Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          OKhEf84mod/CfmypSkDEcP896i0KDq29zTtYlIXdr8Q=
Subject key identifier:   E3:0C:CE:A9:A2:C7:90:31:B3:68:85:40:01:46:99:36:69:5B:D0:00
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       018F8B5C07B2CD0CD7CD573A35798F0D6D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0A55
Signing time:             Sat 18 May 2024 11:00:15 +0000
Manifest this update:     Sat 18 May 2024 11:00:15 +0000
Manifest next update:     Sun 19 May 2024 11:00:15 +0000
Files and hashes:         1: 1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa (hash: 1Nyx5OuBzAi5tVSoN3Qt9spnM1Efm02StNudVPyA6fE=)
                          2: 34nsar2gfWQMMOY8tCpJec3_HUA.roa (hash: qHqL67WUPiM0VW5Mkgg1jP4+rMDRoJNp+6mte0aAhHk=)
                          3: 4MrTlfPATwtxzMqfdTJmbUxs_Ws.roa (hash: 1bpZpw6rksfx3v9fH7vGTw0fZkS7zML6xv7Z0kxDq1c=)
                          4: 7aJF1OvrBkHDpgaBIudRFqduwAI.roa (hash: jNF86Ohd3P/HPa8+9WkslxOCPWkXU7Fodi0CxYqNh3I=)
                          5: B3eSjFh2x5UGE6LggPbRF5Eu_FQ.roa (hash: 6IKNe6mjt4PJVGsH9q2HDzSiV5C2OHBUg6JKwgpUQUg=)
                          6: Bten4d5EHLADjiG92fENgaHKncU.roa (hash: 8JMfooqvcgXYiDOnn/hgaj24lhblXDnHqQ7qKQ+xL6U=)
                          7: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: +ObwgU4zU8xZJ1IoggwmhCGMcaP3DnNwsuf1PoWN9JE=)
                          8: HBPcfyJ67WoZ0_lWemV3kbQcN1w.roa (hash: e07YXr0pitztXt3vGoJaRLbsDXOqIDq6lBwwACaXHYc=)
                          9: ITVXeY-3Fv925a3wvGGY8v_CY_k.roa (hash: g0lRc4xZcDrc9SBpQR0W1xPlzWygV1lGi4G3cBKKYF4=)
                          10: KQujLH4oLzYnB8VQuixon1yfSSo.roa (hash: H0j+I5VY79hF5TbT10RNwhD6GJEhpjzPuk4hT09uLRs=)
                          11: L2cj-UQiTHFj2xukqDIIigF4A5A.roa (hash: 1nv4FdHmWuFypdwDJuMZZWzFwHGcGQqOKT9NKc6Ju3g=)
                          12: QdlUplVUfinPTbT2OAX0sPwX3EA.roa (hash: PTrOw77SGCku+YmCUq+CDc6SAVsSJF1TQHM5qOjHwIs=)
                          13: RnGsv9ag7WxbJ1pYCPqG8S1oj9s.roa (hash: 4bY1D9SEBhn1t5/57ioddEse+Xwb88/R2aLY5uGjqfM=)
                          14: S6SCkSuSJXnMC9O7btAy1tkWxQA.roa (hash: fMltvV0yeLeXpkZRnOyfVnBirfGJ0mAvKTWM5ttH2dM=)
                          15: ZvjRbM0VAk_kMaMSQ1f8fjYuXWY.roa (hash: pvIXFcZn02IMBNCSsgbMra8JB12ZqwFBtFjoYJ3C2zo=)
                          16: _DB9Hz7nSSMH4CKNpvnwxz7mEZ8.roa (hash: ZFddUTUu6vRZ1XTISNow9F9hB953r6KdGd/vjUt7+0c=)
                          17: _aaxxvBoJBt89n_6b1yAE4bxDpQ.roa (hash: 1fb53tFOpWcj7sLAQN+ntdodfPJWC+q+g+VAbf5DpBU=)
                          18: e1aytWE2xJwMHVnjkrE0HndSN5k.roa (hash: 09lTIKGJFBet3UMRNRYZgWrhx8KeCEUzU7xUhdLRPTQ=)
                          19: fR6UM7VER9dk984P5-y6VwVFiLQ.roa (hash: S0QgPJOGR867h2ojiGY0WQjOSAzEO1v49NidyA/qZn4=)
                          20: ganROBAgCdg0Vfi1QmeOgCuJ5Tc.roa (hash: 98mvxUTUACrhWYg/ePpKXdlBSVKICyI+5WZJqoq9xyk=)
                          21: hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa (hash: 2Otmx5KJwqaJkPJXpX+wFbH5YXUCkcyChRa+vmc/pRo=)
                          22: kSlzpJ51NKEgyAxQ81nNruH7ius.roa (hash: BUTKjjqSu7s+tPPjYo63lTIyjVNrQMGCD1zfIWV5HaM=)
