Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
File:                     VYjxl_l-iQB1VUToEM3e-dkPvEE.mft (raw, json)
Hash identifier:          iWOfbFy4k340GuiK4NUBOgVm8fMRz1HzgwU2S6OD1gk=
Subject key identifier:   BE:67:99:74:48:2B:76:38:66:01:AC:33:DC:F0:81:7B:C0:70:9F:13
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       019361434B782DFCBE76F6450F174B0CC038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
Manifest number:          14AF
Signing time:             Mon 25 Nov 2024 03:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 03:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 03:00:20 +0000
Files and hashes:         1: 04bwpMKZTXeKV7BxaSiq9ODlmEk.roa (hash: B4MlDM6nriV1iWTrx5B8z6DwgufVmP40Iyaso5Ns1pU=)
                          2: 06wewNtmZ5rmGss_3sAsAXJWOiw.roa (hash: TbL5rBVGXW6mpzS9vo7t1jXSsqbdbhAE3BMBP6/AznI=)
                          3: 0v-Vg7dVGGaNFxyQ7p3k4JCBteg.roa (hash: KQsbG/EnhwNWPV4Nx8z9JIUk1oU6y7hN14MXwIK5ku0=)
                          4: 1Vt7w1q-fJHtTa4bQgMlckDMSMY.roa (hash: 7ImvuEHuv8Y9NIWynRfEC5LGcbRRO4k/uGY9VzMwIdI=)
                          5: 2IjOfF9GFJH89HEv1ym7tv-yVDw.roa (hash: HCuB2TvybnhyytD017j7uUcUMQsS11VB7UMk41vq6gg=)
                          6: 3k8Q8GKHN0z26Rp-fKuhzHxGVVI.roa (hash: uiZwLiNov/J4fF/Nzo6YZxhJx/d31Pouwka5lPddhV8=)
                          7: 5ZgE2e3eV09KlDVinR9tB_RoTpo.roa (hash: dXzj4t48x2Hgpg73KNkIloN6xlAn9qHqOJxLWoCXcZo=)
                          8: 5kcAxZoRUAFTudEviCtwYgMW28s.roa (hash: mPa45d+opjfqqLzUVJL7aEPv6OWHWLWgMy+SaKfgPiU=)
                          9: 6an-E1E_0TgUDZmLlJXGgOwDIt0.roa (hash: xu83EvGDrcOXEKC+sDNlwoLhLZpG2k9VSuuxQEfrw6A=)
                          10: 7uxm31ZnUrQC2Mb2Lwa39wy7JNE.roa (hash: JvtDlCzRmVu9oNu54G8cfMRAMUPSq8USNZ25mSiK8JY=)
                          11: Djed9NGdp-loih_gNOHFxmJIwD4.roa (hash: JrdjduYdmcEA3VEW0Mpeuxdx82AvnCjnHuKvyA6cQ3I=)
                          12: Drst6AfQQkVxVfsYP-JUbMCjiP4.roa (hash: jCBJkhToc7POHuRMk5Z9BTSIGj6zm40ONQ/gN66rgYI=)
                          13: E_IX_co1RiFyTSA2jERqlqZ1k08.roa (hash: iUg4Ls8vw/uEPCvIEPw3sPTxhReujxzt60BE6+SfAHE=)
                          14: HuyFdUQ3u4-UD3WHFOpGH5Ob50I.roa (hash: vfz1yAD43Kfi4lwurYDHXYpkIdHNTlJa8tbZh5Nt2Z0=)
                          15: ISLG8qNXE_Xcu81ZFMAqq4xmrKw.roa (hash: M65I7azBaPCqnyil7BArgwT9eaivmDaHgl534JIFv7k=)
                          16: K1k1oTz405vJNRbbW2FJTFKy04Y.roa (hash: yPw39EuVuppnN2ChCHFDT14hXNtguYPJHr6ck7Fp9Kk=)
                          17: KvWPcdR8bFXFxkyfHFnAXTGRPPw.roa (hash: ZUJg8wSs0araCTE0fktdNGkifpWE8aAiOf4LjDA/E2I=)
                          18: LGcTnGsqoqpgRHaHEQEkcanOvrM.roa (hash: HwIfCw7kSyEMWIvozXW8fb6aLnP7X4AYCKnlQWHOECg=)
                          19: M6NxINPSJ9x5-mZwOwxvNZ68J0k.roa (hash: fD8hsYbBGFhWdhNAY2eDKn7cRDvQHe9GdkQmeMyqdsk=)
