Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
File:                     gz4_XvglVWsBSghdMlZbsMvFrI0.mft (raw, json)
Hash identifier:          9TOygxHjQ383Wp2NLVbbbveBtll8IrMzeEZLb0/6QGQ=
Subject key identifier:   DD:9B:45:70:A5:E4:24:7C:A2:BE:50:FE:07:0C:FE:8D:42:A7:A2:83
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       018F6E9C9F21492109DECD2F3B35666AC8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
Manifest number:          0964
Signing time:             Sun 12 May 2024 21:01:49 +0000
Manifest this update:     Sun 12 May 2024 21:01:49 +0000
Manifest next update:     Mon 13 May 2024 21:01:49 +0000
Files and hashes:         1: 0AFHWcWBLg5CK-GMlnb1apoTQN0.roa (hash: 3/DeCy7uxenI8cyZM9Nvuyk1OgREU0T9hZwS9UMuZ3I=)
                          2: 1qjwdXQNMnvUpcPFUk1-LH5Gmqw.roa (hash: FtILzvzsMbAlBDW0S66enKakGl0+pDtzIsAefXYwouE=)
                          3: 2sa0ZlBDr3BtQhP0WSyoBGQKP4o.roa (hash: FcseioOXcWsBVr7ctAJzy1lgTPpNsacTWzpTKISEqsY=)
                          4: 5kwpOiOvO95jOH3ceNd-rV_NImw.roa (hash: hkJ82k6qg456b3+dujV6NFf5bRbyLWgOstILGFGL3zI=)
                          5: 6V6fDj7ILO-gQs-4WgjWqfrbRQQ.roa (hash: 8SIExKWy/7SISDK2GE12tQvMBZVDmDgvZwxjYXdrujs=)
                          6: D53uLKyuE4Z45hynwp4tjiVQsWs.roa (hash: D/4hUT0r/kIOdkX5b8kUFtMAB2ceBYHvONthwA6MRfM=)
                          7: D9QVs5sXbONaefJXYMz39y_8YaY.roa (hash: LyP30YDmMpkkM4eJOqO2nSsRK1k6nsw1TQX+TC+PmtU=)
                          8: E4KQwiRAVC8fJrewjD8EG9jS0mw.roa (hash: +sOq+IjZCXb3hVq/gsP971LjR3MBtX6QkDVMpElgE+k=)
                          9: EfTXlzsEQ1U0li51AO3Tb6Ifpv8.roa (hash: gyYY6J7DNZ0w3F0ISQg7ClmMvUZHRxqlO9BvFlJaO6Q=)
                          10: GN-85YhXgdeiFz4n-I5kl1u23Rs.roa (hash: EEMGaXUlJDk88TLZePxe707SpCJmIf+stVSjnhFtn4w=)
                          11: GQlUb_BgFcfIDA2HRTUtrsYpYTo.roa (hash: vdMnO0PSNkszaK45rB3cLC0w2t6jsf38oHx2nI2UzXU=)
                          12: HZbxX3uSNEUI6TIi00Tm1j2FfiE.roa (hash: L8jAYaoZDOnI3nM9k/Kwab9CS4+pTXwhSNMnZJhFsj0=)
                          13: I05TxI4HsJlV677bOudLJn9w1XQ.roa (hash: 0jaxgcrFgp7uCMx5gTaf4JkVPTmfj5gqzuamh2RKJ3c=)
                          14: I1x-TmbNwkGkjTehAJPdkJLqpFk.roa (hash: slJPTpNQ4Yzug64TIdLUM132n8HKPPB0sa1+rPANXT0=)
                          15: L6D6fJYhfuCPMTt5B-P_PPO7x-k.roa (hash: 2g5KI1qdHT65Xc8rvpNetKYQs/TJO+yIMvMNLt+k+0w=)
                          16: Lt7EHucfnqztxhF9r8C7MUHxHMc.roa (hash: 0LDx6xYO4gCrqKZOpfNUwYzE8f10ArDl7g3EzoVuWTI=)
                          17: NhQ_Tc1nSGExShTj677tmzQx6Lo.roa (hash: UFQqJ5vyydyo9VcHIBadV6HvjHjMYCVuuUKDsgYkWo8=)
