Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
File:                     VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json)
Hash identifier:          p9S9nFlKmSMMdSadKN1ug6l1vfWVGiIV7WM8N9hUiAw=
Subject key identifier:   0A:CB:B8:79:9E:2D:06:3A:EB:EE:85:C3:5D:40:DD:F3:40:E4:A0:60
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       0193527502C976E61E73B23F859878304B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
Manifest number:          1396
Signing time:             Fri 22 Nov 2024 06:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:20 +0000
Files and hashes:         1: 0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa (hash: 6583MAWzdrncQ6gg9ZZNT3+LbZAfBtuGoqf64TVeLb0=)
                          2: 0qAHUNY6ySXITO7TS9qqZm4DHCA.roa (hash: SG5n9OAYAOFcwEd2MKd18U7XywFHhIfdjMwnj2AqFDk=)
                          3: 1xMH_umsl3gsCWrpJ2mEjkjNwmo.roa (hash: +YLM10aWBkp/dXOQsILjS3e7G+4xs1hzIi31ufCI37M=)
                          4: 3pUr-m6O-dz0knuXlouQmp3HbMc.roa (hash: onZlUbV2KwuwGsyzLLT52sJoVQiM3CqFwTeeNp4DBro=)
                          5: 48Qz3fEZNU28sMVUMlESkYGKAI0.roa (hash: zvBYEXSdqN88kEFDVuFexhovrsxMiceF5qZwUDvuylk=)
                          6: 5qvSw9D9jPyTUSJpa37wjUSOuS4.roa (hash: xV89oLO+eP/RDja2gpnjhNNs10QnHFZVpCb8Re1aDYg=)
                          7: 6rLECGeYxQzQUfs0wxE27Ycfm0M.roa (hash: KBavSnq4CFXbU988b0qNqbsUBKnIMA2ZEbo6t3K/Ubs=)
                          8: 7phXRzNK-CnEfZtAgyHTuGw7wXs.roa (hash: yu/lsG04KpffzCJaxP72LJx68ZW823698QuM5Shzbk8=)
                          9: 844d8YXrvTNl1RLnjpXcGkHJh-c.roa (hash: ICCfAZs/YrJ5V352jwXG56/9HpzDonDDaLjFUk+weFs=)
                          10: AYAprSypundCLIiquHrSdu2e8N4.roa (hash: eGSD/mOfsejD2/VdmJe269/HfVra3HLeqpuEHY1Vk0I=)
                          11: DmIk6NOP_VhFDm5KLI23TayWrmc.roa (hash: FvXhM3hjyhSj253gCSZESiCcwmjqz1L+RF8NyLgiTIw=)
                          12: EwMPlBAaHSeXApAMqbSXCTLYO9Q.roa (hash: o9+Vusv2U4iebEpcLrIPlUYMlaH6mIcGFl0YJSRGboY=)
                          13: GesJNjy5y8XPRS9F2fPSGw-L5aE.roa (hash: LuIlahiqHYKrRz78ea68aIMcO+MkUDl0cSLrYgrft9U=)
                          14: HZs3Hy9CKdMJPRCO45jpHRBmBHQ.roa (hash: kho0ZRYjcqc11t0A8WY7hOzBjP7A82F19CyZ4L3uDuk=)
                          15: IiH7Ay2sUk8aTTEbkkgN6-3_oY8.roa (hash: D0WMrIKXOkqwNlCQyvFAcTMVOlfHthGO8HeN4JgS8Fg=)
                          16: JnLaBS60AomoxP44MXpUDaNe3QI.roa (hash: RRaFI2QtOfJyHZRhQRx0pw6mVPjD5TGs/l9fHVu071A=)
                          17: QuW3Hek9TapzEtjxsTa0r0eXVaA.roa (hash: /ka2RhWHVx/8hqAhIfsYy5zlBw1PbygrxztKHJeAi9c=)
                          18: RFZoPMK6xvPsWEuAiZmF8Nb5aCk.roa (hash: aNvdfoYHqBo6UDrKTq9uQ/JlrxiAyOPJsHnB0//gQAM=)