                          20: QyZMganY9YwuVnIdjRezsAg3HZw.roa (hash: fgi5eyudQ9iqLTVxWmhCpGVTqU8xadX4UNKpmdZWmwk=)
                          21: RiqsgdWjcVt5MsgH8ATgCvuehnc.roa (hash: kfDIlrTOTuR3DMl5QO3Osdww7yP4pfACD8MSPRzdXqc=)
                          22: S4YwyP2Mzmid58pfPww-W8HZJz8.roa (hash: aponA+zqASHv6aObrhWjMDeZkUrnU9/nhBI7EMo94sM=)
                          23: TD46V2jR1opt8sJOwrpU9_uS0nU.roa (hash: 3UmhfjzhBrjlZfMFfV+S8qPlKq0ff4Bur8gXx95lMJU=)
                          24: TKHmkxX4NtHq6d9L4jo4LKg_sg0.roa (hash: 1OmYtd5JK2mAStpIsv2SOzFss5ngE0hlwXHVmMbNWvU=)
                          25: TcZRejTaynKkTk7l72WMDLhqRrU.roa (hash: e7mhCKrvr65kEBXOas5ZY9sP2gL6IkH7z5EDTq0Qf3s=)
                          26: VYjxl_l-iQB1VUToEM3e-dkPvEE.crl (hash: kMAXPWFs9f3dXeOhNblKd/cKpB0qrZlnLAocFN6YXfE=)
                          27: __YojAHP6uPOFX_8J04NcXQ1puc.roa (hash: iTQsPDnr+NdSZ2bSC58zYUJnaNO7TKIR5V5MqZT5lFw=)
                          28: _iZ0DiL0GzDRSP-zzxQvbvqejU8.roa (hash: 1L3do3g0mi85wo1GE7JHBGdI454as+NrXAGyUcdOUjo=)
                          29: fR0FfgE1DgkY5f-rbngaZpvWSHM.roa (hash: 1FgKuZYB/BOUgkMwi0GR7I13CN1rjdb1C+UCyQBjxoY=)
                          30: fXkCUeJ2erXYSD5PZzet8I8r8fU.roa (hash: lsnQFRpgB7GK7gLM40DxSNR/5KMzCsegC8uWsXRdiwM=)
                          31: lJ6LqAkV9gJM2o8GZARpkWymUwY.roa (hash: OOxR9a0AcOLrXVaGysWPvc5zAtn+6aPIL9y9iVWuIuA=)
                          32: lJmlG-X6gVCiTsBURbFzH32Snco.roa (hash: M5lY1UhqxXTadub7MYTAOlJ9XslrESXcuetlL2Kn29g=)
                          33: nP5IYwvnpfGQHYqZ7dTlx6N4Kg0.roa (hash: 7Vkin7aP2/vQuldLlo5Dd6W8Bmy9WksCKxT4UXfADrU=)
                          34: oAVCYRCmZV9CQoXr66MPKOSRnaw.roa (hash: +iOfcVraU4Mx7gdsusZxop3BaLf+vs+tw3rzIlUqyEw=)
                          35: pP2g6FpLOkVZbBxEyKZAbUCa3o4.roa (hash: 28rHQsVTdhqiyBfHBScYahpaxe6Xjm1hGLhZ64W2RVk=)
                          36: pYXydYsa-LA5RaFHInXKctOl_xA.roa (hash: NjqACNurafufRPvzPj5OMBvfIh9a19ECu9+QWRkm5ZY=)
                          37: qi7aywjUftpAmhsQozWuU1cqDnE.roa (hash: +AZHRloA/SfwUIagU7s84J27JeE/+/BmhoGAUp17Ykc=)
                          38: t_4texXuHUmEMjYOdmfUC-DpSpY.roa (hash: 0q/npKIoo9HPRjK5JTv2PKiGmDU7pvvcdoAbLhHMr7M=)
                          39: u7gdpkTSQ4Iuks2xoabPEO5Bk10.roa (hash: 78Cg1fPA0ZSqAIUCYOau1CAyBT7iwwdcn5IGT6i4XiE=)
                          40: v3LEWwb7-BnUG0FAp9GVaKai1sM.roa (hash: 6xuEY0uVvo0VRgPSx6X6lfBAEXh+XNCgDQ3GmriYnQA=)
                          41: vh9PqC6Ngv10vLfs7nbiBcPjWjc.roa (hash: PZbiUVEJUzKvyO7/kuPZJ3btcjvfrz1gbVNWiL2LeF4=)
                          42: w-wkMXcsZb2KeHYI2vkocwiTPac.roa (hash: puy9LFDQXh1I2ob9j2i/NtQr3f9GmFQ486RbLqgKPRQ=)
                          43: yNMJPoawRueZ8SM0NqDHoftPO4U.roa (hash: RD4k69aqHChlSxzx2EqglwdACQi7qYYuakiOut4LJfo=)
