Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
File:                     JTo7X1GAgWjCEsCUorqv844WRko.mft (raw, json)
Hash identifier:          Ss7AkNufxvxYQASjxH8ok2KHX2SiQLbdS1bA1qDAbbM=
Subject key identifier:   12:32:94:E0:8D:E6:D2:36:70:C8:E8:4C:3E:48:43:83:B2:2E:5C:2B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       01922869EF4EED5A76AB4C0FD5A4ABB45092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
Manifest number:          1327
Signing time:             Wed 25 Sep 2024 09:01:24 +0000
Manifest this update:     Wed 25 Sep 2024 09:01:24 +0000
Manifest next update:     Thu 26 Sep 2024 09:01:24 +0000
Files and hashes:         1: 4LvtncqEFesDlDPW3orxvk46CKw.roa (hash: +Msj2SUJelttK6OS1vAXcu3OrZo5W/VY0j9O8AddocI=)
                          2: 8gg_XmlnFkxsZsB3UfOaxH6A3_s.roa (hash: IbSHqeJwvCloJXsFGwAtMAgUPE0mOV89Vil6qy/Mf8g=)
                          3: BLbMZNjiaYYsKoIaajU3J_Z8yrk.roa (hash: 3aGK2SwHDTpTshL/QubQq3R4BlivDich1wxD0WglIkM=)
                          4: Bg8lhllKg9CX6Ekjn5O7CDFMtfU.roa (hash: vXIabELWjcYsoWN0+CEnQF73zPx9rViZciXpZhTap2w=)
                          5: CpnGDJl-YYP97Pv2j1zTeSfujYc.roa (hash: V+0zAQ+BHuSP2gK2Rf1j3skwsIh91/Z9AcvBPE2bHc8=)
                          6: EeWK_sCCzObPcbaQJpperCbNBvc.roa (hash: 1rrJuLL9jsuBECSPquPoYh4f/fdZ3Sh0QIiImIzHUas=)
                          7: HCgYJXWRc4Aa6hFVo3Qey0KXUFw.roa (hash: c4abm2y9hebS1KUXcCZaw7JAnsU0bvMqWrBIvuyhsKg=)
                          8: IEVq0iLp4WwGZONvaVaxmcgGemU.roa (hash: 5sTcyhgI2a8bkyamkLvlrDS0gPmYscRiJfkSDHoYPvA=)
                          9: JTo7X1GAgWjCEsCUorqv844WRko.crl (hash: W47CRS217/DhfEpJDhe4CPFxXjL+wT7qiMxMAKxVujM=)
                          10: JgCpXSNzqNIqm5ay268OqDjXeEY.roa (hash: 2GZB2pvymABPvBlFxnVaQSaAqpNAqa5uK4O+qUagzAI=)
                          11: KNel6IG5g9XoUbaY7ckQhmwlmwY.roa (hash: 41FqmxZnBbTgF2jeR3kCwVDuK9MbMxesbpXHc1O+FiI=)
                          12: Lm4XZvAHqpt2zPWbCcM4CXPVy80.roa (hash: I1AWuJETse1NBf6yf2LA3lPvIR+UPgjCg7nbn0OntPs=)
                          13: Lwhx7gW6UbAExuhNm6w1MqyuMmA.roa (hash: B6WqEGpObdKlS0Lmd+gKpy/vOBifSLZXcydbQ2nPrb4=)
                          14: NEKDJIKEhILmzvjaKQwKw1vYGH0.roa (hash: BlpU1Xbu0xIoU+m22HHJ5sPrFQokykAORXCdffwThx4=)
                          15: NEKa7lIFJGBn7kzjbcLHtkGN_qU.roa (hash: /6yr9Qt6I/L2Oem151kiKzBTz7EzsBL4NdV31TWWhzQ=)
                          16: NYd2e9Jv56An0ARDHI1TntKuoVI.roa (hash: R+LgAA8JARQ99lFp+xf0QjZ85rVFzM4c4bJvS8PtUGY=)