                          18: PDcLu_eQn8fKwK6biU571WbcYu4.roa (hash: 54ozTH/MVOYu7Wc11qMOEnBSLi+YVtVV21/ehivjg/s=)
                          19: QSuesv5GmXao5VsbvjKq0BTzSns.roa (hash: 3lpb4sxnjFm//U+tCexble/oA8L7daDvPBATfi1tqqM=)
                          20: QSwknRauM7NQjTJfPqytUuinqYs.roa (hash: CeJVsI/33Kjp/fe9eopHzKsO9xPOdDWQ8LarPXDKK5I=)
                          21: UtQ6aaV5z_bDGI2KUew0Ud70TKk.roa (hash: HqUCUV/55pEZvw+m4psprB/VFtDi+IXpqalL25wGNuw=)
                          22: aBqddUiFpIHiNrfbNgOSmBlO85w.roa (hash: l8JLxGJuuBMPuIVWI5ayhz/xa7yzNmG9uAEOBLiBWA8=)
                          23: bKfqaS74Qft5UG7ln3b2If_ta2A.roa (hash: Eu4mJqVl2HmzRkzOc1Eb40NDxQsgdade42l4vJXCiWo=)
                          24: bZh796gc4xEgolI27eiCvNriJ6U.roa (hash: t7E1CPYB3ez9y66vunlFRZRpKnB+CYvuDFZJleKLuac=)
                          25: eVYtehpyCvKKnSpNz3RiHyK_Q6Q.roa (hash: X4mYzJ4JS55cEgvU8fJceJ6k3SF6KdquvdngxQszsps=)
                          26: eYc-IsSgTBFFPG9NDlo1YwYAATc.roa (hash: AINQbgxfZ+WkJxnIge2jIf5nsbeqzGdNbRmCdWccl2w=)
                          27: gpYWZk-Egj5MF22zFwU-crBmDtQ.roa (hash: t/SkyizqcVfEiDxgFfWSmRhWsIw4ahSJDv2Zq5NJzPU=)
                          28: gz4_XvglVWsBSghdMlZbsMvFrI0.crl (hash: FoKLgesfHVDSIT4qB4VVg7paMjehXXsWCuh7ECjbNiM=)
                          29: hpGgzUMp5Gj7L4s0mR10kbNriaU.roa (hash: qPzfIa7ZZ+kmKhohD4gPPU+lKAUXRRmN8K3JuWJUDRU=)
                          30: ipmQaYpXVbjCpKeDxUXGqzzY3ME.roa (hash: xkIMUZD3/dMeeUDkHf32xTTV1Q0bOjRSEocwBTiVm50=)
                          31: jq6rjJZ2EZ5bzZ_TWbo7SBhptVo.roa (hash: TCJJjcWaD6DLThC9XrxwDhG0dOXLjcv7IED2zNYNNHo=)
                          32: mjbEDz8bb3bUPTJA-h6DgOWpUjE.roa (hash: gcaKo75ZeUj4lJJ05jpjbbouXecfbrLd9zfLR7/y2pE=)
                          33: tJuK1-0GECppIcJw2n1e4EBV8fk.roa (hash: hBmEKLyb08b3P1OPAJranH15CMxONcgvN6X8frBRneE=)
                          34: tX3yUNbOxn93xBPiVZCcxDn8vWo.roa (hash: +Vl63ny1ZHUytZWW7Odjv2qYEpRmTMW9FJ4Dr+hggCM=)
                          35: t_ayQWq4lp4C38f_q4JbV8iS_pQ.roa (hash: E9mzVqvTjqxDThzOP/SzWAZm+HMv11z+2xDm2C9aUhA=)
                          36: upsXCpuow-YEApIUQ44j__fptQU.roa (hash: sudoLJ9tmS2PTwhCXU0HybPGVg6gfPcVI5ZB0d5E8F4=)
                          37: vRuL4gJ7HnWnZ7-KNxNR1uJXl8k.roa (hash: FRbgnzU4wsM4bQ8cE+1enKk2QrJOVEEN7Z5xPfxF07E=)
                          38: wv__O0LrxtiITXKKwLOwGQXLJ9o.roa (hash: F4NmBcGcJ/5+ZFYxpNdtZOaf0kkCdBUR1H0RDa0e61E=)
