Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          6PzdgUxJyp3XOAp5bmBHbRUwFpq69Xq9viHYUXNEg+8=
Subject key identifier:   80:4A:0F:33:C9:26:68:CE:4D:9C:46:28:EE:0B:CB:37:D7:1E:91:41
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       0193549BDCD954DF86ADBB5FAB8AAF96EFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          1422
Signing time:             Fri 22 Nov 2024 16:02:00 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:00 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:00 +0000
Files and hashes:         1: BQZxXu5UGLgDrbUmYdmtHFfkwok.roa (hash: cMQZH8cYkU9GXTXJkXpuqFqumgxceTAMGNUhn6NklN4=)
                          2: Bnca41KtqCnqWxdLknhG9hKhfD4.roa (hash: v7pdZyf1Z9hKhaGrXfch0v5vnzjiyIxK3nxi/4fP48U=)
                          3: CBXPUiHgTa6QgA1hlHX3yzYqL2w.roa (hash: dPTwL+4hnByE89Ezq7pv6LMnDkHZiqDeRIR6SprizqI=)
                          4: DCe9q9sj-y7ERATJdPJYlz7KHqo.roa (hash: sLjys8QwrLQB67RJ3tWCmI1ZH0Cz/8RcaQ+WKavCkI4=)
                          5: Ddma7sTv1gt9q1jtbolLvKA3ZeI.roa (hash: 6Ir46+tcMsH0ibzgiSBuzy6W9JmLzQ93ICmmJfwHFuU=)
                          6: E66-NwYTLCBcB8T0lRRSO1Koio0.roa (hash: O/POHANNeucVR1uuz8+JMBLva+LWL7E8jxjqIweuVhE=)
                          7: HjjbZzaSOie2aWRtVGXwVAIcOuo.roa (hash: JKF2He/6BTLJT/b9lMwZyEyNxeYKPQmoZNTec+dZ0fc=)
                          8: IzHkzr6h-mDJI-KKhxFz8DTlR-A.roa (hash: AZLUfU9npbOVh/DJM6MDgljfWiIhC+/et0EWqC6SWjM=)
                          9: JtB98-zjAD0o4TNU9pjTR9pO87g.roa (hash: 51Lh/9Bb5cG4HIceUoViNNCpat096OxyOVGeT8oufno=)
                          10: K3C1zOGf7Q4lkEWOdhovPH4keuk.roa (hash: KmLAbhWqZLR8v911z9xmgZ4tiORY25Z4SQo64EYuWao=)
                          11: KjM0pDVOikf30ab8npERrzc6sDY.roa (hash: goNFGfmihmvd0nOi2mzj2LBN5mHupmqGlOCSV7V8wv0=)
                          12: L9mGY9ezET_mVX0MdOezih0DTLw.roa (hash: pCmGuxrrIqex8/mv3ddLBRm/+Sr3R4cc8ONPMszBXDA=)
                          13: NWMqukF9beeKKrKoOBPI-ZBnkfQ.roa (hash: nte69ho3sSUtW9zQl35fz4vSjWJN+npiqTYqk01RHsA=)
                          14: PLgUutu93YzYz9bvvKVbdCs5Cm8.roa (hash: WHaUzHmJYDJBvtjTnBr+y2tQplAPRAJ0XLLrzyGq5rY=)
                          15: PO24Po4-XGZf8ENK-7pgm0TanQo.roa (hash: lsXGbZThw10u4VtO9tTUe3mLhCLIgbi/8tZdvZS5keQ=)
                          16: P_r9ExUqJaNLPD50m3rxW0FuQJQ.roa (hash: mBdmAl9vEVV3UlMmQuUYske/NyzbOcVt23bI2TcPLUk=)
                          17: Pzqr2CpA2eSuimg01amJdswVuM4.roa (hash: da/KdG5nuXqoYSwBNWIGxTPMLe/RT3EGanchOh4y3Fk=)
