Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          ahNK6qcMNGRFu5VcUYXXk4Xn8hXKyFkchrhMwz/rzGA=
Subject key identifier:   0D:70:8A:78:71:F9:9A:57:6A:5F:AA:E5:E5:A7:6A:E9:90:78:98:61
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       01904C45F9A0C2E4984EA3B4FC5B212F63FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          0D94
Signing time:             Mon 24 Jun 2024 22:02:52 +0000
Manifest this update:     Mon 24 Jun 2024 22:02:52 +0000
Manifest next update:     Tue 25 Jun 2024 22:02:52 +0000
Files and hashes:         1: 0WTp0Wqb4g6G4QIMEQOUB5K1lSI.roa (hash: LW4lJ6d6xtDINGIh1cD9XFqi/Qwo34mEfbYhahOAM5s=)
                          2: 4M1daRof_ldgpJSWZdHdw0YkhgA.roa (hash: 40lY8vinKSMccGtSVYApyRs22azmbtJEtswoPCR5F0Q=)
                          3: 5SUNbGyCs4AFjHovbl5qm2Iby3c.roa (hash: 2oo1h6t684au8CMgcnKb4jq10004LbCF2MFEMuv76OU=)
                          4: 6hkC91mOvee4GSSWoK8_olC1UfE.roa (hash: Sdl4emGw6mdZTpBE+0vAGbIL3N4R4cT1GpACXVdkjKw=)
                          5: AINi681G_QMKOMOfVnhUVoSCgn8.roa (hash: N94s+bBlQLO57CDHfAg+za1NmUoiWZO4OxMuZOqlb48=)
                          6: AUGVZdI9nMYdLwbcCI1h8qcqFi8.roa (hash: WPbQ52iQyIkOquBBqXhhtrcxqBeahJFeUkn3yluZpLU=)
                          7: D77XlTSIxk6jgX8HNtooIFy0wkI.roa (hash: aaiWwe5wte4hCQLQoE1dap4hYcxhJi7uz82S/baqZZQ=)
                          8: EXY0W7zjnl4ZnmcpfQbpT9Qaldo.roa (hash: UIHuq6LFuPeunIe8Sm8ddLzeDOBsXsv40aWJCMQtPwM=)
                          9: LSDMCd3vAbraqvBOjsVUO4xE8bA.roa (hash: ocdK6cDSgBsyNTFmw5owpfazZGEBMfYXrO+Is80zjug=)
                          10: PkPyWjIdNt40wfrpscHIf-kqPvE.roa (hash: Y4GNL1PFOhPq/rxqHL+df5ykIreWJ2xCBih1Nvn2zz8=)
                          11: TEUg6_yp9I4vGQ2ER4KIZ9Qa-Fo.roa (hash: Z67AEjsE84BvHCcDza38f7gomJFfF5mRpvY1cVDAq8c=)
                          12: Toa9P9CTLP7xY8U8TWx5md8n30o.roa (hash: famDGZ4krBgY2cdvD2CSdQlTBMV3ghs54Akk9jyvqvg=)
                          13: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: U5SvuIXgynw7++JPX1SHLM8TpKtHAj/DKWf58VOwgrA=)
                          14: _95in7yycvfCk0SQxr4xmRwp_Ss.roa (hash: Tg/mNVFU90P+EfwLwUkcMgYJOZf7D7Lov+HQawhhVDs=)
                          15: ga3J3Gxab2OvQg9-ddtfHNKGL9g.roa (hash: dvcUrk7iKbQCXKMBUubSg0QYb9R+FQ7c2ws2lObCZcE=)
                          16: hv57qJCUzv7f02qF9M6UX_KF3NM.roa (hash: F5iEjuY+kevqd/aGnagHl/grBXuKSr/MeLBg3N96Uio=)
