Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
File:                     rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json)
Hash identifier:          Nlep8W/pjs9oU6LPi4l351QIBSfGvI0KvlRgaLogmMs=
Subject key identifier:   BA:A8:11:D2:E0:05:3B:F7:78:D1:19:BE:59:D2:D3:2F:85:53:03:4F
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Certificate issuer:       /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial:       018F16D81E5CBDB403C6F4596985965C8424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
Manifest number:          113F
Signing time:             Thu 25 Apr 2024 20:00:13 +0000
Manifest this update:     Thu 25 Apr 2024 20:00:13 +0000
Manifest next update:     Fri 26 Apr 2024 20:00:13 +0000
Files and hashes:         1: EV5KG6K1U-F-jSFmzhCqsZ-y5Cc.roa (hash: NLs+cLzJSNhG9CW1u168QxxuaZvp4vO4vAEPzuLPWBI=)
                          2: G1QkwSQuVmm9JuNPjqy723eIUpw.roa (hash: goNo4nOm9vDoYxmM+ZQcv80J3Jh1mU2uwxvxCImhZGg=)
                          3: Jet513YYlLwVSiHZ7fELDj4kWuc.roa (hash: psrFls0hhdD9+weFxwQPW4xit+FmOcXihY9faxQEp48=)
                          4: LdmXaqG8LJbrTI9Cre_SOVeWyyY.roa (hash: IZiZtBNehd4Rz+md/02VAII5VyYeugk149VUYtYAaO8=)
                          5: MQ05A6iaY4_u3ud1dHtaEbOWQ7g.roa (hash: Vr30Ij04R1JWTCUy4BTZ+TcBgQg05pEB3drPCRUdVlE=)
                          6: N-GyLcEjrv7_or8Kv3qbcCpg5R0.roa (hash: z6Wrprt67rB+4iYuqOBMlrpP/w43vgpsRjHYHWH838E=)
                          7: QGLEWvPPLqbKYig-R4po-MReaF4.roa (hash: a6evvTo6rfY79EPPffjkRniOT/6YS5j0Y7ZhhZyo70k=)
                          8: ntS5QWZMyT3euso27tCJsPmJ1io.roa (hash: fKEWJtgL3dPh50MyJrLV2LJVvw4oAxrqmpdELcISdjk=)
                          9: oMSiIX7r7KPQZxCIEBPpDbnm8h4.roa (hash: 9NmZz4J9PUC3/xUVpdNaVCQWml9CTbS6QCbiLR1iOiM=)
                          10: pi0bP3kYpAZJF_AQuWfzMLBKJRA.roa (hash: 1kLRy6XaqQO+0zX2vuf5RcsVMfEf+sx9BcVyXo8W7uE=)
                          11: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: 2K1MmdWX+4wIgfZMJj6+8cjgJ36KjxQv9dHGpvGU8rg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:16:d8:1e:5c:bd:b4:03:c6:f4:59:69:85:96:5c:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
        Validity
            Not Before: Apr 25 20:00:13 2024 GMT
            Not After : Apr 26 20:00:13 2024 GMT
        Subject: CN=baa811d2e0053bf778d119be59d2d32f8553034f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:c1:d9:8c:d8:f9:c4:8b:8e:76:e7:bf:53:
                    a6:f5:ce:90:67:7b:ea:64:77:a5:82:7d:69:75:44:
                    62:f8:27:2e:9a:8e:2e:87:70:7a:2c:c8:96:28:8a:
                    cc:0f:97:34:a5:5b:82:3d:19:c2:c0:dd:1d:ee:53:
                    c2:7a:f1:af:8f:4e:03:1e:a0:e0:56:c8:cb:27:83:
                    c1:5c:f3:f5:d0:c5:fa:60:50:89:f4:fa:91:6c:bc:
                    e2:21:6a:57:2d:1a:df:b4:84:a5:25:97:25:d0:0e:
                    5e:a5:54:26:d4:68:86:75:c6:3d:1d:ba:03:2a:2c:
                    36:09:ce:5a:8f:da:1d:86:6d:26:9f:30:34:c1:19:
                    50:6f:7a:dd:e2:d6:4f:74:4f:a7:dc:5d:a9:16:60:
