Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
File:                     d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft (raw, json)
Hash identifier:          q1J00UaI+rnwnEwLZJCbasqVTaFPQA2Hb+okIIgul9A=
Subject key identifier:   C7:65:5D:35:EB:9E:65:C3:09:CD:7B:D6:53:B2:87:D9:C4:9D:76:34
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       018E830104F74E7E7BD351B49752EED67DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
Manifest number:          1165
Signing time:             Thu 28 Mar 2024 03:01:05 +0000
Manifest this update:     Thu 28 Mar 2024 03:01:05 +0000
Manifest next update:     Fri 29 Mar 2024 03:01:05 +0000
Files and hashes:         1: 0PHJqZMPWrLCjh9UMaNUcrBnmQ0.roa (hash: 10skCxFhSxBVEdh+ATFzqRt8dllHs383Py/mC7s9bXw=)
                          2: 0wNNc5gQqAARKENnl6N_cLZ9AWg.roa (hash: x2vun23dBf7EjnN7e7Ne2w3dLFKwE+vsrkUXO+w56nQ=)
                          3: 9OH5X962YQixOoypsDyb5hHutjQ.roa (hash: 8JmYN4cgbhp7CJdXZW968JxWWoQTBaTS44ZrSknjfVM=)
                          4: C_uVU-u3n9TKcm6d76j23PmwehI.roa (hash: hJfAGCymUM1UdOmG7pGh1QLQA3PLYh/KNuFjrgTEv1Q=)
                          5: EDiCesljzz_3LXbf6kP4Uq1C3tE.roa (hash: eG4IF7Y9+xy57y8bJIxgXzDtqwpmiuS9x/jXwMmsSHQ=)
                          6: GCnOJpvaxEkCr6SlV_H-wYchl1w.roa (hash: LvDo66FVQdVjOaO2MgUgzW0iuPYON7m5c/mhbDnpZfI=)
                          7: GD61enfpRYvZEiGqUYA5W5_jcWc.roa (hash: vwVzq9U3p/G+fT7ZKkQZH564SI3qfd7TtRq01U3JgsQ=)
                          8: Hc430l-A6Z9aFLQGWrYn3irHSWY.roa (hash: WZxJ2TtYdvjC3m7fvL5ZmpX8lD2K0gGAXEnhLOZ6TWc=)
                          9: LwcwiecPlTPLucOhr4CZh4GdNzo.roa (hash: jxzgyQvX325Pr5NOWPUMaoMTuI4obe5Rnr9D7cqhzmE=)
                          10: QpMzFh0gn4RHReTb8ororG1uI6c.roa (hash: sjbI6Qt0UEe3pauc56qiAivAfS8eY+7PQWVsVGzc1yA=)
                          11: _EABetoPFMOgrgKr14gIX6C3KKM.roa (hash: wWT/QFQ6RtdRqZy2ax/zDp4APBxcPILnBMNYEgmKFw4=)
                          12: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl (hash: NCMh57PW7jLJ37WDt2w3ytAb1U9BTcim1KWLA5lCK+M=)
                          13: eC-JyF7-PtQdFsd6yHg2d25ai5Q.roa (hash: J1p4gshIlTi4H6U7WgSdEY3rt1JZA5GCy7mmwqWZY34=)
                          14: f2nnlUkXYwVRSEW0kR_5gniH71w.roa (hash: jg3hfJMqNd2keyY+rhWVxdXAosbKgNAJn3f0ho924S4=)
                          15: f_XfVM969sMICXu62GbYsjLPim8.roa (hash: ni5aes3KETp55PgWYE4/iFK6z3gukYc+nfKccQ+5A9o=)
                          16: lG4OGyBZKr2ZSx8QIh-jTwVe2UE.roa (hash: 0A6EjJNL+TCEZidFw1j8YvI2nnzzoKaVZ/goKf49eZA=)
                          17: lwZLvnybnsS2ZEIohO5dyBhq1Hk.roa (hash: yA0niluY/c0P2R05fUaWRZx1uAQBQX/NcNCYJRWJDnE=)
                          18: rQDiDyBnQ1S9iL-K8jsKPH_kYpU.roa (hash: MQMjbW3QfpLT+eChO4vxBTu1oW6ETezdM/KGvQHT1js=)
                          19: sSL01x5vOzZSpxARJsVQFzGbFpw.roa (hash: Q27bdEx6M1EOgDOkhcwnHC85/ZQ29sPZJJUoaD3Sm4k=)
                          20: tmJbireS00ohIgKHaFjN0tPjUJc.roa (hash: 4htofaTZCNqV768vRnG5WW7wWm4NZ2ome1OpNbMA34o=)
                          21: u8i8yb8YUO9nDU0VpXXvyNjyKSw.roa (hash: sZoY8LD2N46/IKPEb9ifOcywxvFNAdMFVOYDWQJCCKY=)
