Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
File:                     YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft (raw, json)
Hash identifier:          +JOLhXT1rMd4Ty+gOKL83gszVi47FzWuxG3OW3tjrpg=
Subject key identifier:   3D:8F:DC:9C:8B:61:61:61:1D:EE:3D:96:32:24:76:06:60:7C:6D:BB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018F9FBFAF486911F944A471E0CE94B692E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
Manifest number:          04FB
Signing time:             Wed 22 May 2024 10:01:30 +0000
Manifest this update:     Wed 22 May 2024 10:01:30 +0000
Manifest next update:     Thu 23 May 2024 10:01:30 +0000
Files and hashes:         1: 07cCelZPS4Z5nagTbP5OdRxaHSA.roa (hash: o1k+2sbhvQyh+q2BdEBepQV+4egY6byZjN1iFl4yC2I=)
                          2: 0bnuTkCfYfzUfw3eB1VZySpW2z8.roa (hash: 57UexDJJ4dyqLTvR+hM8PAsHjeV+TSvkbh8n7TWviQs=)
                          3: 3OL__vUlRT3HIh3Z3sOaB7a8UyA.roa (hash: dPeDQsWdENzfbK9CX4/peLPi1FFliqTS5thzEiWy5Yg=)
                          4: 5XaRqReFVYOaTvnV2R9_MAfI1uY.roa (hash: HRROlwpEY6ttcF3ptBKvpVcl+0SS+UPpWg0GG8CVrgQ=)
                          5: 6cOAEYV0XFea6ckL0EjlNf2msZs.roa (hash: fWzJPwRWQZLPJ3wzBvcB+ZayqWkGy1bBS7qgJYm54C4=)
                          6: 8hqG6MuUTBaGeYn8b1MLG_aUsxo.roa (hash: mkLqxFlFQ5067gD+iL13nMSH8REqWJV32KZ51miZDoQ=)
                          7: BuMBlbMww4MpLqOgFo32UW_dMoQ.roa (hash: ri3a9VgqzbRz3Bp6Fq3iZUao+yIOA/yWMlTNCrthWNo=)
                          8: C2y7llRT1ACkQ97WgvezW7Xjfkg.roa (hash: /rleZK0Sk4bWQFflBbexGPZc1ZLiI1VzR+KIxIO1FnI=)
                          9: Cjb0RJ3cAF0H9We3eUkun_fKKoo.roa (hash: XoZVAzT6WlMDNVCXEqLHEkkgDzgbV7S9TwRJOlkKalM=)
                          10: Cjj5wOv_2hSHgkEx89K2aHe4IpE.roa (hash: qzt3gxeAuxWZKBJkFZhRXS2quuBVG0R4Wfod//zwA50=)
                          11: EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa (hash: K2IQUKVGfwqms1WTMz6O+nrKH0VpEEn3Hldc+B0M+C8=)
                          12: EaKWPOsEC3AdultDM0xgnKuKMQw.roa (hash: ToTX7iP8fSgcvywfV//7pITdESq6M1Icc2aC2KWJxzg=)
                          13: FLrfluS3G6eBn4Rz8dO3Tg1uUvc.roa (hash: BnW4jyu0bgDvHie08CZtTDJ78L8japxPf505h8mt7Ho=)
                          14: HCmN5WGP7TnTD1le8DXUJAlRqUI.roa (hash: K+ryewXGkp8QEtaQHFFw24w2Qm8haDCUr+WSJgw/c6g=)
                          15: HDAlGA4h66F4ys1PgZtcuWJlRbU.roa (hash: rbzHwOAoqcMw1lI8y0r4q+/jJrFcAP8JfjFSaJTJuHU=)
                          16: IWkosv1oceI1aAT6MuaBeykPnDE.roa (hash: Zt1zR/MujgpAImrsB9MGSD/MhSE58xHF3n6xOhC/j7E=)
                          17: Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa (hash: j8itHg6SOPpRfBnF5uWhKvLwCt6l45pKoUjkYm3rgV4=)
                          18: My21w7hOKt8S_WD_k_QYtqP3xJs.roa (hash: SNGrCJdmGfgFecOlXyAeNc49ywc7GdzsG1QojBwlWhY=)
