd:1d:a1:05:d1:31:26:2b:41:
         7f:c5:9b:5d:5f:73:af:9b:4f:24:37:5c:8f:9f:a1:8f:7e:f2:
         b7:d5:c2:ea:3e:d3:14:b1:8d:6e:93:cc:5c:1d:59:44:81:7f:
         2f:28:ea:72:29:f5:c8:b0:a3:b3:0d:b3:4e:87:3c:a1:6c:a8:
         10:41:cd:7f:e2:5c:c6:cf:a5:c2:d0:32:0d:00:71:01:c5:7c:
         cf:be:3c:8c:30:6d:d1:88:e3:ea:b9:fc:b1:2c:9b:e0:b8:72:
         de:09:ca:2d:ea:93:46:a4:7f:ae:16:a1:92:b5:af:47:df:d1:
         c0:bf:89:d1:6d:49:16:95:c2:bf:c6:66:5d:c7:1d:a0:4c:b1:
         71:c1:8c:88:48:b5:6d:16:06:74:b0:08:05:ab:19:fc:d9:9e:
         67:2f:9b:20:cc:f8:cc:01:78:d2:87:dd:b3:1c:fc:d3:38:bc:
         94:99:e2:c6:94:99:f8:0b:fd:58:b0:2a:19:5a:7f:b7:78:40:
         d5:5f:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:08 2024 by rpki-client on console-ams.rpki-client.org