Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
File:                     2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft (raw, json)
Hash identifier:          dILMvgaKkqFTsW7JUICFFcpvk4y9w/+tlxbCUOVnU2U=
Subject key identifier:   5A:2F:B8:B0:A0:3E:CD:8F:A7:23:CE:A6:6A:04:D9:13:81:FE:BC:36
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       018F38454C78F17B0D4F262EAA82E6E84F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
Manifest number:          11F2
Signing time:             Thu 02 May 2024 07:46:56 +0000
Manifest this update:     Thu 02 May 2024 07:46:56 +0000
Manifest next update:     Fri 03 May 2024 07:46:56 +0000
Files and hashes:         1: 0PljimlDDKSnENW-2Yn5kv1IszA.roa (hash: qMPRMnrWhMgthwVfY6gXSUufXguCuhpO4dB+vCg6CMo=)
                          2: 1SFMVmVVQCZ8CHj_b_LREIBJh9g.roa (hash: XwK6DbJwyMitWXhF0dJsE9TILffoWSuqmBmmBF5DUbI=)
                          3: 1iID7KVUoTWtc3yD80K6j8U2K6g.roa (hash: DOFm7mcjYGb+FZEUyLjFz1b/pTnx+MQA5l1uhv2U3wE=)
                          4: 2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl (hash: mwlu/pPPKaXcvfg0BXeQNE0tCa7V5oC9xBdxVEHQKIM=)
                          5: 3CvCe0AZDnlUUuV71Oh5mDkHyZE.roa (hash: ss5JMLiPa0Qa5B/PM/BeUTpZ7wVdHzyrTWlUDuPKKNA=)
                          6: 4Jmbn1xOoG9xCA7GK9tKy1lASqw.roa (hash: u8XsA6jdtBntK3Pf2zU6CrICct2bX4wWW0UJntV+CFM=)
                          7: 5JaX38K5WIqtwc1CLeZi4_TD0aY.roa (hash: /xSYcvbXy8TWmalfHsQQnKSmG1r4Sduk+GLq6dI3nlE=)
                          8: 7ScNlv3rlhoVdqvYu628S-k9wjQ.roa (hash: HSf3Hq5dTNbOnd86SZIar0n2x8gf9ZL9hnVRCH0GDlo=)
                          9: 86JagjSUqFx5iU7JyYqVGMUMlLM.roa (hash: 3O8h0DPKnJ4Sc2rcWcirn52ASjEgO8R0qssX+ZcGPsM=)
                          10: 9cMTA4UBA_u2c-kZ9bMkOb68cHw.roa (hash: cagEJVJxjrpyVlBTvC7Lt0Gf+l3HizTR1GV2QTTPWL4=)
                          11: A4vgEsTC24UwBUkT4Za_IzrdB28.roa (hash: ns1oAZNIl6i5EKkMBr5VQibnq4qatRlXhjDwsDd1rho=)
                          12: I4vFHOOVWWbnxx-PdB1ON-AZwRo.roa (hash: M8D0iOf8stqHGtQLjs4Gl9WwQMv5+0ApD9K1BLcyiCA=)
                          13: MBEw3s1YK6gMnlLBS_HY_I6dXL0.roa (hash: TGsqPFOM94XlRADPk88aV7n1QTbGuMOdA4zHnHJ8ZcM=)
                          14: NFsldV3Oo3numLXNTrQ7jbpDpUI.roa (hash: g1DopMTj/G3gF9Do/2YJP+zpwIHgITWXQdk99dPS2i8=)
                          15: NQLlstyPz2ZcNo_9sn4bhvLfkzc.roa (hash: G1BmW8pJOnZa+p7YyxfIiXGSy/R4BV5nCmdgBc0n0BA=)
                          16: QIf4zFL2ccD0r9J9iRa73vJ9ve0.roa (hash: bKWRYTvruBoBHQXA1mWbQNAeaIVhX7+9qpg7TrFrK14=)
                          17: SCa4ExxVRo76877msRmtlU-CbAA.roa (hash: EJv3Zn2DVqqdevmQ3S2QsEkb66Ou3P1X/BcuDrg7EIw=)