                          17: jj5ojqr8Q7M92Q9EOj1iSlRUXxA.roa (hash: q4D7/t/KdcV24X+t4Z2QPJJVfiKmCcilDPmh/FrtS+I=)
                          18: my8ay8P26UL2j3cwe9NB2nPzeAw.roa (hash: Xg5trxt8cKH+cSpH1hs9MZiJkbPRHoqod2MrzIcoKBk=)
                          19: nK5rCvajigBSicsVgbQd4Xio23U.roa (hash: ogGxh6AXX4HBMjPkxdnkdsNmYU4gjPTbCTWHhyuX29s=)
                          20: nND3u1FCZ73dZAYAjnDTdahiceo.roa (hash: IKYaDuD09keROgR1kaE2pGIATWjtdawmFAqhPZR1Dk0=)
                          21: oidapMf2PbArNogCwmlUflcqPIQ.roa (hash: 9Ad+UO8k59dwgTiEXSZrb9xqofqxWv0cmf6b4XTsDkE=)
                          22: raykU5PfpLfafqMetKDFZvWIX9Y.roa (hash: HyMaAHJBN7TXjMfCjr27TK59FofhTvHoDWLMhEoF2Wg=)
                          23: tLlsrXPucVa_-KL_kqteq5umazo.roa (hash: 5iojssIKUtrEc5pHmICim3oVd3J6Th9cZsZtBMioT0s=)
                          24: wMM18iw6KfsEVoeHTtSD5WWQwOQ.roa (hash: ih+qjUlzKnvY0xlgJk6MLglwCxDR+s2wz9psc98Ad2s=)
                          25: ya2AGZPhi9hAyyLlCTCKrdIzLXw.roa (hash: KH8ct0pru/m+D6z7pPzhDVLSenXXxt32icIo+hHFfu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:45:f9:a0:c2:e4:98:4e:a3:b4:fc:5b:21:2f:63:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jun 24 22:02:52 2024 GMT
            Not After : Jun 25 22:02:52 2024 GMT
        Subject: CN=0d708a7871f99a576a5faae5e5a76ae990789861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:95:e7:3e:37:11:aa:e5:aa:73:3b:86:1c:
                    37:ce:10:cb:da:b1:38:8d:a6:f5:04:e6:e6:e3:c1:
                    36:0e:bb:b1:de:d6:89:45:f4:12:52:2f:08:24:c0:
                    85:21:91:08:4c:52:28:20:e2:a8:f4:d8:46:64:94:
                    7c:f8:ef:b0:4a:18:1e:69:9d:3a:0a:82:80:66:24:
                    d0:e6:94:bb:e9:cd:30:c3:98:2a:a2:d2:94:fb:34:
                    03:42:b1:4e:86:f6:4f:10:28:bc:62:98:e8:c2:14:
                    92:67:ab:13:61:cd:b5:8b:7a:84:c4:0f:91:0d:86:
                    a7:24:af:57:fa:a5:85:54:35:59:52:b7:01:02:89:
                    93:42:01:43:88:e7:a2:64:07:11:b6:e7:62:13:14:
                    61:4c:b9:2a:27:11:be:71:f2:ad:aa:5c:95:d5:da:
                    b6:89:a6:d1:c1:fd:eb:b6:72:ff:c7:59:08:d6:a6:
                    fe:71:21:73:9c:fb:61:f8:d2:33:e2:6d:1e:4a:19:
                    b3:85:ae:05:c1:f4:4a:e5:98:bc:d1:e3:8c:38:d5:
                    96:47:de:63:93:b2:aa:c7:d8:6c:8d:18:ca:30:e8:
                    7f:bc:ab:8c:81:d5:81:8c:35:e0:a3:e5:2b:a9:ee:
