Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          UWg7Mw2poGdKy0/qK7IldbDd2zqQAKWkBeGCZdxObW4=
Subject key identifier:   BC:52:EB:59:F4:AE:6C:67:D5:64:CE:99:50:76:31:BE:9B:F1:0D:83
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       018F1F36CEDFBEA3E56F49F8369BF377A8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0A1D
Signing time:             Sat 27 Apr 2024 11:00:36 +0000
Manifest this update:     Sat 27 Apr 2024 11:00:36 +0000
Manifest next update:     Sun 28 Apr 2024 11:00:36 +0000
Files and hashes:         1: 1-DANoXzmqsA1I42Ou5XVhJr4dMQ.roa (hash: 1Nyx5OuBzAi5tVSoN3Qt9spnM1Efm02StNudVPyA6fE=)
                          2: 34nsar2gfWQMMOY8tCpJec3_HUA.roa (hash: qHqL67WUPiM0VW5Mkgg1jP4+rMDRoJNp+6mte0aAhHk=)
                          3: 4MrTlfPATwtxzMqfdTJmbUxs_Ws.roa (hash: 1bpZpw6rksfx3v9fH7vGTw0fZkS7zML6xv7Z0kxDq1c=)
                          4: 7aJF1OvrBkHDpgaBIudRFqduwAI.roa (hash: jNF86Ohd3P/HPa8+9WkslxOCPWkXU7Fodi0CxYqNh3I=)
                          5: B3eSjFh2x5UGE6LggPbRF5Eu_FQ.roa (hash: 6IKNe6mjt4PJVGsH9q2HDzSiV5C2OHBUg6JKwgpUQUg=)
                          6: Bten4d5EHLADjiG92fENgaHKncU.roa (hash: 8JMfooqvcgXYiDOnn/hgaj24lhblXDnHqQ7qKQ+xL6U=)
                          7: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: ON1DCD6xqrYA9GO++PUxKyCRi/lOr4xvZP1oxt1hD7I=)
                          8: HBPcfyJ67WoZ0_lWemV3kbQcN1w.roa (hash: e07YXr0pitztXt3vGoJaRLbsDXOqIDq6lBwwACaXHYc=)
                          9: ITVXeY-3Fv925a3wvGGY8v_CY_k.roa (hash: g0lRc4xZcDrc9SBpQR0W1xPlzWygV1lGi4G3cBKKYF4=)
                          10: KQujLH4oLzYnB8VQuixon1yfSSo.roa (hash: H0j+I5VY79hF5TbT10RNwhD6GJEhpjzPuk4hT09uLRs=)
                          11: L2cj-UQiTHFj2xukqDIIigF4A5A.roa (hash: 1nv4FdHmWuFypdwDJuMZZWzFwHGcGQqOKT9NKc6Ju3g=)
                          12: QdlUplVUfinPTbT2OAX0sPwX3EA.roa (hash: PTrOw77SGCku+YmCUq+CDc6SAVsSJF1TQHM5qOjHwIs=)
                          13: RnGsv9ag7WxbJ1pYCPqG8S1oj9s.roa (hash: 4bY1D9SEBhn1t5/57ioddEse+Xwb88/R2aLY5uGjqfM=)
                          14: S6SCkSuSJXnMC9O7btAy1tkWxQA.roa (hash: fMltvV0yeLeXpkZRnOyfVnBirfGJ0mAvKTWM5ttH2dM=)
                          15: ZvjRbM0VAk_kMaMSQ1f8fjYuXWY.roa (hash: pvIXFcZn02IMBNCSsgbMra8JB12ZqwFBtFjoYJ3C2zo=)
                          16: _DB9Hz7nSSMH4CKNpvnwxz7mEZ8.roa (hash: ZFddUTUu6vRZ1XTISNow9F9hB953r6KdGd/vjUt7+0c=)
                          17: _aaxxvBoJBt89n_6b1yAE4bxDpQ.roa (hash: 1fb53tFOpWcj7sLAQN+ntdodfPJWC+q+g+VAbf5DpBU=)
                          18: e1aytWE2xJwMHVnjkrE0HndSN5k.roa (hash: 09lTIKGJFBet3UMRNRYZgWrhx8KeCEUzU7xUhdLRPTQ=)
                          19: fR6UM7VER9dk984P5-y6VwVFiLQ.roa (hash: S0QgPJOGR867h2ojiGY0WQjOSAzEO1v49NidyA/qZn4=)
                          20: ganROBAgCdg0Vfi1QmeOgCuJ5Tc.roa (hash: 98mvxUTUACrhWYg/ePpKXdlBSVKICyI+5WZJqoq9xyk=)
                          21: hVtuEp3gqHniHLR5Ayof1VLmNcQ.roa (hash: 2Otmx5KJwqaJkPJXpX+wFbH5YXUCkcyChRa+vmc/pRo=)
                          22: kSlzpJ51NKEgyAxQ81nNruH7ius.roa (hash: BUTKjjqSu7s+tPPjYo63lTIyjVNrQMGCD1zfIWV5HaM=)
