Manifest

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
File:                     60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft (raw, json)
Hash identifier:          I91PF5iaAa4MQK+b9PaMbFcY7zcAVrVGnRt/sEfCkhk=
Subject key identifier:   20:F1:97:43:62:55:34:C8:A5:BC:0D:3F:DA:40:C9:00:AA:EA:39:31
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       2B7A2BBBB7A9944C09668B2D0A900A8B6C6D4387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
Manifest number:          09BE
Signing time:             Wed 02 Apr 2025 18:28:12 +0000
Manifest this update:     Wed 02 Apr 2025 18:23:12 +0000
Manifest next update:     Thu 03 Apr 2025 20:30:12 +0000
Files and hashes:         1: 39312e3230372e3132302e302f32342d3234203d3e203537393834.roa (hash: zXxEPlLfnpKqQtuwjkfDhQUfZACOdk3GUxGA9Tw62xU=)
                          2: 3138352e3137332e31392e302f32342d3234203d3e203438313132.roa (hash: cG8qee8BRQIYLCyibaAX1PHDmMwKpglwXEp4OsS7dN8=)
                          3: AS57984.asa (hash: c6o9mQXDX7r8ndXCzweFPoBzRzZahx3y4GZLdP99P44=)
                          4: AS39002.asa (hash: hEB8BBdYVlo72zx+ljFUNEeMeK+wTDG+bdunzLzWuR8=)
                          5: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (hash: 4rWkDGFZwlZnGiY5TGjlIW0R8uQkkzmbz9kWTJR/nwI=)
                          6: 323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa (hash: ckxFlkUrwseQ64/bSwyLjoUis4D774a0XcJ8Ix8hzzQ=)
                          7: 3138352e3137332e31362e302f32342d3234203d3e203438313132.roa (hash: TnP6eE1t/zMtuUMEl9bQLKU4fgP5RunUklgeQzdLufg=)
                          8: 39312e3230372e3132302e302f32332d3233203d3e203438313132.roa (hash: yRLQuMM5sTdiR8PKZYKlDIMgkV5pLcjIiqQes0FZF7o=)
                          9: 3138352e3137332e31372e302f32342d3234203d3e203438313132.roa (hash: vTLdA1RUelryYTN2UgjGCNXATOBrRDvTHGrG2KRmKTs=)
                          10: 326130623a326630343a3a2f33312d3331203d3e203438313132.roa (hash: QIqWkj5VvKF7jTZ6xlPBpF4MVG4UANJEg8WKZyVJJQE=)
                          11: 39312e3230382e3137392e302f32342d3234203d3e203339303032.roa (hash: ILTeOsOlof1ixvEufZA9hjiO7/Gwvo8Q+3QCtH7z6x8=)
                          12: 326130623a326630303a3a2f32392d3239203d3e203438313132.roa (hash: 6cZk2iLRKJZ69rak5PT6lStxMVt+r2zAJHGB1jXAUvU=)
                          13: 3138352e3137332e31362e302f32322d3232203d3e203438313132.roa (hash: RJ6zQFFgjy5ZrMju20xXDZ9RhX9kOOtdwEz+ZKuH1mI=)
                          14: 326130623a326630373a3a2f33322d3332203d3e203438313132.roa (hash: OZROTfVzOMELBiCwDmyAcEVZZhDAo+UD5eSklXATVaw=)
                          15: 3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa (hash: uHijyOj9mpYymEff+10q95GQh8xsBMKRFz+GAKcUqeQ=)
                          16: 60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl (hash: jtwFyNwS9t2pE1NJrn8ce1hcDSa5WD8TaNvNseGdtoo=)
                          17: 326130623a326630303a3a2f33322d3332203d3e203438313132.roa (hash: 57CW4xp8STDXfYck9c87XtU7ItSmlNQK/Zt9V6rKWQ4=)
                          18: 326130623a326630323a3a2f33312d3331203d3e203438313132.roa (hash: kPNbprDfP7R3YI814to1qpd5BgqC3H3j2fliaY8aGTA=)
                          19: 326130623a326630363a3a2f33322d3332203d3e203438313132.roa (hash: md7uFM5p/9W45NXls5uuNZrJh2ilTa904DU4ZbzFaNU=)
