Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          D/macX2rZdMBdyDsQ35q8t1O7dStkpxRY6at6ySnPrY=
Subject key identifier:   25:DC:41:69:2D:21:12:1D:8D:9D:F1:65:53:74:D9:31:46:4D:32:B6
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       01905359096BC08FF18C99EE45B1E9B0142B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          0F2F
Signing time:             Wed 26 Jun 2024 07:01:02 +0000
Manifest this update:     Wed 26 Jun 2024 07:01:02 +0000
Manifest next update:     Thu 27 Jun 2024 07:01:02 +0000
Files and hashes:         1: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: a/Z8YybHYZDVQ1maJOZETTPSWkqyexkaf1sCqiIBpqc=)
                          2: 0Ydf7l1EFULnv-kTi-JTOr04Z20.roa (hash: jKLMMb2eDBGdr5prgLuLZL77qwVf/dhapRzpNry7cCM=)
                          3: 1yDkdsFXnyBESs9RUnffm3Hz4oQ.roa (hash: RFjWz8c7wxcbtML7cWQlD934bKSQgysK5Axf5DfpquI=)
                          4: 3SnHWq26Imq2tsN69-GufrCokQ8.roa (hash: 7jcmBDHfuEOe6AvYd3IQcuYbf9c6avDpbyvJuR3Ggq8=)
                          5: 5YMUczyXyrW6lqC9m9exv91fasg.roa (hash: eptoyL+yOIt+BI3oh41gW9yrhMYJoZkL++REnKWAzMk=)
                          6: 7QcBz_HzLz4TfpWSo4cmC9-iVn0.roa (hash: ZjRoF3aegSb5nS9RyC61FKSQ22QAk5gGTCypgiR6NHw=)
                          7: 9BxBndiqYr4MwLlO9E2Jx-HT_8Y.roa (hash: j7yNTX7kOc7BAsafYeYpqUrLhoOtd+Ed2CLp0et1nkY=)
                          8: A6Ec2aiE2Ns5EJIeIVgW1BfOS7A.roa (hash: 6vk7SpK+Q/yki/5RLgKqFRH4D1AOTDrPbd5Xd2Uyaww=)
                          9: CTc-qJWYiJOl4VXmRhq442UGJa8.roa (hash: SMWCsJDmzoCCAhwHsS+ZoGIGiAWAMHEXXKaV1Gx8F2E=)
                          10: DaEL3BmVz1IQEbRM5QGWhg9FKi4.roa (hash: EDzxUKyy6utShm/dI2uFQUviI1pyPqx/OsUk4bVHkgs=)
                          11: DtiTmHbhQgipHKuoJf1ESPjkOUE.roa (hash: 0fkl9Wu74tPuyXnbavvD3HyPhXe/W0TFpvUhA9mMFDE=)
                          12: Giy_cY2hXWoR8XU-3QjXqf7bXyo.roa (hash: XTzavBunpdxIwWmbQaMAMkp9XmRvbelG15+fogTlbYM=)
                          13: I6gmt4JaSTSTMDonpqzJ8Zj6voo.roa (hash: cNIIGKH0QD9uzeHGPXlBOs6j1FvMmA44tUBu5HUk1Oo=)
                          14: O7HT1pkr_1BIMBTudTYt-ILbXVM.roa (hash: PB3VUEwhbe2kOhB4puwrkotqrEmLCfflFCzx0ibb3Bk=)
                          15: Vhe2foHmi5lA3C9kqHnwijb2hq0.roa (hash: rwZarU6bGo8n4YwwVCB0LPRlDK5ygFHRAez0Gk6cf/c=)
                          16: WgVrbRpapLioT0wDoisbm2wFYvk.roa (hash: RkrfSZ5/RQ3wx+2mxdMw2b2VTLuWJJUYSGvnemK8XxE=)