                          17: Q-CNL9lapU99vKmao3iUZCkuEtU.roa (hash: DwlnB/j3gAUwpJJYq9BOtLy8tog1tmNWxyQ9zcBdCvU=)
                          18: QPY32uoctn6hjvJCcxEqaYc-dTA.roa (hash: Osefay2ccgICi8IcJAbrHsIyN8L58eS1cUVD2D27+S4=)
                          19: QaqnnXLj0xHGIfEkQ62q9mObNTY.roa (hash: 7apIP23pNDXzPH16w+oz+IzdjDm264ZjdyJHBIFKFt0=)
                          20: Rzi9rRqLyb6TI4BNXmfMXnR3TBU.roa (hash: 7Flzn8I686UlrMeTsZSZgUzjm1OVtu2OfUi0+bG0MUg=)
                          21: SE-SCm0IZ7j0jGIBXm3auy5FLe8.roa (hash: X33y/fFrta9zAEh7xBDPLjeB1WO+d5w1DXiDg8lLvuw=)
                          22: SHMD5SxbdGP2FPR_VtLNrEJqFWs.roa (hash: YSM+23jWuGhXTUSiNvRkRvc9gL8VKoGTu9MTpMtxwKs=)
                          23: SJFBC5-FIdqVAbxsM7t1qs642_0.roa (hash: 5zxsMwszAUogZWWYsk8O1igB/5v3xYbSFUtB8OM9uGU=)
                          24: TXZD0j5z_GUE4hKSgePQkrup3RA.roa (hash: AcWZPzsdQhe2VseKE2Ck8Zq4266Ik5LXD2uB5Xyfoqs=)
                          25: WE3ZgAH3U6OdJAP_aWYHZs5_DEQ.roa (hash: ygr0gEmCJj28I7GqS0ARMCk1NF4XfvpwheayNRXZ2pg=)
                          26: _PawDzdGWAmBf6mTCzqbEKRpx5M.roa (hash: wjEsYXOrPtJMQ2vvHiaQTPCJxQMXvKJKW0vyMwxdd44=)
                          27: azklxtdLP78CyS_7zGU8_M4jmIU.roa (hash: Ay9pc6rYNIZ2LSZOX32iSjv0YhPLseBEnTtI/P5zHOQ=)
                          28: cStwZflaXYZGOSa9DF3z_sehlEU.roa (hash: euvCorwljusVJ25opKJkdciruVT0nXitvwPEuNzhElc=)
                          29: eA_M3UHw_XAlf4Nil-NmPnV0dEY.roa (hash: QDWy2GZBFSMUd9t42TYxk4D+1hQWJGDn9iiJxCgplnc=)
                          30: eEPZHK0y4YYjUOCSThdZNOng0SA.roa (hash: IvBZNYD6xTwDlNptXX4R6U5olfqc77qhoTzD4jAcfBU=)
                          31: eUDz3I5vZl2P7O0GTWnOrlQS8GE.roa (hash: Wwu6thMbOGhpgIcWkqQV6Kvp7VfSg02yLAxtQEXORcY=)
                          32: h5D5ZNvsG-b_i23iSFDsjGsNdE8.roa (hash: Ke2KtQ3Sz72/RobyWvYyH61ZTqS+0GdOTxXDb01a4J4=)
                          33: h86Y5XIw-Lnt4Fr7DydqWvjmPk8.roa (hash: rDWkJlvLmJY+FniIU4qPnxNm1DzUm7MWrqr8EeOr6N8=)
                          34: i6Zze3xNEJa92cKqLLFy8PJwkwc.roa (hash: J4eo1pBmc4dEQcYy9V0csC77HT8JUuzohndd4kF3W/Y=)
                          35: iBnSAtcE94rjqkVVNa24iKUj5Fk.roa (hash: lRIL8eQI2jpK6q+dluOl4Uc8jX+e5qBS8OE2trUhdNY=)
                          36: jUD-FO67L3zlqWHSZPWsvNCDGTo.roa (hash: k5fGWD/GNRN6WXnD/EKLZMo1S5lmzGesAZY5yGqIkAE=)
                          37: jrDINB4aHPzkYR_max4ADKPh9fU.roa (hash: fR24q285Wc9aUKou3WQM35aeEZUlbuMA1h0wTi72Oqw=)