                          18: QCH4JF634NxO3kKsm3ThQ6HKCcQ.roa (hash: McTTsO5CgOu9cklTAmTkkpdzMIkSLgTlCDYFNdvoPic=)
                          19: RM5nUicCjS5SIjwY8TLxDieTGqE.roa (hash: OW95oF/0MNw7pddby7ROM/ca7H1uAjdrfNHHvyQLiLQ=)
                          20: UPwXH4vazEt6iiTVmgUMMqYrJso.roa (hash: 52L1FtGMBgsuRPVyE6V0WBR4fy0yyi1z0u7D4leyw4Q=)
                          21: Vd1yJo_vZwEyEASDEDR2wKA2BpM.roa (hash: j6/TOZztFKy41z/68gEMZa5/gENqUGIFDyoVkAu7nj8=)
                          22: XIC6iaKMAlhkMWQgMFyAgYzC4Yg.roa (hash: gPgreth+qH93oXYYuT2C8Lx1T1p3HAqKwlSaUgyL12o=)
                          23: a831mzKTbrUDVc6k3yLU5p320ts.roa (hash: v0+IArnAj9eecB60Ihm+gklVFG6XgY2uDjRaCr5+pck=)
                          24: bs99EDurNpaa-EDhHB2i51WLIAc.roa (hash: 9yQZy96q63rUqLph7BPBS1j6pdOpNYORyFPshTvaHfI=)
                          25: djOS6aD_Hon8Tz6arGkXIW4CFrY.roa (hash: gZhEEso+31/n7KLhMqjL+Q8ouFLrRyEN55W0OTi5Db0=)
                          26: eJnXePUOvPTAimjRML9dV3sRNGk.roa (hash: zHcWqRmdkNVZmV8ewljmfd/sqat36WZOw72bc5aOPF4=)
                          27: fqvQ0DJn25T-CJml0wjmNJI6GM0.roa (hash: bSxHCFpkN/CklLzaYhYBIkRSJIpc71xfY6m0PfpaJC0=)
                          28: g7Pm1z6LXcQFAuPskG8TalVr2pM.roa (hash: P2ioruYdERQIew3LshFfydOJmIuHdF9YYETDdLTqhXM=)
                          29: hMPHyyxd0Ggkk5V5WC4xAU_Pgos.roa (hash: wet/Lf0Hgqkty7l3QoO0LxZq9eQL/UvJWj3IZKhhDwc=)
                          30: moigL1TF2AzvbMUnSuM0HeWYdnQ.roa (hash: zA1aP4/TeEw6hC0+s9IpRTSn0D+Z5Fv5tQgAGGRPD/s=)
                          31: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: nXbQLI5ItnEtm6OjDt82gPZqFmQLC/SVO6ZHrKjGY1M=)
                          32: oaIvJxFBKT6geFfldWpfnQzpJ60.roa (hash: 9BUOFMB1K7vMoCS0bxE9Zv0DHvXUFzKwirE/gHT9flY=)
                          33: p11_KO26kI9skLbbRwEoPXKQQkI.roa (hash: vfmu+YRhBGAn0nAAK+E0vdCLRRHvmpTS6/Dds7ZxTEA=)
                          34: pBGgBmEQnHkGnSKff3KcsM_dMTQ.roa (hash: yun1Xf1TqsJs/kXclp9m4FabKV8/2FmBFwGoCzNF7H0=)
                          35: sijNlEKoLVRaAa8-60P0ekJyr0s.roa (hash: n3FBPZWk92+DfaUsMqReII1srRKdearKRLVHf1BqXhc=)
                          36: spUsiWUlK-X75Lj6xpWlSLW6WwY.roa (hash: lt90B64HJxEMrRdRxUXlG8OH9nYjUxRs9ywJwtpFnDo=)
                          37: t0cA3ZMOtsB7I1EWG9plRCADyCE.roa (hash: WI8L61f1g12WImSZMXDiJ6MOeOEWS3qlRAx22RB3PnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:dc:d9:54:df:86:ad:bb:5f:ab:8a:af:96:ef:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Nov 22 16:02:00 2024 GMT