                          17: YNiV1oK3PTHq5uz4MX0iKmwPf8M.roa (hash: Dj6Wcw6z4JioJov6Qu5zjlTpxt+21v78IWYeEYyNFmk=)
                          18: a48VG9JSYUwXaaoQGk9Iy4gxInQ.roa (hash: W6Ym7Z5QH9o3rwWx6+AAcFku5YojQYAN7+8v/vA/jFw=)
                          19: mD_MywGlWauNS-HPPG-4UzzCDBA.roa (hash: GHS9sHNuJ/MM5nxE3RXjJCmx/miDeh6F0kxwJ0mjrdg=)
                          20: oU5S1CsxLy4Gwjf3Y6S07_81LG8.roa (hash: 8nT+dqkXhZ84E0yy5vAwhQf83PbIrQyXjQyzJvcgd1k=)
                          21: oeR005IOyaE0H5ydOaBuU5HRxEk.roa (hash: WPeWR144fe5VvTmpBQQpsBofr1MYiSlesTEJQ/eNuWg=)
                          22: qz3f9OU61A85pA3Pjlb1bjW4pr0.roa (hash: BFa6scRVcAQiOrm+0Ix0byVe9oF9miUzyUvxFRsDo5c=)
                          23: ukRm36DnHVM86FTuFmPd2_WWRn8.roa (hash: 9ndAOqvo3YMuVRPhNeroNTlibKrUnzMOyhDIPShKLXQ=)
                          24: vN99imIdm5FHg3kHVy-nntZ3h4s.roa (hash: l7RoR5sZHUN/Lv3av01IEh5QhZYb5FNGwtFdRbVAElk=)
                          25: zAYA9SOz3dOuxniZ1Y8aRy-WRy8.roa (hash: pBg1MmXR5VdvDfsyCqAG/3J0pVQ4K3fqw7YDoLvNbkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:59:09:6b:c0:8f:f1:8c:99:ee:45:b1:e9:b0:14:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Jun 26 07:01:02 2024 GMT
            Not After : Jun 27 07:01:02 2024 GMT
        Subject: CN=25dc41692d21121d8d9df1655374d931464d32b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:5f:bb:bb:fb:6b:aa:dd:c2:85:5e:a4:ac:
                    8d:bf:2f:5a:82:5a:5f:c3:be:59:1f:54:52:45:67:
                    97:0c:27:83:62:8c:3e:db:38:8e:d8:94:8e:05:b8:
                    1b:62:ab:43:94:84:23:e1:70:47:5c:b4:86:80:94:
                    1b:ae:b2:c4:1d:b1:48:e7:62:90:37:24:0c:f1:52:
                    18:9c:06:87:5c:c0:90:b0:95:55:7f:46:77:fe:c4:
                    96:c4:9f:b7:d6:22:38:29:8e:ad:90:82:f4:7c:ee:
                    e9:76:0c:8e:3a:3a:e0:11:84:42:22:5e:e9:6e:22:
                    7f:32:73:24:8f:7d:58:bc:cb:cd:8d:b8:ed:8b:ff:
                    5f:9f:41:84:e1:85:73:90:b2:6b:bb:c5:53:32:13:
                    66:88:9b:95:83:ae:97:e6:da:af:be:db:7b:03:81:
                    fd:ad:fc:10:01:7c:47:d8:f7:b8:35:c5:ce:62:11:
                    7c:78:3f:1e:04:3a:59:60:5f:87:98:51:6c:8d:d1:
                    5e:ee:76:4a:df:c8:c3:84:27:6d:ab:ed:a5:bf:f9:
                    15:89:52:9b:d9:f1:39:29:9b:e4:84:95:76:07:80:
                    c9:06:ca:70:9d:d6:c2:60:e5:dd:4f:8a:04:52:c6:
