Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          c1jcxWziw7F/qrJ6AdIHWezrw8zcmhYdQgrR7CQ3HF4=
Subject key identifier:   A4:38:4E:EC:AA:6E:A3:FE:F6:61:63:14:B2:0A:9D:01:CD:59:8F:50
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       0193512BC9A871EC9818BC3CDEC329261C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0C5B
Signing time:             Fri 22 Nov 2024 00:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:44 +0000
Files and hashes:         1: 1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa (hash: 1Nyx5OuBzAi5tVSoN3Qt9spnM1Efm02StNudVPyA6fE=)
                          2: 34nsar2gfWQMMOY8tCpJec3_HUA.roa (hash: qHqL67WUPiM0VW5Mkgg1jP4+rMDRoJNp+6mte0aAhHk=)
                          3: 3UTwmUH3MH-KRGAAjePyuUQVE7Q.roa (hash: r09LkNTFQEdJdPA0LTC7xYQzRmrxFRnbIX1BshrkAG4=)
                          4: 4MrTlfPATwtxzMqfdTJmbUxs_Ws.roa (hash: 1bpZpw6rksfx3v9fH7vGTw0fZkS7zML6xv7Z0kxDq1c=)
                          5: 5m2MGUXbYFYdzN2i8PI01LJ1PLA.roa (hash: qUKI9voGurLM6pUkYKDZY57DnKg6huimrCwRrcGaQqE=)
                          6: 7aJF1OvrBkHDpgaBIudRFqduwAI.roa (hash: jNF86Ohd3P/HPa8+9WkslxOCPWkXU7Fodi0CxYqNh3I=)
                          7: Bten4d5EHLADjiG92fENgaHKncU.roa (hash: 8JMfooqvcgXYiDOnn/hgaj24lhblXDnHqQ7qKQ+xL6U=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Vtr1EZnXkEKbTYfIXh2YdeB9tlgPypVwVXTt+1YEihs=)
                          9: HBPcfyJ67WoZ0_lWemV3kbQcN1w.roa (hash: e07YXr0pitztXt3vGoJaRLbsDXOqIDq6lBwwACaXHYc=)
                          10: ITVXeY-3Fv925a3wvGGY8v_CY_k.roa (hash: g0lRc4xZcDrc9SBpQR0W1xPlzWygV1lGi4G3cBKKYF4=)
                          11: Jv04gzeyy48zHiwf87xhg86UaRo.roa (hash: i1KZzg6IUcL4MdywVS50NHntRWYZY59vZ9Sq/QzoIgY=)
                          12: KQujLH4oLzYnB8VQuixon1yfSSo.roa (hash: H0j+I5VY79hF5TbT10RNwhD6GJEhpjzPuk4hT09uLRs=)
                          13: L2cj-UQiTHFj2xukqDIIigF4A5A.roa (hash: 1nv4FdHmWuFypdwDJuMZZWzFwHGcGQqOKT9NKc6Ju3g=)
                          14: MM1R16OMqMfboT7i8aeqVZOOoPE.roa (hash: YLJwSFsRbu4Fk/pe2mr3B6za+pnYNE/Ne/p42qRCxyc=)
                          15: QVijdz-El_MFQHWeBGwjSzLAbI8.roa (hash: 6Tm56acgV+WDslvWEdP5J/HPoi20Ee254ygUhHitkmE=)
                          16: _DB9Hz7nSSMH4CKNpvnwxz7mEZ8.roa (hash: ZFddUTUu6vRZ1XTISNow9F9hB953r6KdGd/vjUt7+0c=)
                          17: _aaxxvBoJBt89n_6b1yAE4bxDpQ.roa (hash: 1fb53tFOpWcj7sLAQN+ntdodfPJWC+q+g+VAbf5DpBU=)
                          18: aR7lbvsTkyREqgkAplpOC95SbRk.roa (hash: +rIpgoMD1dSvit+Ovfg2sHgm+fmPYzg7J648LEgsh1k=)
                          19: e1aytWE2xJwMHVnjkrE0HndSN5k.roa (hash: 09lTIKGJFBet3UMRNRYZgWrhx8KeCEUzU7xUhdLRPTQ=)
                          20: fR6UM7VER9dk984P5-y6VwVFiLQ.roa (hash: S0QgPJOGR867h2ojiGY0WQjOSAzEO1v49NidyA/qZn4=)
                          21: hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa (hash: 2Otmx5KJwqaJkPJXpX+wFbH5YXUCkcyChRa+vmc/pRo=)
                          22: kSlzpJ51NKEgyAxQ81nNruH7ius.roa (hash: BUTKjjqSu7s+tPPjYo63lTIyjVNrQMGCD1zfIWV5HaM=)
                          23: ltm_4ga5m6jNxcLkxfLRCu-BEZo.roa (hash: B7hDpa/Xi/ivuvNmaJ4x3ZPAW+3ZBUpRYOyvqRz8ADA=)