            Not After : Nov 23 16:02:00 2024 GMT
        Subject: CN=804a0f33c92668ce4d9c4628ee0bcb37d71e9141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:4e:79:93:c8:68:8e:a5:d9:07:60:8d:2e:
                    eb:ec:5c:bd:ca:dc:7a:5f:f9:7d:37:3e:70:5c:bd:
                    1a:17:bc:a4:8b:13:10:49:67:7a:06:05:32:12:49:
                    45:fa:2d:72:fe:55:2e:fc:90:ff:6e:26:dd:39:15:
                    db:8d:0f:64:d6:40:f4:37:c9:00:0f:cc:41:d5:eb:
                    87:95:c4:1c:09:0b:be:3c:d1:7c:15:71:54:6e:42:
                    95:42:ee:73:25:a9:af:cf:c6:2e:79:33:a4:e6:92:
                    0c:e5:12:4b:72:c2:c0:40:43:46:cb:53:36:e7:b4:
                    fd:0a:a4:50:a5:71:69:5b:20:f3:a0:7c:46:98:44:
                    09:f5:c4:03:b4:3b:aa:fa:13:45:37:9d:71:e2:ab:
                    6e:c0:7a:2e:89:14:f4:af:19:7c:83:1e:c2:d1:c5:
                    6d:e4:39:bf:d5:2d:fc:bc:10:12:3e:27:b2:66:96:
                    48:63:d6:11:db:60:42:77:51:22:4b:f9:46:b6:01:
                    bc:7c:0d:1e:df:27:cf:20:36:ec:8e:6f:82:2a:87:
                    92:92:0b:9a:6d:6f:75:ee:51:b6:87:e3:0d:fd:19:
                    f1:d9:e1:ba:d9:9a:e6:1a:6a:59:c7:e7:46:80:7e:
                    54:f7:7e:35:77:8c:96:d5:34:64:b7:f8:71:15:e5:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4A:0F:33:C9:26:68:CE:4D:9C:46:28:EE:0B:CB:37:D7:1E:91:41
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:64:26:3b:a0:a2:25:58:89:b8:de:ae:20:33:9e:73:da:
         1f:58:7b:f2:a1:da:8b:96:1d:c2:21:85:f6:7c:62:2e:0b:c1:
         4e:0d:6d:95:23:90:ab:7b:c3:7d:35:60:9e:57:58:a1:3e:6f:
         40:cb:3f:c3:bd:ec:ce:ab:1d:9a:6e:ac:8d:49:8c:1a:44:d3:
         42:3d:2d:37:65:68:45:ea:93:7b:ef:68:82:cc:dc:96:57:56:
         ff:9e:f4:0e:4f:09:97:28:da:46:98:b4:76:4d:78:b5:60:2c:
         1b:a6:1e:5b:93:86:b6:92:fd:95:8d:74:a8:56:eb:8b:e7:4b:
         a7:17:bd:f4:8b:04:78:42:f4:6d:91:b6:01:da:a3:0e:33:b1:
         13:82:6a:a2:4f:a1:90:50:8d:0c:1c:78:ce:8e:83:84:81:89:
         e6:75:cc:c2:66:40:af:7d:84:5a:f8:47:37:03:eb:ae:7e:ad:
         c9:24:e2:c9:d0:ac:c4:91:97:d0:27:f4:a6:d3:f7:51:42:fe:
         c4:ce:42:08:dc:b2:cb:45:93:2a:f2:cb:54:bc:1c:5d:e9:a9:
         c4:76:49:a3:17:f2:e3:37:1b:dc:cc:7d:0c:97:0b:48:4e:c4:
         8b:a5:d3:d9:e9:bf:b2:87:ee:42:75:9c:f8:de:53:ec:47:a2:
         2f:3e:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----