                          18: TmufkcF5LEbRcZEiq_u-wURnubw.roa (hash: rhcpe5hhNAppJauapVWtuSipXRgWv6+ueBw8SPgTjq4=)
                          19: X7SaDHMSYAxujOPd3vLM49JHv-w.roa (hash: zIEbh5pv+7ngPsqZdMDIWFwNe9IUd/HYV2ZTtm1RJnw=)
                          20: hL4ambauJl2jntmn-hlkh1Hfw74.roa (hash: Yd/kfUct8fpMzdIUyT3O3kd876X63dCXgTycz80TlXg=)
                          21: l76XLJnoUqF842XI0LSbS0Jl44k.roa (hash: ZviRaofd93fuxRlCDyod58ahFbRPk+lAJvoXe1IYbvk=)
                          22: ln-h02wkOquOIz3WTF0bhboSoDQ.roa (hash: 2atLbtD3BYZDhR754QuS67vxGi/BGsbMt9x0UvW6MlY=)
                          23: nJ5lNXXYSFNJBqmqvH1AqlGtEwM.roa (hash: qVUEocAU9e+5BCua9i2QgMHz8LpTNFPskCNKmo1vi0A=)
                          24: rILfVK3WMy0yJqcBkB_FkQEeO_0.roa (hash: HcvmomCrFvx34SsziqL4OefXh8PbusZk7B4XECpYTB4=)
                          25: rpE0M3xlNKVJp1ftn1gGL7GTYfE.roa (hash: aywEOaH1E1/43suab9yptHYbWgF5bMpSyv2X8trbD3s=)
                          26: sPzrLcAL-KLzAKbTEfCpnzRb-b8.roa (hash: 9lvzP2BJR5eA2J0QYtAQhT3JsyZEWai1CwjfycIKKU8=)
                          27: tyJYpFO3YiCFX2LFXDiHmApTXdE.roa (hash: Zsv/x72Vw6auIfgZwuP6P9h2RhIivJauqbO+XEMj0GM=)
                          28: wA43Py4ooYJWrbwBF7sbEZles9o.roa (hash: UrFuGsV02jbZFHvMrwQnaVpOfvdOCxCAtaycNxt8mpE=)
                          29: xEs-YhJvANpj1HlEo6Z_xHeLdfM.roa (hash: Tjaoo0LdZNhM4eOHP59cv1CiZuZmN9BgGtbSLRyJlG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:45:4c:78:f1:7b:0d:4f:26:2e:aa:82:e6:e8:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: May  2 07:46:56 2024 GMT
            Not After : May  3 07:46:56 2024 GMT
        Subject: CN=5a2fb8b0a03ecd8fa723cea66a04d91381febc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:89:60:be:be:36:43:e6:17:da:e8:bc:a7:
                    f9:e8:dc:a7:16:08:10:65:77:c4:74:23:fa:f1:61:
                    84:4c:5b:bd:c8:68:99:b4:df:98:65:43:ac:b4:b6:
                    19:03:64:55:2c:68:c0:66:fe:84:07:0e:20:7f:1c:
                    b1:83:94:83:a9:00:46:41:9d:2b:7b:ad:9e:3f:44:
                    9c:a8:df:9c:b5:ec:d0:8a:9a:24:d2:a5:dd:79:96:
                    d4:64:1c:58:7f:c2:9a:f4:66:8f:1c:ac:0c:cd:2c:
                    be:e7:33:0b:66:ee:d7:9e:17:2a:d6:a7:a1:ff:a6:
                    41:ee:d6:e5:59:31:6f:b2:d9:d4:79:57:33:5e:5b:
                    26:d8:8e:16:59:8b:51:d3:f0:f7:d3:bb:4c:27:a5:
                    73:95:29:36:8e:de:fe:e6:99:c8:73:79:70:51:19:
                    d7:6e:a1:ab:1f:e7:52:02:6d:b8:46:47:b7:1e:03:
                    fa:dc:d9:4f:bd:f8:22:f6:f9:d2:fa:c0:25:9e:c0:
