Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          +YY2sYu3hybPkxLbfOyeM5v3VCjx37kGLuR7oFR/Cp4=
Subject key identifier:   F5:E9:BF:7F:8D:A8:71:99:C6:E4:21:F6:1C:87:B0:97:7B:C8:A5:9D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       018F7BE922B734A210B4A2E118EC5D7C5B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          0E31
Signing time:             Wed 15 May 2024 11:00:27 +0000
Manifest this update:     Wed 15 May 2024 11:00:27 +0000
Manifest next update:     Thu 16 May 2024 11:00:27 +0000
Files and hashes:         1: 1-OWKSJFglonOJCCsgLwugDQzSB0.roa (hash: jSwsXvxCrFx3Iz4zVm/DH3SiIsFn1mXF0oaHlNkwn7c=)
                          2: 2XFCTZ3mRs8j1pLvNITQkps2A08.roa (hash: T400REz865XrUi6QIVJknhZnbxrV7lR4Srm9xiMOeoA=)
                          3: 2yrL66P0evELXgf9xzJi21a7V6U.roa (hash: nqDlU9Fzx+3L3oQf3CyBdhlRuATW5IluM6zWdSCh71c=)
                          4: B03hxoCLKDqZrBrm478nVnwuOk8.roa (hash: 7SA+/2qQ/Uk1c0f4M6ZbS3tNtYMglA7T/ks8kJCIN90=)
                          5: FfSoXY3nl4Ub9B9YVof82oq7WZ0.roa (hash: Ol0ByCam/OZkP+cL5YdeiL0g3QPWZVNXosKoqbryKm4=)
                          6: GQWSjOsaceCi7QSzncHDsAV7YU8.roa (hash: 4TLZut2CmyGC/gUY5ZpKW2NuSTjFov+IvfWZY+BykvM=)
                          7: KJNGjPkcmIFOzP_uINRLs1xoz9Y.roa (hash: glnyJFBp57pliTzR7vvfipC69mbxLAn260n51iwiKuU=)
                          8: KrJZjiYOQ88jPV27toB3jM5jzTA.roa (hash: jk+bJPjch+IAHCOaujCVBbrK+knSr6BnnFu+BZ3CGso=)
                          9: L-0dfd52kruky9GH0M3bYnymR-U.roa (hash: pUSBwlTxJ1RQafini+6Cg16/4wUBvdy49Ziyr5zX/xY=)
                          10: MVQTAo-L1NKctTJ5DIG9aQEMkBQ.roa (hash: EJFBDyjqtYKpUE9+AZTVzM9nvNJnUy3e7nuzVli1TDM=)
                          11: Mif_sGk8EJFRWli6K17NE8PMxrY.roa (hash: xYGOrCIXNItol1U/57+ywNDJBtJDKBOSWm+Xd4L4XYI=)
                          12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 9eR3GuntJNlf/udIE+fQj9yugh1/6yO2Urxu0CJZ+As=)
                          13: OsR5Xm3iO7MvaMCoVKaf5Gc99oU.roa (hash: kAuge366XUeJ1ybK0hLcaDC/T5/vR3TLswOFQdjXp5s=)
                          14: QMyNStVjkgaXA7ce_rkP1h3ww1k.roa (hash: edgb8NXX//stm8W3wTSemtpOK8a2d5S06d3hkiKwuew=)
                          15: VONprgM4PVX9IVzNqQ_SgcEQv0I.roa (hash: CI3/zNMQc91luKXaGnOmjjd1A9rchxaYk6Vi+tN4u3g=)
                          16: XEUVhr4HcMU_y5vNfTwO6bYAg3E.roa (hash: j4h58VfjBIFWRrgdnti71I++vFng26rgNoegc8ALnuM=)
                          17: _BDgBKrvmKDGs9-fp37WELNW9zY.roa (hash: QwzBYMRzEyWfNAD52wadIrr8gzpdB8nWl3iJD4pPBuE=)
                          18: fV4j2IOBHAyXj13oGc9x6zSxmqo.roa (hash: 8Z1yBOXd0v2IpXwZmoRuMO3T+WlU1TNJDxgzarj1xZ4=)
                          19: f_Hn5Chp90gAcnNIxknYo8S1rh8.roa (hash: Yn5KmO/foWN5gOePWfTaEc9lW3Qi9T7jvi3/jdaP0eE=)
                          20: gM9YKH8sgoOTd3-WQRdT6H4O0Cg.roa (hash: mlWCXV90nTN3MXKtEiBTm3VE80kTKpVrE35mCc75/9U=)
                          21: krmM4076JJCwvyvM2NtHUlGmOAk.roa (hash: nOeDhtT+Bqfl24DdPU8DbUpDoJyw9LlPzZ92ftVNwz0=)
                          22: lAQHDq5zTPDbs3M3K7RFYu5ggL8.roa (hash: Zyep0SbAikhAjCLzDwVcvS0XsfMvxpI8q8ST3VPj8/g=)