                          19: SC8ONahEVWsrLYadIDg8o15d4Lo.roa (hash: zc1eUdP/L8580teQVsxhAEMpcNoNkp9AfNDsdfv+oD4=)
                          20: U1272dy41zTYjwnPj8-2Idt3roE.roa (hash: HBRbe8vXlfDOf5Xr29AKz99U1s/CahA+sDlacBUhPzQ=)
                          21: V3cSpCsjsntCLwEpr_O2FqQKpPA.roa (hash: zOvAruO49go5kNUWIni7eF6roLpTUUwSto+oDYiSYxY=)
                          22: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: GUiNaIRYY2mN7sjcskxPaCmmDFVweW2feoCpT4Uuwok=)
                          23: XQEKqqPoI71VgNdpY_n91ptU7hg.roa (hash: UGfUok2AnTYwl8P0VzHjVO8xqEGbxGwHrq+ErrPDTEY=)
                          24: Y6bNWNJlV2Z485XbBD4W0Fx19mQ.roa (hash: utOlIsJsk2Tr3dJKW+rainyNJV7ikyXF0dOzhEI0UNs=)
                          25: YMc1oI5y1WCgEcO4WfzPG3clYQ0.roa (hash: ntGAbNMm1pBujcG1GZQ+ArpMLVgNzhVsyi7j//cukTw=)
                          26: _DHbhwygxYc_PbGh19PxMSo6zgk.roa (hash: apCIOcpnivEsU/KbNRQvuIHS+EwekGVocubO45ZaFAQ=)
                          27: _N5Bn21c5bspO4eYf7sZI6oJgdE.roa (hash: z8oqzHE7V5p8PQgEZrV6AfcP/Ip2PNMDuth1KDz5q5I=)
                          28: _mPm3Fc6l3cylU9qT3ux9fBuAiE.roa (hash: XP4ay70i7Dbkkl4a/st6NaIzjgUzFuT98lLKAOq5Qmg=)
                          29: aGSP9vTojYL08PVCENFTanL33Og.roa (hash: guFRRGG/MztN4mHxOEGvDfBDLg/yquwfDuBF+q+fEMY=)
                          30: b3wbaqpTHCn8qNKfGxiAHee3W4E.roa (hash: 8q2735B98CTYeQKzqzExGxA5U0M+aaSYpw9Dy9deFdo=)
                          31: bckeQ65YnH7eB9UothkE8-iXZVE.roa (hash: g91AniCxdIS3a+6EUBoellX/q60ImnpDwN/PJNOUsUM=)
                          32: eBCXYvjjYehLNMEVwRDlVESvNsM.roa (hash: IzVYAa+kBkzy2i/nVGTarO2GG6s56F7OHnY7nHLQaMg=)
                          33: ejuEv0iUuYGJm6-ECQhWbFPQ9Pk.roa (hash: JYMbXOLNgbrbx3LbKSscunx9pInCkY/ebUPFytsfHHI=)
                          34: f9ZJYubhF8x_bvbKw7vamvyXh04.roa (hash: AdYyFUvBkZ53HVCXQSZEDr2rSz9/mZiUqCx8uToYsmg=)
                          35: git-4B2FrD6nJPCSjFNtOZt7grc.roa (hash: b3KZs82H/grV89LOr9W1J0aBmSCNX1NwaiBRgF6Jijc=)
                          36: i7qnljmTyxU93eqck4tL7k9_LIg.roa (hash: qqYBKZOQOji2YySupRJr7WXGz/QKqW+WQAjprQC87N4=)
                          37: kUqRhFulHWnq0ytO0YHWuNRpIlM.roa (hash: 26YhykUBcHVyl3uXFjeUa22XDpedsi02Erocqf87o70=)
                          38: khSm1zu-GXSzO40mjIylQPgKv4o.roa (hash: LcmTemN8Pf/FTor5i7hsP8OJaHx9GCmBh07JQeO9TTo=)
                          39: npGmTRoFHTTsmU0HzSVV6ApW5fg.roa (hash: LeRBBL2zuY9aQrqUy/NMkd80gl6gYNbwyZYwecCWyyY=)
                          40: qeCYqVvs73wZRR9qkN3rEvi-874.roa (hash: PD/2jkDj5N4zg7S+G5Bg2cmOIkm0KcDOgZNaHnh90MU=)
                          41: rAokHmXFgclUtvJfir_-ba5u3kk.roa (hash: VNcKjyAGWj+mz8z0Sz294ABqk6eBL+4HYmlMq5jn/+s=)
                          42: tXm4TbqwcbqMHG2aGveFrlYlI4I.roa (hash: QKsjzMpmRtpIJGAijR2rZ7PNocc6700MsQ/Kkmji0Qk=)
