Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
File:                     YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft (raw, json)
Hash identifier:          Om+k7MkM2uxfRPaWRBHhclF49n6LaQYcRYn12sSxRAU=
Subject key identifier:   DC:06:2E:0F:0C:30:E8:29:07:3A:02:2B:4F:19:E1:DF:6C:33:A2:51
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       01935199E691D5E419957EC727869D0F8306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
Manifest number:          06F3
Signing time:             Fri 22 Nov 2024 02:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 02:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 02:01:00 +0000
Files and hashes:         1: 07cCelZPS4Z5nagTbP5OdRxaHSA.roa (hash: o1k+2sbhvQyh+q2BdEBepQV+4egY6byZjN1iFl4yC2I=)
                          2: 0bnuTkCfYfzUfw3eB1VZySpW2z8.roa (hash: 57UexDJJ4dyqLTvR+hM8PAsHjeV+TSvkbh8n7TWviQs=)
                          3: 1-dQHk1iIpoMzKoeZ_7pejuiXWiU.roa (hash: cwK6rxIkMMWiVtsKoPIA+TLmDofLM9LbzNOUarub0No=)
                          4: 3OL__vUlRT3HIh3Z3sOaB7a8UyA.roa (hash: dPeDQsWdENzfbK9CX4/peLPi1FFliqTS5thzEiWy5Yg=)
                          5: 5XaRqReFVYOaTvnV2R9_MAfI1uY.roa (hash: HRROlwpEY6ttcF3ptBKvpVcl+0SS+UPpWg0GG8CVrgQ=)
                          6: 6C6pcsV0vRisOEJD-YisOjwmoK8.roa (hash: yVSgtKo+Ec6ZzfdfZCTOWFNeHTTGW/YCL32w+osuvVo=)
                          7: 6cOAEYV0XFea6ckL0EjlNf2msZs.roa (hash: fWzJPwRWQZLPJ3wzBvcB+ZayqWkGy1bBS7qgJYm54C4=)
                          8: 8hqG6MuUTBaGeYn8b1MLG_aUsxo.roa (hash: mkLqxFlFQ5067gD+iL13nMSH8REqWJV32KZ51miZDoQ=)
                          9: BuMBlbMww4MpLqOgFo32UW_dMoQ.roa (hash: ri3a9VgqzbRz3Bp6Fq3iZUao+yIOA/yWMlTNCrthWNo=)
                          10: Cjj5wOv_2hSHgkEx89K2aHe4IpE.roa (hash: qzt3gxeAuxWZKBJkFZhRXS2quuBVG0R4Wfod//zwA50=)
                          11: EMMlDo_ZEo1KryYD--iKv-Ws7d0.roa (hash: K2IQUKVGfwqms1WTMz6O+nrKH0VpEEn3Hldc+B0M+C8=)
                          12: EaKWPOsEC3AdultDM0xgnKuKMQw.roa (hash: ToTX7iP8fSgcvywfV//7pITdESq6M1Icc2aC2KWJxzg=)
                          13: FLrfluS3G6eBn4Rz8dO3Tg1uUvc.roa (hash: BnW4jyu0bgDvHie08CZtTDJ78L8japxPf505h8mt7Ho=)
                          14: FU8QC8vTzSAtHJlYowlxJCwYOHY.roa (hash: ZscWMGU48m3X+Cq1v9F3IhuS9LU5acJGwDf1ZDnmzcI=)
                          15: FktfBLYkFLGrkKn-tuULHQrCE94.roa (hash: B/vVW6EnfnNYv3iKmK9MiThXaf+yMm1jCgsNtH85QVE=)
                          16: HCmN5WGP7TnTD1le8DXUJAlRqUI.roa (hash: K+ryewXGkp8QEtaQHFFw24w2Qm8haDCUr+WSJgw/c6g=)
                          17: HDAlGA4h66F4ys1PgZtcuWJlRbU.roa (hash: rbzHwOAoqcMw1lI8y0r4q+/jJrFcAP8JfjFSaJTJuHU=)
                          18: HfJYhhvLg09t5VVyW7-bfiuEGdQ.roa (hash: bxEZ7A05icxnyJj0GZJSZOfYFLLzeUkDj9tp5ewzPvQ=)
                          19: IWkosv1oceI1aAT6MuaBeykPnDE.roa (hash: Zt1zR/MujgpAImrsB9MGSD/MhSE58xHF3n6xOhC/j7E=)
                          20: Iw4wygJD_n_QEM-66XmQNAnhk3Y.roa (hash: j8itHg6SOPpRfBnF5uWhKvLwCt6l45pKoUjkYm3rgV4=)
                          21: J-fqCeGc5_fkHyjlAODkRI8rHwY.roa (hash: rndO/LOCUxm3/ZAlUG2sr+p0II3zkKPBhwJZ9tA0goY=)
                          22: JyaL2Rz_Z_DybEA2Fdl4NZtsycQ.roa (hash: jo+xOFODGcZ45pNn8QJNTde1EGD1ZgKV9LqCC1Fs42Q=)