                          24: o20wkF_PTtN8-oHhOMkJBGrTcjM.roa (hash: 7rPV2UgWycZod7CIx9C9xR02OIfOoJHJHOD4Gyq90qo=)
                          25: peTYJjpd4WVh532UUPquDKBlWEU.roa (hash: 7IjYszFH9pPHW/WFh4j3eqRNbxQDHXo2Pqx8stBzIiM=)
                          26: pfvOhTcuT4xAmR1dHIRFJyoYCl4.roa (hash: nyu+J0wbMTdyUd7vS5oIiWlAkTqnd96ZBp6bn40LDmI=)
                          27: rhB1wb96Btr5VT-sIWgj6-8s_VI.roa (hash: QalWu/Q82bE0u8AwSxLmBrLfC3R7+2+aDA+lTO5kNdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:c9:a8:71:ec:98:18:bc:3c:de:c3:29:26:1c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Nov 22 00:00:44 2024 GMT
            Not After : Nov 23 00:00:44 2024 GMT
        Subject: CN=a4384eecaa6ea3fef6616314b20a9d01cd598f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:1f:76:db:14:0c:ed:59:32:20:f5:41:27:
                    86:5b:e2:13:8f:61:52:70:70:6e:84:1e:3f:d2:51:
                    54:19:d0:5e:c0:4f:34:90:18:d1:39:0e:8c:df:4b:
                    b9:84:10:77:0c:0f:3e:43:84:00:7e:88:3f:63:ae:
                    4f:2e:4c:e5:95:d6:9b:20:d0:5f:72:d5:b6:97:af:
                    c0:09:9a:00:73:09:52:11:cc:1a:9f:0d:60:16:ad:
                    17:ba:59:80:38:5b:a4:d7:db:1c:83:a0:1e:1d:28:
                    24:18:45:7c:67:9e:91:23:1a:8d:f0:b0:dd:49:42:
                    53:d6:5b:cd:80:9e:7a:e1:51:a7:17:68:bb:88:c3:
                    29:ed:c4:90:85:09:44:e3:0d:27:df:47:47:21:65:
                    6b:63:c1:b9:80:49:8c:6b:8c:93:67:a7:09:1a:4d:
                    37:5f:82:b3:07:13:8e:5e:43:38:52:14:94:97:74:
                    bd:28:4d:32:e3:ea:e6:eb:98:e9:24:58:d2:4f:c0:
                    dd:5a:64:5d:bc:5d:8d:8e:2d:b8:af:4d:ad:eb:d4:
                    a9:45:f9:2d:7c:37:a0:ef:df:62:76:d4:4d:6a:40:
                    9d:58:b7:e0:8a:14:64:28:df:0b:4b:4c:43:56:ea:
                    29:d0:42:cc:c2:a0:86:41:a6:02:0c:98:f0:3f:f5:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:4E:EC:AA:6E:A3:FE:F6:61:63:14:B2:0A:9D:01:CD:59:8F:50
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:34:9c:1a:fa:f5:7c:0e:dd:70:a1:06:54:5e:d2:62:66:
         4e:a6:f3:d7:ac:e1:6f:5e:da:54:9c:f2:22:db:8d:38:a7:6d:
         24:a0:f6:89:57:b5:2f:be:c3:0b:be:23:6e:a0:6e:b7:a9:da:
         2e:82:a7:6b:4b:bb:ac:82:90:2e:25:7a:8b:3c:a3:85:63:c3:
         3a:cc:0d:37:b2:8f:a0:95:f9:07:cb:3a:8b:b4:91:b3:88:97:
         2b:6c:be:6e:d5:b2:d9:8a:97:b2:67:e9:cc:fc:ed:24:9b:88:
         2e:2b:73:c7:3d:80:e5:7c:16:d5:83:52:e3:7c:2d:2a:ed:f6:
         a7:96:fe:c8:e9:d3:fd:fb:00:f9:43:eb:30:92:26:57:7c:da:
         6e:32:72:27:7e:e2:c6:31:cd:b4:4e:11:78:52:d0:fe:fa:ba:
         4a:f8:de:4c:d0:11:88:26:7e:da:e8:5d:14:03:aa:36:0f:f6:
         c6:35:c3:43:79:57:6a:b7:4e:2d:3b:0d:b7:5b:ed:d2:ec:73:
         da:12:85:24:18:46:20:29:89:0c:61:75:6b:d4:5a:34:53:fb:
         f4:6f:15:5b:2d:48:9b:33:62:c8:da:0d:96:9c:74:33:7a:71:
         3f:e5:d9:c1:8e:17:8d:26:ff:d9:fb:9a:77:f7:7d:4e:d1:f4:
         b6:39:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-ams.rpki-client.org