                          38: lNW2x8mM4glX65qlMZOsBg1FBMw.roa (hash: zQTLwLpNyagHzRBxmUMq+sPhdcMmtaYNYbPJ+BNqKjg=)
                          39: mK39CtP2qe-fPdq3atI2fMh63sw.roa (hash: Mc95m5CfVyhN5KiNj2JlfLoFF82hugGY8cjKSNiDwYQ=)
                          40: mfgtK-3NFj7rHnv7PG-oRxfqPBI.roa (hash: oJsU6jJzpLoZXSwDeUtzlQ60XVTIdKe0dfPYmDSzLVE=)
                          41: mnDBJHgBGK2xoOebudPU1n9pjrQ.roa (hash: YmEMJ6CQzNnD2LCiyMMohCTufsY46dda1mvz9fpUiqg=)
                          42: o0jf7_Ca06y0pLLe0uzTrojfptg.roa (hash: tKxAMzDAudoizWANqDBExyxw1S7nARs+SYO3tfgSJ5A=)
                          43: o3gfpdoaEPOeOyn5_ES4aHO69xU.roa (hash: 3D8+/E64wi6fJ007I4HpaJkSqXcn16+5gLU5sWwiafs=)
                          44: o_d65Stkjh9czXFTY-W8qPCyBXM.roa (hash: OzcFZCVsSvwxsjRlCsafmIFmvMRs9lDNQNfZO6u4ito=)
                          45: ohBR9gaWvOXtYQXcgJqGDXdvhgc.roa (hash: mcNhcVpEskMv8R65sPOBOnqGWcTvjsQlG35vlEkEVE4=)
                          46: pLmM5VRQCZjiMpjjS1M4tCmfnig.roa (hash: 3KOi4odpqftbHY+r2Rv36i0IHxo8HcR910kJdmQVui8=)
                          47: qb08zQLb9Ib-Ae03Q17yZEqR9WI.roa (hash: /4/k1KwQr1yPXScflyLx7MXxUurfXjwpoVQyIAiyMW4=)
                          48: rBJJgJ0UVs5_RCGxJ6yc3XKBovM.roa (hash: BNATMNvNTualHDmgfkpNswKTh5FtAvds0wzFytUEO4w=)
                          49: rc93pNFTBjGjAC6nmf525aEhOAA.roa (hash: cdwE6agCfPbskteVGx/ORgtRnUlt/7nlcYTxk4xtuw0=)
                          50: sTgh3U67qAWVceKiT2qonw901Y0.roa (hash: IhQc1U2SMplrFwd6podfnZMKhS/U+amjAbLdV8ZwBEE=)
                          51: tPUrbHtE6djFjZSXP9ALGSgUUtg.roa (hash: itk8yUqCVtL+o1Nr95aatxax+qqyP3aJCOQMcu3reFI=)
                          52: uhXLHo-0al5-4Ywodvl9WZhyWo8.roa (hash: 0/9YYUjWHhEdcxBlaT2sTrFe7bjXv5gIpAHJ+J4XCPg=)
                          53: ujRoWuHTyTjZeSkEyWzV9CQ8OPk.roa (hash: 9QvIJkb1GFUTmBgSkrxyWqLQ9fPJwqqryi1P2WX5i5M=)
                          54: yEuqipfqSpwLuDM43oOYdi78__0.roa (hash: CxRVS865YSoRAGiSxDOlORU6rxpnv/z5HlXmFqnVqtY=)
                          55: yQzwikfxpYcPeLPS1ABdHjgetkQ.roa (hash: WujvACMNdD+Q0irYgii9Bbsy/FmXOGZ/40KJOW9WZ/k=)
                          56: zhjx2APp2sg2jK4ORSJmap9E-qc.roa (hash: MhYlOM72WgY6OlHaLXwTLfKVBTM0O3f0LIlkCoeXxSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:28:69:ef:4e:ed:5a:76:ab:4c:0f:d5:a4:ab:b4:50:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Sep 25 09:01:24 2024 GMT