                    c8:09:e0:1a:ba:24:7c:34:a2:61:9c:e5:38:16:a5:
                    e0:57:a8:12:fd:ea:9f:9e:6a:80:33:92:04:4d:5c:
                    7a:fd:71:fe:63:9c:42:20:20:f2:03:2c:2a:b0:41:
                    1e:bd:0a:d5:a0:0c:42:1b:ac:3d:7f:d4:4b:87:a1:
                    86:94:e0:1a:a2:5e:19:8d:b1:c2:9f:58:90:49:ea:
                    52:4e:93:a2:b6:78:04:68:e9:b3:5b:03:75:d8:be:
                    f3:51:01:bd:24:a9:56:64:cf:e7:f7:f3:ea:a4:4c:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A8:11:D2:E0:05:3B:F7:78:D1:19:BE:59:D2:D3:2F:85:53:03:4F
            X509v3 Authority Key Identifier:
                keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:31:3a:fb:65:5a:af:c9:d3:3c:23:4a:55:df:03:52:82:
         c2:f8:b9:ca:b0:0c:89:07:63:bf:5a:25:c9:19:ca:cc:b2:38:
         4d:fd:15:d6:1f:eb:9e:a9:1e:51:0f:90:a0:c0:4d:03:71:11:
         c8:b1:a0:e5:b9:89:79:c9:7b:d1:ae:72:79:6a:69:cf:03:64:
         2a:87:5e:3f:de:0d:bd:a8:7f:11:df:e9:43:a3:04:2a:ea:5d:
         4d:68:5a:c8:1c:0e:01:d0:ef:d6:4d:7b:66:03:0c:ab:18:fc:
         6d:46:5e:ed:8e:50:ab:d7:5d:23:04:3c:23:17:b1:04:0d:d0:
         25:d6:c0:e2:76:c1:ad:c8:4f:31:2d:49:19:aa:0f:f2:1e:36:
         f9:a8:2e:a7:99:79:21:72:13:d0:16:19:9c:c6:90:9c:9f:0e:
         c4:ee:91:68:b8:0a:b2:41:83:cd:c3:0e:40:1d:c0:3b:66:dc:
         3c:70:c7:5c:6a:b2:83:94:67:ef:a7:7e:46:25:a3:5a:9b:bf:
         5e:a1:9a:ed:64:e9:8e:95:cf:32:e8:24:42:b5:75:3e:68:a4:
         6b:e1:fd:f0:06:c1:b1:27:17:8d:b6:4b:39:3a:86:21:f9:b0:
         1c:17:e3:e8:31:d2:9c:8e:4d:21:96:e6:34:df:7b:14:05:1f:
         34:7a:97:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8W2B5cvbQDxvRZaYWWXIQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw
ZGVlMGYwHhcNMjQwNDI1MjAwMDEzWhcNMjQwNDI2MjAwMDEzWjAzMTEwLwYDVQQD
EyhiYWE4MTFkMmUwMDUzYmY3NzhkMTE5YmU1OWQyZDMyZjg1NTMwMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EfB2YzY+cSLjnbnv1Om9c6QZ3vq
ZHelgn1pdURi+Ccumo4uh3B6LMiWKIrMD5c0pVuCPRnCwN0d7lPCevGvj04DHqDg
VsjLJ4PBXPP10MX6YFCJ9PqRbLziIWpXLRrftISlJZcl0A5epVQm1GiGdcY9HboD
Kiw2Cc5aj9odhm0mnzA0wRlQb3rd4tZPdE+n3F2pFmDICeAauiR8NKJhnOU4FqXg
V6gS/eqfnmqAM5IETVx6/XH+Y5xCICDyAywqsEEevQrVoAxCG6w9f9RLh6GGlOAa
ol4ZjbHCn1iQSepSTpOitngEaOmzWwN12L7zUQG9JKlWZM/n9/PqpExITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqoEdLgBTv3eNEZvlnS0y+FUwNPMB8GA1UdIwQY
MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt
NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw
LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9YxOvtl
Wq/J0zwjSlXfA1KCwvi5yrAMiQdjv1olyRnKzLI4Tf0V1h/rnqkeUQ+QoMBNA3ER
yLGg5bmJecl70a5yeWppzwNkKodeP94Nvah/Ed/pQ6MEKupdTWhayBwOAdDv1k17
ZgMMqxj8bUZe7Y5Qq9ddIwQ8IxexBA3QJdbA4nbBrchPMS1JGaoP8h42+agup5l5
IXIT0BYZnMaQnJ8OxO6RaLgKskGDzcMOQB3AO2bcPHDHXGqyg5Rn76d+RiWjWpu/
XqGa7WTpjpXPMugkQrV1Pmika+H98AbBsScXjbZLOTqGIfmwHBfj6DHSnI5NIZbm
NN97FAUfNHqXIw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:57:12 2024 by rpki-client on console-fra.rpki-client.org