                    37:f3:a3:e5:48:8e:9d:89:fc:35:11:da:cb:48:11:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:70:8A:78:71:F9:9A:57:6A:5F:AA:E5:E5:A7:6A:E9:90:78:98:61
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:c3:a6:32:7d:fd:3b:1b:e9:7d:08:53:9e:c8:20:9b:a1:
         c0:6c:e5:e9:b9:66:82:e9:9c:12:12:46:0a:c2:ed:3e:f9:de:
         54:c1:19:bc:76:0c:df:b1:63:a4:fe:49:89:ba:22:fc:3e:cd:
         16:0c:49:5d:89:42:65:56:85:b2:46:d7:b9:89:d1:c7:7e:42:
         1b:fd:85:73:b5:c2:ec:ec:0e:7d:2a:08:91:c3:29:05:d0:d3:
         de:1a:f0:a3:e6:43:00:87:70:d0:20:60:48:53:4c:77:b1:4b:
         28:dd:6d:52:d6:e3:0a:10:8c:3d:49:29:10:12:60:fd:d4:4f:
         42:cb:9d:1e:db:42:94:27:01:fc:57:90:e1:94:37:99:c7:19:
         2e:6b:28:26:69:0b:1a:68:db:ea:7a:8c:14:6f:90:7b:5c:66:
         d1:7c:eb:ce:0b:3a:5e:99:5b:9f:b2:96:af:55:9c:56:52:23:
         1e:d1:b8:3d:2b:90:ea:05:83:6e:01:77:92:af:0d:b2:2b:ab:
         2f:9a:52:47:27:38:08:07:8e:0d:71:0d:57:ed:1f:d6:8b:31:
         f8:0f:77:05:7e:8b:bf:55:c8:71:f8:52:d9:aa:35:c5:69:3f:
         17:19:a9:9c:9b:a5:9b:61:2c:95:b8:5f:97:44:70:29:35:76:
         92:7f:2a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBMRfmgwuSYTqO0/FshL2P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjQwNjI0MjIwMjUyWhcNMjQwNjI1MjIwMjUyWjAzMTEwLwYDVQQD
EygwZDcwOGE3ODcxZjk5YTU3NmE1ZmFhZTVlNWE3NmFlOTkwNzg5ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb6V5z43EarlqnM7hhw3zhDL2rE4
jab1BObm48E2Drux3taJRfQSUi8IJMCFIZEITFIoIOKo9NhGZJR8+O+wShgeaZ06
CoKAZiTQ5pS76c0ww5gqotKU+zQDQrFOhvZPECi8YpjowhSSZ6sTYc21i3qExA+R
DYanJK9X+qWFVDVZUrcBAomTQgFDiOeiZAcRtudiExRhTLkqJxG+cfKtqlyV1dq2
iabRwf3rtnL/x1kI1qb+cSFznPth+NIz4m0eShmzha4FwfRK5Zi80eOMONWWR95j
k7Kqx9hsjRjKMOh/vKuMgdWBjDXgo+Urqe4386PlSI6difw1EdrLSBH+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1winhx+ZpXal+q5eWnaumQeJhhMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih7DpjJ9
/Tsb6X0IU57IIJuhwGzl6blmgumcEhJGCsLtPvneVMEZvHYM37FjpP5Jiboi/D7N
FgxJXYlCZVaFskbXuYnRx35CG/2Fc7XC7OwOfSoIkcMpBdDT3hrwo+ZDAIdw0CBg
SFNMd7FLKN1tUtbjChCMPUkpEBJg/dRPQsudHttClCcB/FeQ4ZQ3mccZLmsoJmkL
Gmjb6nqMFG+Qe1xm0Xzrzgs6Xplbn7KWr1WcVlIjHtG4PSuQ6gWDbgF3kq8Nsiur
L5pSRyc4CAeODXENV+0f1osx+A93BX6Lv1XIcfhS2ao1xWk/FxmpnJulm2Eslbhf
l0RwKTV2kn8qSw==
-----END CERTIFICATE-----
Generated at Tue Jun 25 03:19:24 2024 by rpki-client on console-fra.rpki-client.org