Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
File:                     a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json)
Hash identifier:          APS6bBiNXrJkWxftCfAToOi6J/cZM9Th2pvPvsxUt1Q=
Subject key identifier:   DE:5F:55:30:8C:62:86:6B:5C:C4:5A:BD:23:B8:9E:83:0C:A6:00:2D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       018F88FFAA5DDBFAA8C0748FFC1BF4CA1016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
Manifest number:          11B6
Signing time:             Sat 18 May 2024 00:00:06 +0000
Manifest this update:     Sat 18 May 2024 00:00:06 +0000
Manifest next update:     Sun 19 May 2024 00:00:06 +0000
Files and hashes:         1: 0WZ9_a6vUr91kl3GevJ-4ENahak.roa (hash: 3bX4GdW0zwO2dMFLNuDwzKWah2Ba/YetxHRH020nOlc=)
                          2: 0m4VHgIbkwFiO2Qr_JRRA5EyAIQ.roa (hash: Aw0Hrd04c5VUaM6PEAlbSyUiAspQdPilaT4Btn0QwTs=)
                          3: 1-tiAvThJ7fnaFLaukKs-lrGEH_o.roa (hash: aBCwzvYTN6Ao8JT5ywhLA/wehWZCXt4pIldSqgnWEr8=)
                          4: 1XDwBFd-rZieEFClWZhW4vVZ-Pg.roa (hash: g6aMIwrTrVMRtlb11IoTyJ9TMr237Zgym93BLvLgc+Q=)
                          5: 2LQjeA_NE0sFtu17mVS8zHA3RvI.roa (hash: Ks31pzuc9g6OiIlDF2RLM1v90wnMSPssJXAdGF9qnrw=)
                          6: 3OFZzchxlaK0ldhaQDn2Nn0vfYE.roa (hash: fqnHiXjyJ8YpHAq2ubzycu0QXaT0+rm8yyW9xDiZu6M=)
                          7: 4DECoYtO6z5fJ8AC27jIpvbzEL0.roa (hash: o9wKIO9GjD7tjpNcN3ACZHae7tZETS2et+jjqmqb6Gg=)
                          8: 5teWIUkBnJRKLq-Vf9EBbRaiKpE.roa (hash: JqiNu9Prf0KXIi/2A2YhcUE4LM9PbT8nFFPkwvlOsOs=)
                          9: 8FRqHOV5ow7uDve5zmTwhILq5e0.roa (hash: IRryKNsX+V7s3qCxExpoWMnUj3ncEiaWxlLABF4p5HM=)
                          10: CoARDlHorczrRgDHfjas1y5p41I.roa (hash: Fn+sneHElVyV0HwFDvKZY5RSiPkggC/XFLPGxgxbz8k=)
                          11: DAF-1sEXOxmUKlBPpLqneDl-P3w.roa (hash: /ck51UQYIV4qPpMhaCsW3MZiPFk8jsMck6Kbyra2zzY=)
                          12: Epg1vF_5BJLjAYfOFist2Y6crhc.roa (hash: ieBl1a7+qmeo5b+2RNrfuka7CUQuc4IHZMuqL1Uvrjo=)
                          13: GWNeXZZYOxHLIqTc6BFjK1T5BhA.roa (hash: IOrevJcd7farw3dVnpDqQDfQlHeRIXXeoCIuIlWQx08=)
                          14: Hdu2TTdsBFXLQyzFmsf6Sx6eXRc.roa (hash: Jjvj8fRAGRmWPMD/LhUR8JWyL4bCUKChDYF5+CtVkWI=)
                          15: IP64BImz8HSna34QSSkftzRRIEU.roa (hash: 4MTpzYaaVCzFAliY6JijpwIvhZmFrViz1S3IaU0zhSE=)
                          16: JCOCR54I-E-R5Qm7B0J_mqQWaPU.roa (hash: 3dNLonbDzUPX4D9fezzq2RwDElzl3oVWoK7rU8LI2Vw=)
                          17: Js2TuRKOoXKVHgfcSl1msjF-OB8.roa (hash: +y3CUnJgWnQVTlDhjILf7xiPvkkRp9VtzZXt1CT6wN0=)
                          18: Mab2oy1dEfL9ozMie5M5fOz8Jbc.roa (hash: 8OwQiiYaXZIvMoULmEtb/yeFUWQQCSuGu6mTdP4L1FQ=)
                          19: MzZJToVxau_REYfsZFxgvdw13F4.roa (hash: CZY8J+PUey4OH0dmKh9Ue5dSN2i8QOqOYbh1o8MmSoE=)
                          20: Q0R-eTWECQMm2DDpmGB12qymTsA.roa (hash: qtSBOZcL+jl8pmBJNi6WgferTxfE4a/QYLHAWBuAggM=)
