Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          15Vc1K16QQ7a68szmtRwnCi3GrBkFL1OpMZnN7oJtTo=
Subject key identifier:   4D:84:6C:B1:15:FF:76:AD:E2:77:FE:3E:32:34:31:25:A1:9A:3D:D9
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       018F195552DFB3F896F50CBB15CC3E45BC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          11F7
Signing time:             Fri 26 Apr 2024 07:36:13 +0000
Manifest this update:     Fri 26 Apr 2024 07:36:13 +0000
Manifest next update:     Sat 27 Apr 2024 07:36:13 +0000
Files and hashes:         1: 1GQnhoHxvO12sIOE9ULYRIUjAAs.roa (hash: jkc9Rxp7Nw54g4Tnxdk2poHL7z1Ekux5MO35TfEYqgI=)
                          2: 1U07kM94jj1xWUpijO6toIqj2vk.roa (hash: t0vgR2J9QA7SHZVeIwwBuhJpDn8wb//Ub3t3ByTlD8Y=)
                          3: 4772q1PlRGLfeIkiQ5iGMWxTTYo.roa (hash: hhbo0fKKEuL5jxZX8R4EpzlP+JeFepAy50ZV2bHZ1LM=)
                          4: 4G-U-nxrvKc0YLwWXF_5ZfZAC6U.roa (hash: mEPCecyLbNPVqrVJf4bMiXAgs3yG9foNq4hxBY6SuIo=)
                          5: 5BrvOTs1gm0Ljf6eaKAVKwlD-MM.roa (hash: idNjihNscThiJLVHsK7XAC6nnHiij49qR+4ha/34EeA=)
                          6: BdLsoA_xWhGIoq9m__7cf7tBS6I.roa (hash: ORF5aTBn06GlNDeoJY+Mh+HqAhzJW0v2xoYnUjpSYLQ=)
                          7: E1rDxz-KB-clX6dnolqCgPpPAio.roa (hash: mJIYzmlxCc+u7FBOTj9zAr7TY4ic9nlMsq9jHbtcivY=)
                          8: G7oPoQNT9WOES6wngwHQQQgDKH4.roa (hash: DoCYVa5tb2evqgdas2zy++qY6RPopj7gXF5Qso3z2+Y=)
                          9: IQewFQa_K0TGHTrWI_okY4H7cnU.roa (hash: ZoSFfD3SU/iDeRzVxyToYLtL9onxIPk2EzFScm/Nmls=)
                          10: Jl4ifs-HWHp64ur5xhZx5ptHnF0.roa (hash: bKB4bPPaKp8DM9T3c6RkqNlwhhQwjLHRrGXuPU22faY=)
                          11: MtAvQ3z7TVD3NNN96IA-Ml7X4uk.roa (hash: sQ6iS27NqVv/m8dterdjHZUVz4J3Xb872xxjdUq74wE=)
                          12: NT0ZyTEZsafniIsuNSneB-6EY9M.roa (hash: FGEBwxdcS1t9RIm1sejquzDoT/zwO3v8fPWrJce/Jx0=)
                          13: O8ik9MUXpF-20Yaaq3dpGgrA0sg.roa (hash: QIcV7gai5QpbSCoJ+wQ9gi2Non5vBNLKZMvlzYgpXzw=)
                          14: OtL1v9rpnUGjF7gEM22t45sF_CE.roa (hash: P5n2+7DIKYkeBGT2CekWzwJYLNi8IhwJIsr2zzBExF4=)
                          15: S4kiUvDO1OFUGweZZoRvcDcQM4Y.roa (hash: G4LQgSvVQ+73ZfdDUo4G6bKqzLexvVLMGcM/Qlsx0rw=)
                          16: cT-sz-qb25ALGS25ufeJE7MlEfY.roa (hash: tLSNoQ1nIKwmaIAGHLjMfJ1rnCZ3wkBwPbq5F76ZZBo=)
                          17: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: 4jC5C7SxvVQMG41HjnVsBu8XBaWVz2jV4oicLBDIXA0=)
                          18: msMFq9XuUMlMmahqeI-gH_15n_U.roa (hash: Ex3SDnr3hjKbx4+TZ3Z/Ww0HnteJBsYlQq64EvYvxZA=)
                          19: p8C-36t2-13ujSPkMbq3VQVLS8s.roa (hash: vi0ZgSJa0aE2ZVnU9wRkt0Y8yW2kP4S9qGUlcsofzO4=)
                          20: pvcwqnzdiC4AV-ozjQJAtGfuMmQ.roa (hash: o807ObjOPHxZCFd1T0UTfe6NCGUm6oR8rZPhXRE7hMk=)
                          21: rqdWqqfnJ9iCdgVuJFBQBRXC6J4.roa (hash: +C/pN2My9jMFOc9btWvELClPcYFjNOYSBaurb/8tCd0=)
                          22: sCJ3S49zdB6ZyHi8GYwt_Q-YehM.roa (hash: /72g8lKoa88Bd1nZfvFgJARHDlWzhDNlhoup2v6hTGk=)
                          23: sjH4ILM-K4rcTpINgAeSg94iqHc.roa (hash: Dt08l8pn0C+nKTO85bDxjJl/DCJDJAm3ySkz0aRPrUs=)