                    66:8e:5b:d0:43:aa:74:17:b6:af:b3:c3:a3:e1:5d:
                    03:73:5a:0f:a6:41:09:11:bf:f8:86:fc:eb:f5:b3:
                    e2:4e:ea:8e:bc:3e:b4:b7:4b:83:7f:11:ec:cf:3b:
                    9f:a0:c5:55:5d:eb:20:fe:a2:ec:3b:a1:8a:09:24:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:B8:B0:A0:3E:CD:8F:A7:23:CE:A6:6A:04:D9:13:81:FE:BC:36
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:56:b0:b0:23:f7:b9:18:dd:87:a8:e7:00:cc:df:5f:19:
         1d:98:a8:d3:24:7b:c6:fd:f9:da:ae:3a:eb:c0:c8:8a:9a:f4:
         44:a8:9e:d4:1f:86:6b:4f:8d:89:02:1f:79:7b:6e:ac:6b:cc:
         47:f3:02:39:fa:f1:7b:1b:dc:d7:9c:ad:50:c5:9f:c2:9e:3a:
         77:47:5f:2a:65:3d:a7:64:ba:89:63:cc:9d:f4:75:f0:08:c7:
         96:69:88:8d:d0:48:89:7f:37:70:69:da:d6:ee:17:b5:1c:d8:
         6a:90:35:0c:0e:ca:6a:aa:58:35:f9:d4:19:91:8d:b0:49:2d:
         be:fe:80:e5:c1:d6:6a:b9:da:0c:78:10:de:39:5a:96:93:9e:
         82:85:ef:7f:57:e2:80:57:bb:77:1a:67:83:fe:79:3f:a9:c4:
         0e:60:dd:d5:f3:ac:e3:ed:7a:78:e2:27:0d:4e:f8:e6:f3:6d:
         99:e2:82:a0:14:d6:bb:3d:a7:23:79:7b:e5:55:56:ce:79:93:
         ba:60:cd:7f:84:cd:f1:7d:ea:3f:36:d6:03:fa:45:76:8b:d2:
         5f:6d:05:a4:2b:77:b3:8f:0b:51:4e:dd:9e:f0:4b:27:4b:74:
         79:9d:39:55:74:3f:4f:3f:77:19:c1:ed:aa:f3:88:b8:8a:fd:
         42:60:27:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84RUx48XsNTyYuqoLm6E8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwNTAyMDc0NjU2WhcNMjQwNTAzMDc0NjU2WjAzMTEwLwYDVQQD
Eyg1YTJmYjhiMGEwM2VjZDhmYTcyM2NlYTY2YTA0ZDkxMzgxZmViYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45OJYL6+NkPmF9rovKf56NynFggQ
ZXfEdCP68WGETFu9yGiZtN+YZUOstLYZA2RVLGjAZv6EBw4gfxyxg5SDqQBGQZ0r
e62eP0ScqN+ctezQipok0qXdeZbUZBxYf8Ka9GaPHKwMzSy+5zMLZu7Xnhcq1qeh
/6ZB7tblWTFvstnUeVczXlsm2I4WWYtR0/D307tMJ6VzlSk2jt7+5pnIc3lwURnX
bqGrH+dSAm24Rke3HgP63NlPvfgi9vnS+sAlnsBmjlvQQ6p0F7avs8Oj4V0Dc1oP
pkEJEb/4hvzr9bPiTuqOvD60t0uDfxHszzufoMVVXesg/qLsO6GKCST0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFovuLCgPs2PpyPOpmoE2ROB/rw2MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7hWsLAj
97kY3Yeo5wDM318ZHZio0yR7xv352q4668DIipr0RKie1B+Ga0+NiQIfeXturGvM
R/MCOfrxexvc15ytUMWfwp46d0dfKmU9p2S6iWPMnfR18AjHlmmIjdBIiX83cGna
1u4XtRzYapA1DA7KaqpYNfnUGZGNsEktvv6A5cHWarnaDHgQ3jlalpOegoXvf1fi
gFe7dxpng/55P6nEDmDd1fOs4+16eOInDU745vNtmeKCoBTWuz2nI3l75VVWznmT
umDNf4TN8X3qPzbWA/pFdovSX20FpCt3s48LUU7dnvBLJ0t0eZ05VXQ/Tz93GcHt
qvOIuIr9QmAniA==
-----END CERTIFICATE-----
Generated at Thu May 2 10:31:45 2024 by rpki-client on console-ams.rpki-client.org