                          20: 34352e38392e3136342e302f32322d3232203d3e203438313132.roa (hash: hbh53rxHnDmHz2PEcqyVvOfOMwcm1fPOEzvMYdyhpnk=)
                          21: 326130633a343230303a3a2f32392d3239203d3e203438313132.roa (hash: sEjCW9FJODOwAuOa2xQ3EDOMzihAxD3E/nw+qW1SfX4=)
                          22: 326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa (hash: 5TC/USmUMX9oxnG7iHXL8gGk0KxLwbsQuFwa0LfQqdc=)
                          23: 39312e3230382e3137392e302f32342d3234203d3e203438313132.roa (hash: QWFc5480xuiX2B7iah8qYuNsztcVExs4709s2eR0koA=)
                          24: 326130623a326630313a3a2f33322d3332203d3e203438313132.roa (hash: juccWl4druAekCdBgUUi3faMtBunmQNpwr83OEUZN7Q=)
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 20:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7a:2b:bb:b7:a9:94:4c:09:66:8b:2d:0a:90:0a:8b:6c:6d:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Apr  2 18:23:12 2025 GMT
            Not After : Apr  3 20:30:12 2025 GMT
        Subject: CN=20F19743625534C8A5BC0D3FDA40C900AAEA3931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:de:52:a5:c6:d2:eb:f9:3d:04:7c:5a:46:
                    77:eb:9f:1c:0b:8b:b0:b0:da:88:ec:0f:0d:7d:09:
                    af:6d:5f:e4:c3:20:7e:e8:cc:9f:c3:29:cf:4b:c8:
                    f8:07:91:46:3e:f5:f2:0e:9d:e8:6d:41:8e:81:2e:
                    e7:0e:d9:12:08:4f:c6:67:f1:2f:34:f5:d3:0c:e6:
                    36:40:5e:94:10:81:2d:67:88:91:4b:81:c3:5e:4c:
                    12:e2:5e:6b:98:62:77:58:37:b7:df:d4:34:21:d2:
                    57:26:e2:d3:70:02:1c:aa:1a:12:96:43:9c:fc:26:
                    90:ee:d9:60:98:00:1f:ad:fb:ab:a7:77:1d:b0:42:
                    b5:c7:0d:45:8d:c2:bc:0e:a9:dd:ec:dc:3e:97:c0:
                    20:de:ce:7e:63:89:e6:28:f5:e5:d0:ae:5e:64:03:
                    93:ed:15:4e:ca:81:4b:3d:7e:3e:58:16:96:0f:15:
                    6d:e5:e9:70:cb:62:57:c7:09:49:9c:d9:b3:24:94:
                    78:4a:ca:4e:0d:d2:22:09:b5:3e:a4:da:98:68:8d:
                    8d:6e:30:77:3b:6f:53:8a:b7:5e:f4:30:26:db:21:
                    40:98:e7:e9:b8:6a:0e:2a:02:ae:ed:12:92:41:4a:
                    c3:9a:cf:5a:b2:f1:e7:75:87:89:78:f3:27:70:ff:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:97:43:62:55:34:C8:A5:BC:0D:3F:DA:40:C9:00:AA:EA:39:31
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:90:0d:b4:4f:e3:c5:71:a1:5b:b6:b8:36:a9:5b:75:21:
         ad:3b:93:74:2f:92:db:ee:ca:32:6c:93:f0:fb:69:30:43:00:
         31:c5:5f:f5:25:a9:e8:39:45:e4:88:fe:6d:ab:9e:bf:f9:08:
         f3:c1:df:8c:62:3f:65:90:db:ad:0f:09:1c:65:a3:a2:67:61:
         6e:f8:93:fa:cb:3b:a5:fd:b5:1b:f0:70:d8:87:06:a9:10:2e:
         f0:80:13:7c:fa:44:83:e4:3a:a9:fc:ad:b9:56:9f:73:b7:3a:
         9e:26:0d:6b:03:86:27:1e:ce:b4:5d:1d:30:c8:72:32:11:c9:
         5f:14:99:58:b9:90:be:29:f0:f7:86:ef:8d:8f:15:42:b1:cb:
         96:b8:19:1a:68:8e:98:bf:19:a4:23:26:e6:92:c0:4e:6f:49:
         de:c1:f2:e4:be:11:5f:b1:e7:a3:c5:d1:91:ef:3c:4e:96:6c:
         fe:56:ba:96:08:5e:55:e3:d4:28:74:3c:f9:36:8c:86:04:70:
         54:5a:4b:71:77:4f:a5:a4:57:73:ae:31:8d:f0:c1:55:ca:81:
         b2:2d:85:ad:0b:42:e3:28:42:28:04:c5:aa:c9:78:c5:7e:12:
         fa:a5:42:ff:f4:fb:d8:58:35:5d:84:c1:17:e7:4d:75:6a:95:
         09:3b:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:57 2025 by rpki-client