                    19:15:9b:48:60:8b:dd:df:32:6e:7c:ae:e3:c2:9d:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:41:69:2D:21:12:1D:8D:9D:F1:65:53:74:D9:31:46:4D:32:B6
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:3e:dc:61:98:e4:f1:e1:ec:77:c1:79:1c:ef:a6:8b:78:
         21:c2:b5:37:14:f4:06:d0:12:85:4c:7f:8e:5a:04:01:1a:20:
         ff:ec:1b:2c:c5:1a:72:c9:1f:35:3e:c8:e3:2b:ba:a6:4e:05:
         76:ff:00:19:06:f4:af:c7:72:9a:6f:c4:36:fb:5b:79:cc:4f:
         45:d2:53:16:4f:1e:84:92:37:41:e9:56:66:a2:81:01:64:a1:
         f5:fd:0d:79:a0:8d:45:38:90:98:f5:52:ae:11:87:6d:47:e2:
         c1:da:fa:f6:6b:f6:65:d1:b1:2a:34:5d:3f:a1:5c:c6:f4:ed:
         74:84:ee:ae:51:ac:57:f7:32:b0:66:1c:ee:9a:73:c6:25:79:
         54:3e:c9:96:d6:77:ad:62:fb:20:3c:11:0d:d4:60:63:9e:e4:
         a9:28:fa:0e:bf:22:2f:35:64:e1:85:45:fe:95:a7:48:17:76:
         86:fa:72:c5:5d:81:05:1d:0f:69:4f:16:76:97:7c:a0:d3:92:
         a4:20:b6:d6:83:19:1d:54:18:c9:87:5a:46:f8:bb:7c:60:76:
         f7:6c:59:89:12:4f:38:f3:e0:ef:b2:9a:9a:c1:4f:e9:09:0a:
         c6:0d:71:ef:8a:6b:6c:84:dd:1e:57:ce:e6:95:2a:3f:db:81:
         8a:a5:a5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBTWQlrwI/xjJnuRbHpsBQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjQwNjI2MDcwMTAyWhcNMjQwNjI3MDcwMTAyWjAzMTEwLwYDVQQD
EygyNWRjNDE2OTJkMjExMjFkOGQ5ZGYxNjU1Mzc0ZDkzMTQ2NGQzMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O5fu7v7a6rdwoVepKyNvy9aglpf
w75ZH1RSRWeXDCeDYow+2ziO2JSOBbgbYqtDlIQj4XBHXLSGgJQbrrLEHbFI52KQ
NyQM8VIYnAaHXMCQsJVVf0Z3/sSWxJ+31iI4KY6tkIL0fO7pdgyOOjrgEYRCIl7p
biJ/MnMkj31YvMvNjbjti/9fn0GE4YVzkLJru8VTMhNmiJuVg66X5tqvvtt7A4H9
rfwQAXxH2Pe4NcXOYhF8eD8eBDpZYF+HmFFsjdFe7nZK38jDhCdtq+2lv/kViVKb
2fE5KZvkhJV2B4DJBspwndbCYOXdT4oEUsYZFZtIYIvd3zJufK7jwp2m1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXcQWktIRIdjZ3xZVN02TFGTTK2MB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7M+3GGY
5PHh7HfBeRzvpot4IcK1NxT0BtAShUx/jloEARog/+wbLMUacskfNT7I4yu6pk4F
dv8AGQb0r8dymm/ENvtbecxPRdJTFk8ehJI3QelWZqKBAWSh9f0NeaCNRTiQmPVS
rhGHbUfiwdr69mv2ZdGxKjRdP6FcxvTtdITurlGsV/cysGYc7ppzxiV5VD7JltZ3
rWL7IDwRDdRgY57kqSj6Dr8iLzVk4YVF/pWnSBd2hvpyxV2BBR0PaU8Wdpd8oNOS
pCC21oMZHVQYyYdaRvi7fGB292xZiRJPOPPg77KamsFP6QkKxg1x74prbITdHlfO
5pUqP9uBiqWljg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 16:44:00 2024 by rpki-client on console-ams.rpki-client.org