                          22: uvuc6isgqtTbax3Cp0gzHSV8H9k.roa (hash: o2HFq/buXlL6Ex+YDIW596X3LJhS+fdNeGKYfKaLeqI=)
                          23: vBsJro3Mb-Q09N7vtbujNafAKyA.roa (hash: YoLdcWk6f1BcplJvfMiYADVtHUKsXWFgZzen5HbYu8E=)
                          24: vkpPoC2wR_ub0fgj-KeXRvHSbSY.roa (hash: NclwLMN6CU4Q5reaazN2fxhKgJkvdgza7Z4eYJ9ogOc=)
                          25: yw0LvdCXGFP2MK6-T-0PEVSRXoc.roa (hash: fu2+6pWSf0qQFW69RPape3dSh1ZjALzL766MidGMCbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:83:01:04:f7:4e:7e:7b:d3:51:b4:97:52:ee:d6:7d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Mar 28 03:01:05 2024 GMT
            Not After : Mar 29 03:01:05 2024 GMT
        Subject: CN=c7655d35eb9e65c309cd7bd653b287d9c49d7634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:ef:ae:53:bf:8b:bc:b0:e2:01:b8:a9:0e:
                    9f:ca:18:73:aa:d4:5e:53:7e:9f:0e:7a:29:48:f1:
                    85:8a:f6:56:3f:5e:99:85:50:6c:36:3c:a2:2d:e5:
                    78:65:a8:70:1e:53:53:5c:8f:e7:6c:3a:b5:5e:d7:
                    f6:85:e1:3d:3a:2e:c9:18:0c:39:50:17:49:f3:c3:
                    5d:87:d9:c4:36:fb:e0:5f:7e:63:f7:31:be:c9:db:
                    05:16:c4:de:02:f7:b8:fe:5e:b6:8e:cc:b1:1e:0b:
                    d5:3c:f0:be:3c:8c:40:df:bb:d6:5b:f0:e0:2f:d1:
                    99:29:14:53:5d:04:8e:fc:38:bf:e1:4d:eb:f5:b5:
                    fa:1d:90:12:e4:08:01:06:4c:ca:79:58:b5:af:d2:
                    cc:8a:64:2f:92:cf:d7:ae:eb:1d:8e:77:6e:22:b9:
                    ba:5a:7f:f8:6f:67:71:c4:f8:3f:c4:c7:e7:2b:e9:
                    2a:6a:bf:4e:2f:a6:51:b0:8f:93:0d:d3:62:ca:08:
                    ad:05:33:f3:a5:3b:10:73:3e:15:72:83:a3:87:7a:
                    49:e1:ed:19:1a:e5:50:f6:22:b6:43:c4:75:83:a3:
                    d8:66:f0:08:15:6c:4a:57:13:23:4a:49:78:b0:24:
                    91:a0:e9:c9:36:ac:38:7e:59:5f:15:5f:37:ef:7c:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:65:5D:35:EB:9E:65:C3:09:CD:7B:D6:53:B2:87:D9:C4:9D:76:34
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:70:7c:28:53:b5:33:ff:b5:33:cb:c2:39:0d:52:a9:24:
         ff:ea:d8:c6:79:77:fb:84:f8:d1:a9:a9:5f:51:e2:56:b8:90:
         8c:31:eb:72:01:ab:4e:0a:fe:fb:f0:a4:9d:c9:58:0e:84:d0:
         cf:b0:5f:3d:1f:cd:e7:6e:5d:bf:59:de:b2:58:aa:04:6e:ae:
         66:5a:b0:4b:12:09:ae:09:4f:21:ab:6e:f8:6c:20:6c:b8:61:
         95:0d:7b:8e:12:e7:bd:72:2b:e5:25:eb:af:7d:87:50:e8:9e:
         e2:21:bb:7d:87:2f:46:c7:44:b6:22:80:ee:df:96:71:5e:ee:
         08:1f:ca:9c:0b:60:9e:a5:2a:17:5f:be:24:d5:ea:2b:07:7c:
         dd:55:a7:cf:25:4d:34:a5:fe:ee:69:29:5d:ca:fc:d8:cd:5b:
         29:89:cd:74:47:04:66:79:2f:3a:3c:fe:95:f6:95:2f:4d:c1:
         05:4a:6e:d5:b9:b5:d6:75:23:48:1d:3a:fe:70:4e:85:c7:4f:
         4f:0a:18:57:e6:76:6a:8f:26:52:89:43:0e:dc:aa:2f:c3:39:
         1e:8b:e6:1e:a5:8c:d7:4a:95:04:10:18:69:64:39:f1:95:b2:
         ab:31:bc:5d:60:5f:91:a1:b4:49:bd:0b:5f:81:54:f0:14:40:
         14:45:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:55:32 2024 by rpki-client on console-fra.rpki-client.org