                          43: v1JR24REyoXMEpWDpfYEsZeEb7I.roa (hash: bvGXvmZCdEGBFpkKif0ZpDrndrP77tfZdLY05+V+dbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:02:c9:76:e6:1e:73:b2:3f:85:98:78:30:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Nov 22 06:00:20 2024 GMT
            Not After : Nov 23 06:00:20 2024 GMT
        Subject: CN=0acbb8799e2d063aebee85c35d40ddf340e4a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:4e:f1:22:86:ca:43:f6:47:e7:04:c1:91:
                    b7:ac:e6:f6:d9:0e:0d:d7:e4:48:f6:4e:fb:3a:2f:
                    ee:fc:3f:8e:d2:0e:8d:f9:fe:92:a0:8c:b7:47:0b:
                    2d:ba:33:76:29:45:84:62:f2:9f:9b:94:42:56:cb:
                    1f:98:b0:ba:dd:8e:74:00:ec:10:25:f3:e8:2c:42:
                    ad:85:96:45:c4:06:b5:c5:0e:68:b2:3b:ed:80:9b:
                    ee:20:27:a2:75:3b:65:28:52:83:3c:b1:7e:11:29:
                    63:ff:66:ec:b1:88:18:2c:3a:d7:67:6c:31:0d:8f:
                    fb:02:1d:53:48:a7:db:d7:89:d4:ec:9c:38:63:0d:
                    80:8a:7f:65:2c:92:ea:cf:37:3b:1a:8a:9a:1e:f9:
                    45:5c:f9:d4:27:c0:e0:e2:17:3b:a7:1e:39:e3:6b:
                    59:7f:cb:05:f5:63:88:1d:a2:18:97:13:50:dc:ac:
                    e1:a1:f2:34:39:7e:92:f1:9e:5d:a6:d7:a1:50:8f:
                    eb:d6:6d:ed:d6:01:cf:c2:86:c7:dd:e3:26:f0:c4:
                    5f:90:4d:6c:82:0a:bf:ea:c0:a9:a9:af:a3:e7:32:
                    57:c4:30:5d:e6:e2:9f:27:19:29:bc:9c:e6:57:ed:
                    a6:48:2d:2c:0e:11:bb:31:e6:ab:dc:6a:39:49:f3:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:B8:79:9E:2D:06:3A:EB:EE:85:C3:5D:40:DD:F3:40:E4:A0:60
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:7a:0c:05:5e:8f:f6:d5:54:04:e0:a5:c8:9b:51:71:5d:
         6f:f1:d3:13:65:c5:82:ee:9d:72:fc:e0:70:7f:f0:08:c4:81:
         c9:e1:e8:4d:7c:cb:1f:fe:2b:dd:90:74:90:ee:d1:3e:b0:43:
         3a:10:3c:d2:59:ac:77:c2:6d:71:02:62:ef:d0:a5:18:3d:9d:
         13:0c:02:06:57:62:9e:9f:46:01:64:42:bd:6e:99:91:b7:8a:
         66:a1:8e:2e:f2:19:eb:3b:de:e5:a7:08:51:60:ef:35:74:c8:
         c9:5f:fb:94:ba:e0:2d:ce:c2:86:2b:b6:0b:ae:57:b2:17:2f:
         d0:9b:19:62:48:c1:bc:78:76:f5:a3:16:6e:1f:d4:94:fa:64:
         40:24:75:9a:7a:93:82:0c:5c:26:31:38:e4:c4:73:20:4c:13:
         e7:a2:be:3d:6e:33:85:94:7a:11:f7:a3:a0:e8:13:9c:ac:61:
         ef:b4:9b:7e:57:8c:24:1e:7c:d8:47:15:4d:1f:22:98:eb:80:
         db:ec:2d:f8:34:40:60:9a:83:be:d1:fb:87:39:b8:32:07:32:
         5a:68:0a:fb:8c:33:33:87:36:0d:30:84:85:f4:bf:a8:b2:22:
         65:13:7f:3d:da:d5:47:d8:34:c2:da:fc:9e:33:d4:31:3e:b3:
         de:da:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----