            Not After : Sep 26 09:01:24 2024 GMT
        Subject: CN=123294e08de6d23670c8e84c3e484383b22e5c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:f3:15:14:b7:2e:a5:28:5a:d2:a8:2f:97:
                    03:68:38:3a:93:fc:95:46:8b:0a:73:08:fe:39:a9:
                    d8:42:ee:1e:dd:84:38:03:8f:c4:c4:e7:93:29:da:
                    ba:f4:8e:44:2c:27:b6:2b:a3:19:6a:b6:66:f0:18:
                    d7:a2:8c:06:84:07:11:c0:b8:c6:81:60:ff:66:50:
                    2b:38:8f:7a:26:18:f5:8c:e6:11:f1:ef:7f:17:5e:
                    7c:42:c2:c6:75:c2:89:e1:50:74:f0:55:3b:36:23:
                    d5:af:b3:5a:09:21:ed:b1:00:ed:f3:cc:ce:72:a6:
                    cd:55:28:9b:50:8d:f6:e9:73:06:82:8c:eb:ff:98:
                    1f:15:90:55:15:a0:02:bb:bc:f1:8a:de:44:35:7f:
                    8b:4c:cb:d2:47:a5:2a:d4:e9:94:fd:cf:c5:1d:8b:
                    79:70:0b:dd:33:0c:3a:71:a0:63:8c:dc:69:24:57:
                    b9:b5:41:de:f3:45:5d:45:fa:a3:e3:ea:7c:aa:bd:
                    55:d3:31:08:7b:53:cb:b7:0d:56:af:e8:92:a3:cb:
                    6e:d6:d9:8a:2f:ba:f2:aa:bf:fe:b1:0c:f4:21:ca:
                    cf:91:37:ee:ac:11:1e:88:56:c6:bd:7e:dc:38:13:
                    9b:bf:42:9f:78:05:0e:3c:58:40:00:da:a0:11:57:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:94:E0:8D:E6:D2:36:70:C8:E8:4C:3E:48:43:83:B2:2E:5C:2B
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:0f:e0:01:06:d7:9e:a9:fb:64:ab:0a:63:91:03:ea:97:
         70:11:d1:32:27:f6:17:03:07:07:87:a6:9b:04:0f:bb:b8:5b:
         5c:83:4b:1f:cc:25:5b:76:ea:20:c6:19:69:34:a3:ca:ca:dd:
         2b:18:c9:e2:84:6b:39:62:ad:4e:f3:eb:c9:42:c5:f6:c0:f1:
         b2:bb:2c:9c:01:da:5b:b1:0d:3b:a7:fd:97:bc:ca:1d:91:f5:
         e6:28:6d:76:e6:89:ce:e8:c7:be:a8:85:d2:a3:35:38:5c:55:
         bc:22:e7:ad:c9:40:2f:9c:5d:11:94:cd:2a:b3:a9:3e:d9:5f:
         1c:dc:c8:76:f6:a0:d9:58:ae:fc:68:14:1d:69:8d:57:e5:b8:
         b8:fe:05:55:d3:43:29:60:be:9f:6a:b7:50:51:b9:6a:d1:f9:
         ba:72:de:89:ec:69:d2:5a:4a:e6:2a:c6:35:4c:0c:10:ad:93:
         ba:0b:a3:03:8a:18:57:68:3b:6e:ad:8e:09:b1:c3:bd:a3:33:
         ec:24:e7:cf:0c:47:e3:bb:87:a4:8b:c2:57:c0:a6:85:6a:85:
         c5:35:79:d5:d2:16:58:19:26:9c:bd:aa:44:76:92:cf:92:e8:
         fb:6f:92:7a:be:44:fd:f0:4a:d2:4a:a5:e8:23:f5:3e:d3:00:
         15:a4:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 11:36:26 2024 by rpki-client on console-fra.rpki-client.org