                          23: ltm_4ga5m6jNxcLkxfLRCu-BEZo.roa (hash: B7hDpa/Xi/ivuvNmaJ4x3ZPAW+3ZBUpRYOyvqRz8ADA=)
                          24: o20wkF_PTtN8-oHhOMkJBGrTcjM.roa (hash: 7rPV2UgWycZod7CIx9C9xR02OIfOoJHJHOD4Gyq90qo=)
                          25: peTYJjpd4WVh532UUPquDKBlWEU.roa (hash: 7IjYszFH9pPHW/WFh4j3eqRNbxQDHXo2Pqx8stBzIiM=)
                          26: pfvOhTcuT4xAmR1dHIRFJyoYCl4.roa (hash: nyu+J0wbMTdyUd7vS5oIiWlAkTqnd96ZBp6bn40LDmI=)
                          27: rhB1wb96Btr5VT-sIWgj6-8s_VI.roa (hash: QalWu/Q82bE0u8AwSxLmBrLfC3R7+2+aDA+lTO5kNdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:36:ce:df:be:a3:e5:6f:49:f8:36:9b:f3:77:a8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Apr 27 11:00:36 2024 GMT
            Not After : Apr 28 11:00:36 2024 GMT
        Subject: CN=bc52eb59f4ae6c67d564ce99507631be9bf10d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:71:d8:e6:d0:6e:ad:93:18:5c:57:54:03:
                    57:70:5a:e3:a3:20:43:fa:c2:40:0f:ac:52:43:f8:
                    4e:4d:df:59:19:f1:cf:96:00:42:8a:75:5a:42:1f:
                    78:f5:08:fc:5c:f2:25:d7:87:fe:2b:b4:15:36:99:
                    d2:b8:b2:1d:de:97:53:a8:0b:4f:1e:c6:61:95:c2:
                    f7:c8:34:ec:71:84:57:cc:26:09:b7:f2:53:37:cb:
                    4a:8b:13:f1:92:be:c4:00:0f:b9:49:8e:71:e3:f5:
                    ba:00:83:fb:0a:c3:98:85:da:eb:4a:5f:2b:8c:fa:
                    fe:33:28:f5:83:c7:ec:1d:f7:66:13:a3:db:80:7a:
                    34:47:7e:3f:b3:5c:55:b7:a1:b9:62:fa:1c:d2:4f:
                    5d:c0:c2:56:f6:ac:cb:bf:3b:6b:a4:98:ea:0a:c7:
                    3c:71:58:09:45:b9:17:0c:97:20:53:4c:6c:a2:20:
                    75:de:d3:bd:3c:35:f1:64:de:31:8f:3f:d7:21:1e:
                    91:4a:6f:13:b6:9a:20:f5:67:82:15:a9:b2:46:c7:
                    ce:e1:b5:5f:9c:d3:22:d1:52:02:cf:9e:41:c0:ea:
                    35:73:43:7b:5c:73:04:67:fd:f7:1f:29:1f:76:7a:
                    63:b5:5b:65:55:54:da:6d:49:ff:2d:e6:32:e0:59:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:EB:59:F4:AE:6C:67:D5:64:CE:99:50:76:31:BE:9B:F1:0D:83
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:5b:1b:09:b9:ea:61:05:89:54:a2:e8:d1:c4:88:8f:b5:
         f8:bb:87:05:60:3f:6b:3f:ef:dc:ad:c1:1f:ef:5d:7c:fe:16:
         75:40:e7:d5:d0:d1:56:54:01:fc:ce:8a:a3:8e:f5:82:ff:72:
         d3:ad:61:1d:2d:b0:ef:6e:cb:55:72:8e:11:43:34:e6:37:8f:
         87:24:c5:19:1e:c9:61:c6:5f:5d:f7:03:99:9d:1d:bd:f8:a5:
         d7:a3:7c:42:af:18:d8:3d:1a:27:49:7a:85:0d:4d:08:cc:1d:
         0f:b3:a0:0d:40:19:ac:94:16:f4:66:5e:51:76:d4:73:6a:c5:
         29:b1:cd:fe:f4:42:fe:19:ff:8c:54:c2:d9:32:a5:3a:84:6b:
         75:b9:1b:7b:cd:77:1d:d0:b5:ce:9b:32:5c:47:60:c8:3c:2d:
         47:ac:61:70:65:e6:b5:4d:fd:aa:79:f9:11:0b:91:79:b2:09:
         14:72:e9:c2:90:98:0d:a7:5e:f0:9f:9c:e9:72:51:44:da:d2:
         91:da:23:73:76:5a:ae:14:37:09:3e:84:96:da:0f:e9:02:70:
         3f:a0:3b:2f:79:87:d7:26:38:44:72:57:ed:04:67:77:8e:4f:
         32:1c:09:72:a4:70:df:d8:5a:11:3b:b4:6e:21:b9:a1:9a:64:
         96:1f:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:47:10 2024 by rpki-client on console-ams.rpki-client.org