                          19: NNe8EW_0A0IBqioKY5jsXGK1ekk.roa (hash: 4vJkFes7j9DigFCHqFR6gtgl5sdIBUao+92HYfOVedw=)
                          20: NeV9mQpwOfgzmYW_LOGXR7znkXI.roa (hash: zZen78W7d3yphLkrFotj2UM5ISvEgPm15wDwIBPT8bk=)
                          21: TPmfhxh0_nTXnn3Ex03aeMGiB4c.roa (hash: HFnYo4N0HI3o2+ViKgPlzaJxO2Vou6oIlA6YqMzd3m4=)
                          22: WWl7oY5azcSuucmc1VehXX2ToU8.roa (hash: VVR6m6iS9uDyy/9YnkfInsEFygSxWVSTX1oLbzAuRNM=)
                          23: YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl (hash: KqhbOjaKi/6kFGUMF0/tX5vYK+PLtIsBBotxcyxuyuQ=)
                          24: _VJlQLIVVH06RPc34Qz4RWySapA.roa (hash: 9u3yNxjP0+XUjclcHf7WD762Il3Ad+Z+wWid85Yi1QM=)
                          25: aUqNm9QYschsBoYPTaBMe35SMx4.roa (hash: NfpGeW4R/JAUnK29KVDmrxIl1mXcGXPiqkU3+xjmppA=)
                          26: agHw5j73hh3S8gaVYMcMrZCuJN0.roa (hash: ai5olFnMzKUwv5YcWrLDzcxfH3cynFgeTCnIGgyJG+I=)
                          27: bRsgTPk08-KlnWUYbujqk_6W2v0.roa (hash: XZNjlfCztmwTStwyhp3/Lx6XOn87s6eJ6mo/+sF/Jhc=)
                          28: bn7XVVkqMCINrv4hqBRG6UdHXgE.roa (hash: y6WrtZNlDFHtlW+g4xWbdvlkfushEFx+1G9FpGozvqI=)
                          29: exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa (hash: 8m6wx6PZR3xNOJqmnEe9yQPRO8DWpk+++OElGAhUqbA=)
                          30: fOpHoj6gE6QDSzI_xpI2eoSQlig.roa (hash: pLBi2u+3F49A1hvLwb6x7gKKB5g8fv3gRqV1aRiYSu8=)
                          31: hXEGsl5qQzAA1qUdQtNGBqiww10.roa (hash: VhmT0oyWxTqRPxA05l/SiDGCzCOgHGrb6X/m2cHTsoM=)
                          32: hyTnbVyao6JjNaXQt7kqUO_gkRc.roa (hash: Fa2ezNx58bvfQoFVm4NVId7tu8UUWIuTGvjnkzDFkpU=)
                          33: ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa (hash: Ia5SJV6JVHsM37MG/ESXwkgifHWKG/X2C9X4sYYj5Vw=)
                          34: kr0TjOxgcm_KhMjeicf8fW76Q0Y.roa (hash: xOf8LT+D5nUC7HtSexyu/Xpg/836IXc/PjHz1TvdOjk=)
                          35: kvvKLDOBYQmJCrL-MVNswp6AvVc.roa (hash: 7LXTJ3RenJhpLqfikF7CGEeX4DAs/ioFpcDctyXrdgc=)
                          36: oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa (hash: GMqwL/UzexMNXUPcQjSe8tF8xDmZwxc/YUEVW0869wA=)
                          37: p9Bx6-80Z5u_nVEX6cPclfGKy44.roa (hash: FO0CDO5/eLT4T8N64qjY/znyGnOT32AUzGq1jdCfiNs=)
                          38: rDUJJwQTp10msnyxTM7qFFaP5Dg.roa (hash: OGAdNtvpSlQiN9dwAIoLVR9XCCOViXto/goGKMmVA/Y=)
                          39: sUXNq6VPxMrfPQkizTRBj_C8jvI.roa (hash: 7HjA1Jb0bTUTCXbqUrP4+H3nyYjc6kUsvDllUZHLdEY=)
                          40: tZn7lyIq6tEiWekXEXz-SkGHzo8.roa (hash: NiWdg4ql85ZeEHdfy/wWhInM+oz1hYXzPT2nTZIi4FY=)
                          41: u8zBuHARv8CyyionOPBGX5xAZKM.roa (hash: fWgGTbqSPk6KAbHlPb7dacN4y/WZk7mHEIrZYs4LScY=)
                          42: vHwM7wdSGCzqZGT3PQVMmgcgq-0.roa (hash: lxXc3Ic7U9QN/qAasUTdeXNkM4spGtFzK1kkhA1DEkw=)