                          23: MSqub2ADYzqO9vgMLaV-ADkvX00.roa (hash: atrduMdjiMGHyMU9caMA9tXErnHnuqEw6JXW78l3/y8=)
                          24: Mb3R6F5l4dlK7IfR7gHwdwGSO6I.roa (hash: vdn5cJiM9oLTm8hpLBwuAxJZ/yTRWuqk2wXv9/qniRs=)
                          25: NeV9mQpwOfgzmYW_LOGXR7znkXI.roa (hash: zZen78W7d3yphLkrFotj2UM5ISvEgPm15wDwIBPT8bk=)
                          26: TPmfhxh0_nTXnn3Ex03aeMGiB4c.roa (hash: HFnYo4N0HI3o2+ViKgPlzaJxO2Vou6oIlA6YqMzd3m4=)
                          27: WWl7oY5azcSuucmc1VehXX2ToU8.roa (hash: VVR6m6iS9uDyy/9YnkfInsEFygSxWVSTX1oLbzAuRNM=)
                          28: XAwMf4IPa8ymga8unTrlVUv-UaU.roa (hash: 3OmyEOvFdWLHr69Q4hahR/JByOekjvQLJmZ5kulif6s=)
                          29: YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl (hash: 1BG9HgHCPYdxpUyODQah3ZLqBVX9jK7z0H27iHbpsbA=)
                          30: ZcnwxsHfR-WZqOdxUhttbP5b758.roa (hash: oKzjlabDuRnZvmdXkP14uCojdFdEjTnDsiauKW5p7p0=)
                          31: _UA0TNAUY1jI5BCsV9TLwoZfpzo.roa (hash: T8EFqLLnK1uaSC/RRMxhW1z44lkcJC0g4NK2K+LFGJE=)
                          32: _VJlQLIVVH06RPc34Qz4RWySapA.roa (hash: 9u3yNxjP0+XUjclcHf7WD762Il3Ad+Z+wWid85Yi1QM=)
                          33: aUqNm9QYschsBoYPTaBMe35SMx4.roa (hash: NfpGeW4R/JAUnK29KVDmrxIl1mXcGXPiqkU3+xjmppA=)
                          34: agHw5j73hh3S8gaVYMcMrZCuJN0.roa (hash: ai5olFnMzKUwv5YcWrLDzcxfH3cynFgeTCnIGgyJG+I=)
                          35: bRsgTPk08-KlnWUYbujqk_6W2v0.roa (hash: XZNjlfCztmwTStwyhp3/Lx6XOn87s6eJ6mo/+sF/Jhc=)
                          36: bn7XVVkqMCINrv4hqBRG6UdHXgE.roa (hash: y6WrtZNlDFHtlW+g4xWbdvlkfushEFx+1G9FpGozvqI=)
                          37: ckyXExbUqPFdR5c70FHvNozCTB8.roa (hash: EBYJCWdjn8aJSEAmaVDzGSl8KsLxwYNZIS7nZgayrew=)
                          38: exI6i2Bs3-Wva_jrUVMV_9GuCk8.roa (hash: 8m6wx6PZR3xNOJqmnEe9yQPRO8DWpk+++OElGAhUqbA=)
                          39: fOpHoj6gE6QDSzI_xpI2eoSQlig.roa (hash: pLBi2u+3F49A1hvLwb6x7gKKB5g8fv3gRqV1aRiYSu8=)
                          40: gIY91EakNPhFKtiITSnkop1p7_I.roa (hash: mqcK5TZqqcx9/hIyjg+kN9725J9r1rkFrZMpTp6Y6R8=)
                          41: i_Tvja-apEGVfTOpUqdTZgG57sw.roa (hash: jbMPVJryoXxkKVPlFpl9ugt3/Khzrfs+JJiuceX1MzU=)
                          42: ihRhOZUFv-OHogZ8RVtdTs6RNwE.roa (hash: Ia5SJV6JVHsM37MG/ESXwkgifHWKG/X2C9X4sYYj5Vw=)
                          43: kr0TjOxgcm_KhMjeicf8fW76Q0Y.roa (hash: xOf8LT+D5nUC7HtSexyu/Xpg/836IXc/PjHz1TvdOjk=)
                          44: kvvKLDOBYQmJCrL-MVNswp6AvVc.roa (hash: 7LXTJ3RenJhpLqfikF7CGEeX4DAs/ioFpcDctyXrdgc=)
                          45: oCIoIDnKe9sDUQ4rdq0LftoSIyY.roa (hash: GMqwL/UzexMNXUPcQjSe8tF8xDmZwxc/YUEVW0869wA=)
                          46: p9Bx6-80Z5u_nVEX6cPclfGKy44.roa (hash: FO0CDO5/eLT4T8N64qjY/znyGnOT32AUzGq1jdCfiNs=)
                          47: sUXNq6VPxMrfPQkizTRBj_C8jvI.roa (hash: 7HjA1Jb0bTUTCXbqUrP4+H3nyYjc6kUsvDllUZHLdEY=)
                          48: tZn7lyIq6tEiWekXEXz-SkGHzo8.roa (hash: NiWdg4ql85ZeEHdfy/wWhInM+oz1hYXzPT2nTZIi4FY=)
                          49: u8zBuHARv8CyyionOPBGX5xAZKM.roa (hash: fWgGTbqSPk6KAbHlPb7dacN4y/WZk7mHEIrZYs4LScY=)