                          24: ssxi-YywhmNPxdJMp-MJJj7Cuzg.roa (hash: sptl4YjjRQbDgOS5aaKl1Ge9rghLlRMX88Jj9g+LKt0=)
                          25: veSV3VL2_vB3MHgKwnK8sN3c36Y.roa (hash: 2b2cQBhBYwJq+s/lUrb78ls6c9Hq+/gfzUbPbAUFDzc=)
                          26: wa6FnuLL3UpFE-EUMy21bwkRKuU.roa (hash: vrNqPOx9dPZAYQv8BvKHwTAmXtI7YSJB91c8QL9a5wQ=)
                          27: xemF58jwNBCUUhdUMtkDxlrzCc4.roa (hash: /xxVq8W5QysKhL5iWdwdf0iecEt1W0gAvCL24LVlOdg=)
                          28: zfEl2n15l6qN4hoPTnvSl-KbSLA.roa (hash: eswGjoCLBiBqp2yd/+Rp7EfhglmpUjEj3QsWeEoGiuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:55:52:df:b3:f8:96:f5:0c:bb:15:cc:3e:45:bc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Apr 26 07:36:13 2024 GMT
            Not After : Apr 27 07:36:13 2024 GMT
        Subject: CN=4d846cb115ff76ade277fe3e32343125a19a3dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c0:10:b3:3f:df:af:d1:1f:7b:9b:35:f4:7c:
                    82:4a:2d:d8:fa:eb:e1:7d:8e:21:86:9d:7d:5b:fe:
                    eb:e2:0a:09:92:b7:2d:48:5e:25:bc:9f:7a:34:bf:
                    48:ee:fb:6b:be:35:64:6a:8e:d4:e6:f5:98:a1:ed:
                    cf:3e:20:70:bb:00:83:2b:39:52:8d:91:f3:a0:ba:
                    f4:ba:a9:13:1a:6b:a2:f3:3a:86:c4:aa:52:d3:a6:
                    b9:41:7c:2c:b4:a8:3d:c5:f4:1f:65:7d:b4:52:0f:
                    b8:77:27:fd:1d:f5:42:d6:e8:54:d4:a9:a0:d9:d8:
                    50:32:12:3f:fc:39:32:60:ae:c3:7d:29:79:95:3c:
                    99:b5:2e:e4:b0:9d:a9:37:01:59:c9:bc:82:0d:58:
                    9e:de:87:77:73:c7:3d:32:22:3b:3c:98:ec:93:b8:
                    42:10:b3:3b:8a:c4:bd:09:c5:6a:be:fd:9b:0a:84:
                    7d:cd:7d:c1:00:57:73:c5:8a:4f:49:01:09:56:42:
                    5b:11:2e:85:76:b5:a1:bf:1a:09:ca:e1:1f:cf:e2:
                    7b:28:be:68:52:9e:98:4f:b7:b5:b4:d8:09:97:18:
                    31:a3:ec:1b:1c:1c:dc:21:80:9d:9f:aa:88:44:48:
                    2e:56:37:b4:25:3c:9d:1b:64:4b:2d:5f:6c:15:91:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:84:6C:B1:15:FF:76:AD:E2:77:FE:3E:32:34:31:25:A1:9A:3D:D9
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:f2:2a:eb:81:e6:e0:3f:cb:73:02:07:84:52:be:7c:e9:
         10:6b:ea:cd:06:dd:00:92:bd:57:24:3a:a6:80:5a:37:32:4e:
         af:f7:dc:16:b0:ea:10:1c:b7:2a:07:11:58:a0:00:9f:38:a2:
         26:0b:48:68:c8:f2:bd:1a:55:27:8f:0f:e3:5e:28:5a:01:fa:
         87:0e:fa:c5:96:4e:b3:c2:e1:5b:2e:06:54:3b:78:17:c0:8d:
         05:63:31:a3:03:c9:15:1a:ff:67:8e:31:f5:75:9a:b6:82:6a:
         e0:cd:df:70:f8:dc:ad:9e:a7:6f:91:73:78:1a:67:e0:4a:d5:
         af:13:16:89:31:be:b9:ca:4b:83:64:c5:e8:1d:08:02:b5:44:
         99:fe:82:d8:6f:81:ef:2d:8d:a8:75:63:de:ba:a9:bd:ea:11:
         dc:a4:d8:20:02:8b:32:9b:e4:bc:92:a6:37:74:88:d1:2f:5e:
         a0:0d:ab:67:6d:22:72:22:e2:20:6e:4e:f6:58:e2:15:b5:f5:
         a8:a2:0d:2e:2d:83:44:c2:23:79:f9:b9:ac:2e:f8:44:d0:f5:
         c8:16:66:f0:dc:3f:4e:8d:98:dd:18:0c:54:97:b6:45:87:0e:
         76:12:89:2d:58:70:33:cf:29:56:d9:8b:a8:d2:e2:0d:79:24:
         c3:45:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 09:41:21 2024 by rpki-client on console-ams.rpki-client.org