                          43: xaY25wbKuPGU48V_UzGEyy4WR8U.roa (hash: 7J12ICPB5cUoyPLI8sikjvf7zu2e7sHeRohBWKkf3v0=)
                          44: zPJ4iT8IJFBLC4KpCDe12b_SOyA.roa (hash: 27/bKUkD3B4SO5N537UzYaqqGUZorzyFlGbctpVT6Io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9f:bf:af:48:69:11:f9:44:a4:71:e0:ce:94:b6:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: May 22 10:01:30 2024 GMT
            Not After : May 23 10:01:30 2024 GMT
        Subject: CN=3d8fdc9c8b6161611dee3d9632247606607c6dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:b8:2a:2d:e1:89:1e:4e:20:45:9c:da:14:
                    98:a1:5b:ac:22:3d:49:98:db:03:5b:f1:4b:c6:37:
                    45:b7:7b:18:a6:ac:9e:2f:de:b7:c3:ff:55:42:1d:
                    9c:2c:75:a4:20:84:92:f4:bf:c6:9d:98:9a:08:c5:
                    07:71:8e:95:40:a7:17:40:0c:24:8b:29:ee:7d:75:
                    d4:4f:ad:0b:c5:36:f9:ea:ff:4f:85:fc:00:78:2e:
                    9d:8f:dd:09:ac:14:81:86:de:89:fc:45:c2:74:36:
                    d9:29:5b:66:22:42:92:94:22:76:28:85:79:f9:cf:
                    0a:bd:27:04:36:7e:c6:5c:8e:5e:7f:c8:cc:b5:8e:
                    7f:83:6d:de:96:5f:1e:d0:28:12:31:f6:e7:69:7c:
                    17:27:a1:03:6f:aa:53:78:f2:ee:cc:dd:be:d7:c8:
                    82:5d:82:d1:d2:e2:3b:8c:00:4d:38:57:77:ef:5a:
                    42:30:1b:e6:02:4a:4b:be:75:8a:fa:00:01:2f:cc:
                    83:b2:75:87:cd:28:e1:88:37:b7:18:bb:fc:b4:43:
                    2e:25:aa:a4:35:b3:d6:fc:e7:dc:54:8a:a0:e5:5b:
                    e9:d3:c1:18:84:1c:09:83:3d:66:17:cb:f8:a4:80:
                    91:c9:cb:a0:4f:b4:b4:3f:d6:a3:a1:b0:92:59:af:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8F:DC:9C:8B:61:61:61:1D:EE:3D:96:32:24:76:06:60:7C:6D:BB
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:09:c4:8c:71:e7:32:39:91:aa:8d:48:7f:3b:ba:c0:cb:
         5d:08:21:8f:2a:4d:f4:b6:cd:c2:3c:9c:7a:e9:fd:0b:1a:9c:
         b5:bb:79:7f:68:62:1d:30:1e:d6:9c:d3:5e:ff:31:5a:a2:35:
         eb:81:8e:a6:8a:78:ff:88:ec:40:1a:ca:e1:06:f9:6d:c6:41:
         b3:ec:18:fa:ac:6a:7d:73:1e:63:62:cc:50:7e:c8:c0:f9:88:
         78:57:16:04:10:f7:3c:60:f9:06:77:9b:81:58:dc:63:25:ae:
         bf:e1:63:4b:5d:ca:3a:a4:b5:4a:b9:4b:71:a4:c1:c8:e3:45:
         21:d3:1c:e3:7e:8b:b5:c9:11:86:e0:ec:1c:18:ac:d7:df:e4:
         0d:4e:1b:f6:98:41:93:89:ee:95:d1:04:ab:a4:eb:ef:f5:8c:
         52:5a:0d:95:05:53:b2:f0:15:55:fc:4e:a9:42:74:a7:24:8e:
         c9:59:90:f5:3b:9e:d2:fc:34:a4:8c:7c:5f:93:96:8d:5c:71:
         fe:63:4d:aa:b3:c1:f0:69:a3:8e:ee:6c:b3:d3:87:09:d2:26:
         b7:b2:b8:f2:7a:5d:88:ca:fa:56:b4:68:60:04:d0:3d:96:0e:
         62:d6:f3:66:94:b6:c2:de:c2:41:46:50:5e:44:08:b4:c8:73:
         49:a9:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 15:12:38 2024 by rpki-client on console-fra.rpki-client.org