                          44: ymHEOOwyWVzV_CpKsQVa4HcE12k.roa (hash: 8sWk8x8UOzr93L+wTHhq4t/AQek5KFg1tr1Y4NvleyA=)
                          45: yzYqKYnZnlooSEdjhS9TyUR5gEE.roa (hash: 3w2JVaJZ4U6+14/h5Ye1Gi3c5hzX3RpzzgHVUDG0uKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:43:4b:78:2d:fc:be:76:f6:45:0f:17:4b:0c:c0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Nov 25 03:00:20 2024 GMT
            Not After : Nov 26 03:00:20 2024 GMT
        Subject: CN=be679974482b76386601ac33dcf0817bc0709f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:a1:40:69:2c:49:16:e5:34:b3:2d:3e:72:
                    5e:27:52:44:e5:43:78:93:f8:e8:bb:c9:90:d9:98:
                    93:a3:8f:f7:bf:3c:4b:6e:3c:9d:9c:cb:03:b6:8b:
                    01:e7:71:7c:ab:30:59:5a:43:09:62:f5:b9:47:23:
                    af:c9:bf:66:9e:6f:54:3a:c9:9c:be:21:51:19:35:
                    2f:37:36:37:09:d5:a7:e7:06:0e:77:74:25:43:57:
                    2d:a2:e8:0c:24:e7:83:5b:18:1b:43:44:82:f0:8c:
                    99:68:ef:00:f7:ff:78:81:89:88:4b:0b:29:ff:a1:
                    69:79:4c:e8:34:74:6d:59:cc:c0:d7:09:dc:d8:a5:
                    7d:bd:6a:94:60:1f:2a:42:fc:41:57:15:88:26:16:
                    c4:e7:fc:4f:9f:c7:30:c5:ef:c6:78:a2:29:04:27:
                    37:cf:c7:eb:77:50:c6:4e:b3:82:70:4d:70:56:20:
                    52:33:ac:49:22:f9:b9:5f:0a:83:16:ef:cb:36:2b:
                    a1:eb:74:65:8e:8d:34:38:2c:68:f4:36:60:de:fb:
                    de:93:c9:75:60:a0:73:aa:ae:70:d7:e0:6c:8d:7b:
                    93:70:e7:c2:da:f0:68:da:f0:9d:e9:fa:da:51:a0:
                    d6:9a:9a:58:22:97:8a:72:55:c6:67:a3:bf:4f:62:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:67:99:74:48:2B:76:38:66:01:AC:33:DC:F0:81:7B:C0:70:9F:13
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:db:66:87:8f:d8:ec:22:af:00:99:41:48:6d:44:9c:08:cc:
         8c:55:10:e6:8e:79:c2:77:da:9f:7c:77:82:bc:e9:6f:9a:c8:
         bd:fd:99:4f:29:3c:b3:d3:a7:b5:05:68:d4:bc:66:fc:41:29:
         db:dd:76:94:29:37:b0:d0:a5:35:26:6f:23:e1:61:96:fb:2d:
         4e:52:9b:70:9c:ad:99:f3:26:e5:50:c3:42:86:94:86:82:ee:
         83:69:42:ff:e3:81:fd:1d:7f:32:ad:fb:6c:34:67:33:ca:a3:
         4a:89:83:ee:1e:4a:00:11:88:bd:c6:ad:f7:39:64:50:a4:b7:
         1f:39:4f:8b:6d:5b:49:03:48:08:7a:00:36:c5:50:fd:55:bd:
         5f:85:93:5f:78:33:92:8b:7d:7c:db:98:03:42:c0:98:9e:45:
         26:9a:be:f1:04:e2:98:ef:05:cc:d6:80:79:7f:96:f2:45:f0:
         25:4d:20:84:0e:9b:48:e8:4a:e8:32:2a:0e:cf:f4:b6:e3:58:
         8b:d0:28:28:cb:51:75:95:ea:be:6e:18:06:de:ad:fa:16:a2:
         3b:50:62:f1:fe:24:cd:40:93:43:2f:8a:ec:f1:31:56:9e:29:
         a7:d4:c4:3d:ac:8d:98:f1:c6:7b:af:5a:bc:30:cb:0a:1e:95:
         43:e9:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----