                          39: zh3swOQP9vEq8gzhX7ZczZ6mCGk.roa (hash: 6oRNu8qDxWxG5N344k+SC86oi4oYLvaLgZxf3123x8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6e:9c:9f:21:49:21:09:de:cd:2f:3b:35:66:6a:c8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: May 12 21:01:49 2024 GMT
            Not After : May 13 21:01:49 2024 GMT
        Subject: CN=dd9b4570a5e4247ca2be50fe070cfe8d42a7a283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:b5:88:99:fa:3e:9c:7b:0c:83:1a:16:f5:
                    0d:4d:e7:fb:61:4f:39:34:a8:a8:10:d1:b9:5c:d7:
                    f9:10:82:56:cf:ce:ad:e0:98:e6:35:58:6c:cb:8a:
                    78:5d:d1:2b:79:16:84:50:cd:75:c5:1f:fa:a8:36:
                    20:54:7b:4f:32:a7:6b:51:44:7d:d4:41:62:80:4a:
                    c5:34:65:61:f5:c8:79:34:82:97:94:2e:8e:b0:f2:
                    3f:60:f6:7c:6c:a3:a2:4d:b5:7d:32:59:80:cd:ce:
                    3d:84:ba:0e:8c:0e:51:21:91:4c:42:44:7c:6f:0e:
                    2a:9f:61:5b:35:87:08:c6:d2:26:99:84:48:af:8e:
                    1e:17:2a:45:7c:dd:ac:d2:82:8d:bd:17:10:df:0c:
                    a8:a1:3d:fe:31:fb:8a:df:56:6d:df:d6:b7:6b:24:
                    dc:99:6d:66:ab:4f:18:da:17:2a:94:d1:53:8b:9e:
                    96:8b:9e:06:b7:53:42:a7:56:ea:8f:66:14:a7:6b:
                    5c:71:e0:44:a0:c9:84:36:cb:98:4e:5a:0a:e9:22:
                    ba:05:47:f7:31:46:ed:6b:cb:99:0c:55:7f:8b:e1:
                    c8:49:b5:01:75:df:8e:08:7c:ff:11:38:cf:bc:00:
                    fe:fa:4d:76:8b:f9:fd:bd:50:b4:9c:2f:ae:03:c5:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:45:70:A5:E4:24:7C:A2:BE:50:FE:07:0C:FE:8D:42:A7:A2:83
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:f9:83:84:a8:8d:88:8d:e5:22:b3:8a:17:59:bb:7f:fc:
         0b:b9:52:da:09:b8:1f:fe:a4:82:d0:47:2b:32:a4:b9:8d:90:
         f7:4c:e2:ad:4b:3a:3b:5a:9b:20:43:96:2e:23:19:4c:8e:07:
         3c:3b:90:9d:c3:69:58:ce:4a:cf:84:3f:fc:66:9d:bb:e4:4f:
         a5:58:f1:46:15:c4:9b:1c:e4:55:33:2b:25:d5:4f:0a:0d:df:
         d2:50:26:ba:c1:0d:ac:ff:ad:c9:34:71:91:80:90:96:77:e7:
         dd:21:cc:02:62:da:76:f0:ae:1e:c1:6c:2b:5f:57:11:99:e9:
         cb:00:a4:01:8f:17:c6:94:3b:48:fc:91:6b:5d:0a:ee:9d:86:
         3b:77:0e:50:b9:0c:6d:b1:cd:26:8b:7b:04:d0:57:d9:8a:11:
         14:3f:96:71:d5:e1:fb:6a:0f:2a:fe:c9:aa:5b:86:ba:4a:7f:
         59:53:30:92:cb:44:03:b2:1e:68:44:6e:8a:b2:4f:05:04:a7:
         13:01:89:3c:07:79:70:66:b5:88:6e:29:37:37:61:18:9b:f3:
         dc:cc:d8:2f:c4:7e:c6:c7:05:9f:71:63:0a:4c:02:27:46:9e:
         fc:29:ef:06:58:07:bd:9e:bd:c9:07:68:05:04:e5:a7:46:7a:
         cd:43:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:45:12 2024 by rpki-client on console-fra.rpki-client.org