                          23: o2Au1SbBVbM6OyN60nzOqnYGP1Y.roa (hash: iOegUEAVufMc25AkMAftJiJS2bh7//aUOv6cS95EG7o=)
                          24: rfiBh9Ur8LsrKSxrWKki9dZFhgA.roa (hash: 421UcktGZbucN7CNAx1gM3dvBN6LFdY4n8JdJpVzOr0=)
                          25: vriAmgqdhCjlVj6tHBu5ZpaKHzw.roa (hash: gWD8A7kq+28wk1Y2/KgDP9PMgAU+nRR+N6elMBWeuBs=)
                          26: w663BNB7nSn8oAWUbQXe2-gPXUQ.roa (hash: Y0iwqp2iS8mCE8oi/OV2DyvOzYaaStSB74t7oh3AX2k=)
                          27: yQlBg7dz21eqJ2u0KuBSgd7Nu40.roa (hash: k9g3ksd7S9frgZIJ7bYxAGdwZPRCgqHHPmdbtfBrc8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:e9:22:b7:34:a2:10:b4:a2:e1:18:ec:5d:7c:5b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 15 11:00:27 2024 GMT
            Not After : May 16 11:00:27 2024 GMT
        Subject: CN=f5e9bf7f8da87199c6e421f61c87b0977bc8a59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:51:5c:5a:9f:63:97:4b:9e:e8:fa:15:87:
                    9c:69:08:6b:8d:77:02:07:3c:fc:cd:0f:26:ef:04:
                    b7:10:ed:73:ac:fa:86:01:70:85:b6:88:7a:fc:a8:
                    b3:56:92:72:0b:c5:96:86:0e:a7:80:80:a6:84:bf:
                    fa:35:4b:12:ae:c9:f7:ed:f8:22:de:34:db:2d:15:
                    fe:3a:db:8a:05:b9:9c:7c:aa:94:62:8d:45:96:f6:
                    69:4d:4d:4e:a1:4b:52:eb:58:78:47:4a:6c:b5:5e:
                    24:d2:0c:30:8c:00:65:54:19:6f:a6:a6:1e:60:34:
                    83:fa:fd:c5:4f:e0:cc:d4:ac:ff:9c:d3:7f:1d:01:
                    dc:bc:39:fa:29:f3:b3:cb:4d:bc:b6:53:31:9a:b7:
                    b3:45:74:1b:ac:9a:c7:4f:8d:4f:51:74:39:b2:ea:
                    e9:89:da:99:e7:1c:8c:55:44:76:5b:84:6f:5c:89:
                    72:fd:0a:64:28:de:16:00:65:df:2a:54:03:4e:32:
                    bf:82:e3:d8:53:81:ef:ec:88:ca:55:d4:1c:a3:3d:
                    03:d2:9a:18:b1:03:52:c7:d7:de:82:a8:14:52:a8:
                    71:3e:c8:a7:fe:5c:b9:35:08:21:04:35:e3:96:2e:
                    23:26:be:e5:f7:99:c8:4e:2c:89:56:70:7c:9c:1a:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:BF:7F:8D:A8:71:99:C6:E4:21:F6:1C:87:B0:97:7B:C8:A5:9D
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:bb:eb:76:28:2c:0c:b0:44:25:b9:3f:6e:89:ea:09:c9:
         8c:4f:74:9d:14:34:17:b6:cc:06:ff:67:e4:71:18:36:29:3e:
         29:d7:b0:ba:0f:3f:8b:c4:53:ae:ce:a3:e7:47:5f:d0:ea:99:
         d2:0d:a9:7e:52:72:9f:69:20:fc:e6:50:ed:03:16:59:29:4a:
         1a:38:4e:d2:d3:9a:23:d5:b7:e8:91:44:1c:c2:67:20:98:8c:
         24:8c:7f:16:0e:81:72:9a:11:7b:b1:bc:a6:39:6c:5a:15:ac:
         30:a3:c3:61:a3:a4:13:f8:b2:43:5a:fe:e8:b2:ec:de:8a:8c:
         90:30:f4:0a:86:91:cd:51:15:f5:94:75:7e:e5:b5:66:0f:59:
         54:94:33:13:92:64:09:70:4e:9e:cd:50:e4:60:88:77:e1:de:
         70:b9:67:b6:05:5e:3c:92:90:d7:45:82:ec:c0:6d:d1:fb:69:
         10:23:7a:ca:db:1b:a2:d1:7e:42:0c:27:87:fd:7a:6a:51:e0:
         79:92:68:74:b4:76:54:fb:2a:e1:b1:10:df:67:59:b4:84:76:
         ce:72:ac:ce:28:66:dc:bc:5e:78:0f:95:7c:eb:d8:e6:7e:e8:
         9b:0e:cf:87:5c:ab:15:61:0e:3c:54:15:81:57:e8:20:4d:fb:
         57:93:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:39:20 2024 by rpki-client on console-ams.rpki-client.org