                          21: SCjXxXR1y_9afUD1ch9khCZT8tU.roa (hash: KbLYWcAqXmRKfqoRhggw2Bu55oo1G4pCiYz0jwXtFpM=)
                          22: SUvjs9CV_lkK801xVz0qJBIcYWs.roa (hash: s4HhA2CbeUYyQmUet9sObqpmhnnJTB67V01lBfhhjO0=)
                          23: VgRM7YDk1PRdStctkdKg0-bW_4c.roa (hash: BEpYx/Zo++iqeHKfKrC7isVb+7rsQ6gUxA1Mz9WMA4A=)
                          24: Vri7YPAX13WguT10dBO0rCBpFc4.roa (hash: AQWTZkt4oJkN/+vVfLdMJ/n3Z32WOMD3ABYczuldrcg=)
                          25: VzNmHPclq5EwYgBYnU6Zct0ODeU.roa (hash: ezIEsM8ZbKBs0EbBhhQONMYNGXWDHdsS/5CbwTYbhyU=)
                          26: YIHfsQxMhnN2IXymXJ-CzpYGV7g.roa (hash: ICGkNeyIdYEoAUXy6rayCFUK84DOWhpkxCG7NO+OVF4=)
                          27: YNJwQXsP7YeJ4uqcfdoTnVGVg_o.roa (hash: digcUoXBDjQc5Jz7We3y9rOFSEGPW2CbrNTwQiweZBY=)
                          28: YQzLDFpNCoaD6lTT8ZK4-hYyjxE.roa (hash: CpWLFlrRnDfN2luHVamzq3c8UFdQl/MisQwYoex/KQ4=)
                          29: ZTEJHPxlPlU73x4GRkgWTxB-bhM.roa (hash: GzBa098zBb55V3nrqCWlZucK6NmfwCq7+9NCgHkxLyo=)
                          30: _KEpnSPEdc_Cdlbl5NabIXmCzzc.roa (hash: 4OMM7vXzOme43UD50i99t97g39LJNJ3MSxLX4Gr+jAA=)
                          31: _ynFYGfJXvqDgIeGadCmznsIlRA.roa (hash: fM7TgcCxAx7qDNnTxyWzaDPr1mahExzaO4XS+p5q+0s=)
                          32: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: jjbiGZF4dHxYpnXbwTHyXwABVMNPvupQSXJJUhuNJdg=)
                          33: eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa (hash: MNJcZBOgz8ZnJUQAAiPI5CUpfhTs+UTIo3TKDZ0vvkU=)
                          34: evIm4RePJd9mM0UyhCd5ZkKOpfw.roa (hash: C3RQcbAOYF8WObsuxXluLg6CgqKHqVz6r4+qNZFItEE=)
                          35: iJ-NhnO5tJq_CMxSADI-QNv3xC0.roa (hash: acpE0sw0jSY6iCJ2XE4NW51gg9f4+n2Ws3lUOV0xPsQ=)
                          36: iwREtFCK0IaEHCS1cSgf1PofL3A.roa (hash: fPV8J3ZtEXTWuyODOsK9kGChSOlWtutkWvTDywQLHU0=)
                          37: jHOciv7MtMRlAx97GggR9ADHlZc.roa (hash: q3X4EuykKh/7sGjd5L9iIaxZcoeEyU/bPZaBs4A/mwY=)
                          38: jL7iLEnImZYzq2wHfp_2EgbZnhc.roa (hash: WRZR/V84klZxiZbMEVfcvg9EWn5qDefZPnGDSyrWW78=)
                          39: kJe0Ulc9PK5l-TFkHL1AfP3_fZk.roa (hash: B6pyvZSl9U/euseWnTGIZaf2A+3UyYJlBdjn5fWAVWQ=)
                          40: mTl1Q9NJrlNien0Lq-lylkQdYfM.roa (hash: fOFyFjl/ce24/wQQECt2mU3fTo086FJ+C778+H0N/o8=)
                          41: ns8j_qUe_Z5ylKkN7s4g2KNj-2w.roa (hash: prLhBYwxIBYKLldbu/bhTzLFiUOgjNdcZ4uk0VobjAA=)
                          42: oXTdroaBYTLo1RbL9xBRSSnLuUI.roa (hash: ybEdPtWokHTU6SOSfW1JE9dVldl5wppNRbVll1qtwZI=)
                          43: o_eR2rFgdZdYbG6KMpWCaYYuuCY.roa (hash: OUFnlGHvV7cebj1QeUqwLSw7MEyvalVghSViHHX3NMo=)
                          44: w0wZBXPf9VSkb2N8d65oMddEgKA.roa (hash: nXYYKU3nRQB7MRtGGj84USq+QtbZlbL1HhvGZJEqy58=)
                          45: xzQvKPUP4G5a3jyFfkLwe2JT6_o.roa (hash: 0US/hMCx9hgulhmZ+h39BrZDoIMUtvR6iC3cp4wLmuI=)