                          50: uHBvJvujUHwxrWwuxHQljY5dvT4.roa (hash: VMuGFwZdN8udSy03Io/tnsF+brXRz/enmoOemgP26ug=)
                          51: vHwM7wdSGCzqZGT3PQVMmgcgq-0.roa (hash: lxXc3Ic7U9QN/qAasUTdeXNkM4spGtFzK1kkhA1DEkw=)
                          52: x0hIBPJb1n3RB_em921UVOCHb1o.roa (hash: TkGGM6sYARovwoB32ZeQXfp6eW1FiRfAy7LiGNJaDa8=)
                          53: xaY25wbKuPGU48V_UzGEyy4WR8U.roa (hash: 7J12ICPB5cUoyPLI8sikjvf7zu2e7sHeRohBWKkf3v0=)
                          54: zPJ4iT8IJFBLC4KpCDe12b_SOyA.roa (hash: 27/bKUkD3B4SO5N537UzYaqqGUZorzyFlGbctpVT6Io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:e6:91:d5:e4:19:95:7e:c7:27:86:9d:0f:83:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Nov 22 02:01:00 2024 GMT
            Not After : Nov 23 02:01:00 2024 GMT
        Subject: CN=dc062e0f0c30e829073a022b4f19e1df6c33a251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:72:1a:f6:41:51:ad:55:67:56:bb:ec:f3:
                    a1:08:09:d2:58:90:65:60:68:21:ec:6d:0f:2b:5a:
                    9c:67:39:77:41:04:42:6f:0d:8f:0e:62:f6:50:2f:
                    8c:47:00:82:f9:f4:98:f8:f7:6e:11:27:86:63:a3:
                    d0:e2:e4:77:ab:6c:4c:dd:4c:40:19:a4:03:73:b6:
                    70:b4:27:62:8c:a9:0e:fa:c0:56:58:45:fe:05:06:
                    cf:f6:93:2b:40:be:34:d8:e2:c6:d7:b7:17:8e:81:
                    3a:a4:8d:ab:7d:c0:7a:1b:c1:78:55:00:09:ea:fd:
                    d5:ee:bf:8c:30:1a:95:b0:08:81:69:c8:ba:5b:26:
                    4b:c9:a5:d1:d2:ba:77:a7:e9:35:5b:f1:cc:6f:b1:
                    86:fa:b1:cf:e7:83:7b:38:d8:0c:86:57:7c:fe:30:
                    cd:27:40:38:90:98:9f:a1:7a:5f:97:42:d6:f9:f4:
                    41:ac:5e:1b:f2:ff:a4:e7:a7:c6:9a:9f:c3:d4:c7:
                    4f:06:c1:95:72:b5:09:84:2f:c1:8a:13:b8:c9:03:
                    25:bd:a6:17:35:ec:a1:2e:99:a1:b2:5d:51:6e:50:
                    5b:5c:49:8d:1d:b5:30:62:53:3a:6e:bb:e9:2a:ba:
                    ac:f1:71:6e:58:ec:c0:a0:f4:39:45:c0:b5:ba:8e:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:2E:0F:0C:30:E8:29:07:3A:02:2B:4F:19:E1:DF:6C:33:A2:51
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:ea:86:5f:eb:4f:1b:48:96:48:60:f4:9a:45:dc:61:41:
         d1:c0:f9:15:5c:ed:b1:d8:a6:6a:ac:86:cd:a8:0f:01:d1:0c:
         18:cc:99:61:32:f2:6b:be:6c:94:42:5d:43:8c:8a:c5:e5:4d:
         94:85:57:b5:79:fe:c4:79:71:c1:ad:02:8b:72:b9:bc:59:db:
         e7:f9:8f:fc:c1:a1:f9:cb:f9:26:28:c4:64:f8:b8:de:e6:97:
         3b:f9:9c:f4:ef:db:e2:b0:64:6c:e1:6f:54:19:4b:b8:ac:59:
         a8:13:b2:4a:4a:9d:74:c6:54:d3:18:5d:a6:31:ff:c2:34:27:
         ae:f7:9d:92:fc:01:5e:44:f1:5d:d2:74:44:9b:c8:58:b7:1e:
         4f:b1:2e:91:10:88:15:5c:be:af:7f:8a:ac:48:6b:d9:e6:f3:
         b6:62:9e:84:7d:11:a2:1f:6c:df:8a:ec:45:71:72:a8:24:82:
         29:c4:63:b4:c1:c1:8b:4c:39:c1:10:6c:b3:29:f1:e1:5a:7e:
         1e:2a:37:ec:e7:28:29:36:b3:db:68:89:95:9f:07:49:98:0a:
         f4:52:eb:fb:21:d7:36:5c:8d:ee:12:c0:bf:f3:05:a9:02:68:
         84:c0:3e:cc:63:4d:2b:78:ca:3a:ef:2c:d9:be:65:71:eb:3c:
         81:26:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----