                          23: ltm_4ga5m6jNxcLkxfLRCu-BEZo.roa (hash: B7hDpa/Xi/ivuvNmaJ4x3ZPAW+3ZBUpRYOyvqRz8ADA=)
                          24: o20wkF_PTtN8-oHhOMkJBGrTcjM.roa (hash: 7rPV2UgWycZod7CIx9C9xR02OIfOoJHJHOD4Gyq90qo=)
                          25: peTYJjpd4WVh532UUPquDKBlWEU.roa (hash: 7IjYszFH9pPHW/WFh4j3eqRNbxQDHXo2Pqx8stBzIiM=)
                          26: pfvOhTcuT4xAmR1dHIRFJyoYCl4.roa (hash: nyu+J0wbMTdyUd7vS5oIiWlAkTqnd96ZBp6bn40LDmI=)
                          27: rhB1wb96Btr5VT-sIWgj6-8s_VI.roa (hash: QalWu/Q82bE0u8AwSxLmBrLfC3R7+2+aDA+lTO5kNdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:5c:07:b2:cd:0c:d7:cd:57:3a:35:79:8f:0d:6d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: May 18 11:00:15 2024 GMT
            Not After : May 19 11:00:15 2024 GMT
        Subject: CN=e30ccea9a2c79031b368854001469936695bd000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:f0:54:41:84:da:b1:cf:1a:10:41:13:a9:
                    de:21:72:94:44:72:05:71:ca:42:2c:ae:af:af:a1:
                    0d:ab:dc:03:40:af:c7:2d:83:f0:3f:65:cd:32:5c:
                    be:b7:0f:76:4a:62:54:39:01:48:65:a0:c2:d4:ef:
                    a3:f7:08:d5:f6:ea:ba:31:fc:24:b2:e4:ee:6d:64:
                    32:ea:a5:5f:15:ea:45:bd:e3:f4:83:98:5b:8b:73:
                    01:06:b9:76:72:e2:48:d8:e5:47:98:a7:59:71:8e:
                    91:d1:a5:94:58:5c:da:c3:04:d8:fd:f0:bf:68:95:
                    4b:af:f6:2e:a1:78:29:9c:f6:30:32:42:8e:48:6e:
                    b8:99:7d:83:e0:10:3a:1a:82:5d:bf:0a:28:c8:9f:
                    9c:0a:ea:5b:cd:88:40:93:fa:6d:6e:f9:7d:d8:db:
                    b6:9e:75:ce:58:87:ef:48:1e:57:3a:ee:88:eb:6a:
                    dd:2c:4c:19:5d:4f:0e:de:39:4b:cd:0e:c7:44:4e:
                    da:27:18:0b:3f:95:04:89:4e:34:99:75:99:a5:16:
                    52:2f:32:50:8b:d4:49:0a:19:cf:22:63:33:8d:b5:
                    7b:1b:ef:ce:72:9f:dd:52:ba:96:95:6c:c5:f5:9d:
                    b2:e3:db:ab:c7:56:58:5d:f9:de:01:87:8a:3a:f4:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0C:CE:A9:A2:C7:90:31:B3:68:85:40:01:46:99:36:69:5B:D0:00
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:5a:e5:7d:04:ab:cb:ef:f9:3f:49:b6:91:2e:3c:87:0f:
         55:68:85:fc:24:09:18:58:b9:8f:04:45:ca:00:0a:f4:0d:80:
         9f:70:80:f1:16:e7:aa:98:79:45:a1:e6:1f:5a:65:11:72:f6:
         44:f4:a9:10:57:89:2c:cd:7a:4a:7c:20:3f:87:73:37:c8:96:
         b6:1f:70:90:52:0e:39:5e:dc:3e:d3:90:95:23:80:a1:84:62:
         2e:35:21:8a:37:d4:86:74:f7:09:92:72:1d:da:62:01:cf:8d:
         a6:83:75:c4:c7:be:c8:34:52:d2:33:8c:00:ef:e2:24:17:81:
         7c:bb:1e:62:75:21:94:af:70:9a:7f:f0:00:57:3d:10:d4:34:
         a8:70:21:8c:53:93:4b:d3:11:aa:35:1d:86:67:73:a2:45:fc:
         c5:2a:14:46:e0:31:38:fb:fc:d2:87:57:a5:8c:ce:e6:04:cb:
         04:40:fe:3d:f0:c7:7f:ac:62:db:68:36:37:af:ed:87:68:14:
         45:cd:1f:b1:a4:33:87:d7:2b:04:4b:0d:07:80:d7:c8:de:ab:
         86:9d:7c:0a:3d:95:dc:f1:0b:1b:f9:da:7d:bb:81:56:64:e8:
         bd:1c:6e:1c:0d:18:33:c1:c2:7e:2b:d5:18:f2:e2:99:ce:03:
         e0:fe:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:53:13 2024 by rpki-client on console-ams.rpki-client.org