                          46: zCs_EM_c30USVyYkAvT8xfT2dPE.roa (hash: XMocI/wRMXrsdSLruue+nCp+tKr96xjDzAEjkbKJzGw=)
                          47: zHcQhVbGffYSGy-Odn-d5dlCs64.roa (hash: vtTsB7eCfGBw/lZ7chKmNr7lhs1qCmco21hLRcw+QLk=)
                          48: zuy_gXkZcS7QMxhHCD_0G78R3-U.roa (hash: QVqmJ1pRi/cyyhduPtehvtza7/8mc4Uyut3iUG5x7Qc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:aa:5d:db:fa:a8:c0:74:8f:fc:1b:f4:ca:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: May 18 00:00:06 2024 GMT
            Not After : May 19 00:00:06 2024 GMT
        Subject: CN=de5f55308c62866b5cc45abd23b89e830ca6002d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:38:90:ad:47:34:48:4e:05:35:43:53:52:9f:
                    0e:10:df:dd:5b:5a:0b:2f:18:eb:dc:68:33:7c:bc:
                    0c:c8:39:01:e4:49:c6:3e:05:fa:d5:a2:16:3e:0a:
                    cb:de:cc:72:f4:59:53:82:18:33:47:bc:d3:71:76:
                    3d:18:ff:75:f3:4d:c6:5b:28:e5:cd:05:ce:47:f8:
                    c2:f5:20:94:fb:cf:2a:ca:88:f3:ed:d9:88:7b:58:
                    4f:ed:a4:76:12:ae:88:38:8f:5a:6c:13:95:0d:dc:
                    7b:62:dd:47:a1:d0:00:1a:52:97:01:6a:d2:87:1a:
                    5b:f3:b3:5c:9d:b3:c2:af:94:3a:7b:89:a2:90:ef:
                    86:96:53:ec:40:aa:0d:5b:7f:32:fa:54:eb:6e:0f:
                    00:28:f0:a5:9c:03:9f:1e:2e:28:7d:83:fa:50:58:
                    d1:10:89:e2:f4:60:54:86:a7:e0:47:b0:13:aa:a0:
                    aa:8f:f5:ab:24:bb:67:53:87:a5:3b:75:ec:8f:cb:
                    c0:92:66:49:2a:16:ab:da:b3:5c:84:cb:90:a5:aa:
                    c3:52:07:3e:41:13:a6:ab:37:c0:bf:45:ce:14:96:
                    83:d8:e4:33:8d:94:29:a6:b8:54:bd:9f:a2:cc:89:
                    87:2e:1f:75:00:53:a2:a1:2d:15:c1:ea:0f:05:a1:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5F:55:30:8C:62:86:6B:5C:C4:5A:BD:23:B8:9E:83:0C:A6:00:2D
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:04:bd:16:21:4a:91:75:12:09:98:14:06:e8:5f:52:2b:
         bc:6a:8c:19:ad:eb:9b:60:1b:a2:82:c2:94:6c:fc:5b:b5:7d:
         ef:27:df:20:02:bf:2c:cb:27:3f:52:47:3e:f7:ab:9f:db:65:
         c3:e9:4b:e8:68:9c:39:8f:91:53:3d:7e:d4:3b:33:ce:7e:d8:
         17:dc:0e:45:55:09:e7:e9:be:c4:7d:f1:ae:ad:78:d8:0b:27:
         08:3f:82:32:e1:72:f2:3e:14:01:35:84:96:95:43:07:b4:63:
         5a:69:75:40:a7:bf:0c:00:bb:62:02:a2:0d:73:1d:86:45:bb:
         11:3e:7c:81:8d:05:b9:dc:94:93:14:13:c6:d9:93:1c:dc:aa:
         ff:6a:83:6b:9c:40:ad:28:3b:8d:00:01:94:8e:16:6d:1c:7b:
         a4:65:69:90:9e:79:e2:ee:d3:1b:4a:f8:c7:20:cf:ad:56:5c:
         0e:95:9d:b7:12:9b:0f:2b:1a:5a:a5:0b:ee:c9:75:fa:9b:d1:
         c3:88:24:51:08:5d:33:a9:4e:8f:f9:30:92:7a:b4:af:90:88:
         6d:1b:60:89:b1:ad:9a:70:74:fc:af:ac:3d:07:34:43:61:74:
         af:a7:33:4d:90:c9:ea:55:2d:c4:91:c4:f7:7b:4e:75:b1:3d:
         58:c6:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----