Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File:                     DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier:          Hpi5GxCSd/ezNdBMaJBpZJ04oAO9a4lk+2SwfhFt788=
Subject key identifier:   0C:B4:BE:27:DF:57:64:A5:8A:3E:48:C3:28:E5:C3:9F:96:18:EA:10
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01904008DAE4ED9365B30889EBCB33D2ADB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number:          11E0
Signing time:             Sat 22 Jun 2024 13:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 13:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 13:00:40 +0000
Files and hashes:         1: 20q5ylf1YJsm8RXiEl85HQxbM0g.roa (hash: PLHieY+cBGvE+qmRqwBONLcwgkYlaPVnIJ0MzjRIXVY=)
                          2: 2gUjlPsHqb_ncJcZ78sLRgGxgm0.roa (hash: 6pPasbljOid/unjMtz4muULDrAeLY88ZGgh5fs7tFUA=)
                          3: 3D7rJFyhnPBQv7KbLuLvgJxN48U.roa (hash: eFSTwFQuCpY+9JuTu481CDzZ+JcTAWphQkHvsTWt1qU=)
                          4: 3kJfKaEdoRO8F1BsxeAb1_F-eO4.roa (hash: nWHbcOJ7nJfQ34U+mLXxnYhPaiW6rMc/NRjtTtnEFys=)
                          5: A4ETMnVpd9FKMsWr1xoGVNiRnQ0.roa (hash: om1gO0GDBD6gvouVjflpQK4UVmpP3oimb5oVnEzGSHI=)
                          6: C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa (hash: 29omU0S1FzDixXTVjlH5LMOkvtB6uWxUWAQvxa0RxFY=)
                          7: CicAHWRR5XOwNMJCvxwZATnlww8.roa (hash: HD4XTQ66LapfO87iOiV3HPYGdxRYCImk1DdsXwOnng0=)
                          8: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: kH4YISUDCmmmqySGFNcdcbaSwnpWqLWiA36yE5qbqJ4=)
                          9: DS3A8f598VOd6_-2g-KDEl73Fh4.roa (hash: eJzg7+d7/JBTEKtsOdD1OZfc+ifYUlRADs9hIT64vvA=)
                          10: FEmNV6RCXEyXSd2kVJ8L786goBY.roa (hash: bb6RMCGc4tJgnUSuQIuxYAR34DxEQ6c3anZt6NKD4o4=)
                          11: NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa (hash: TJ7gN7ruytFjGwlTLNh7t1tWjn1CMeZhzRnEQtjhluU=)
                          12: NhO3_RjbYIpGKWdlFLCubHI1S1Q.roa (hash: Bx1MYNMWhkMUsNXeW8txyueZdiri180rcR0ME4YiE/o=)
                          13: OeKoXcd26vyCg9h0RkAhdzBSnoo.roa (hash: 1lzGTe/X4eOGN99jeD4ND4SYrGHbTm9yHFyQfmgf0fE=)
                          14: PG7Zf8aAWfqw9tKBN6g1hjNwDPQ.roa (hash: sPDzBzy3QYxqJx/oMxGQ1FFccqsNGIFk/vyJOo8gdvU=)
                          15: S2abFgVBaX0vxIMVaBvfqkautT8.roa (hash: ZIJ5a+Cyw/DlmQJsbFP/o6mLYtorGNIc27EwACJUnDI=)
                          16: U9dcbHPHf_3ASAJ7POK5fWlL5uw.roa (hash: 3eIXlWjf9tJGyYVtPsciWlDO1pjT8+VzuGXX6vdJE/Y=)
                          17: WymygCcy2Cth2XCvGhpRvzNvm8U.roa (hash: saRq3HRvr89AG4wdqhPbp/MCJcv27U/aycPomon4sMw=)
                          18: XgFgH_9RQY6v5e1k8toTXe3dGdA.roa (hash: mjUBb0W676jXnwpAo0EqjPP4mAvi+5/TfeXi0bh4ZJI=)
                          19: duyt9Q95uxdJTfQpIcIlJc-dN5k.roa (hash: aJN1l/17Ww/SdimLNISIp50voX+ETKkoGnJIVTr+Ej4=)
                          20: gKxNSLaRPEFnDExhi75buJWdrpU.roa (hash: SumVMzb4NtPBdfqqjxWXnD82kQ3CCubj9rTDNwTZufM=)
                          21: j2u66JaywmoFYWfPIADVdkPFJQ0.roa (hash: Em5MQjkqzDdxE+eTy+VgcmbQciK3FMpXD4JxzeW/9JQ=)
                          22: mSiIWURkQkpONEXeScvdUxN-Rrk.roa (hash: Dbf2NNHLkjwbVRVdC0AdCaSnEu/8byFPH6WOmdVAUAM=)
                          23: pCkXekt-IN15CD9_d0JUkoetpLY.roa (hash: Ic8KLXKTsRta59ty8Jlls4Nhokb7B889HKvIqQ+FqvM=)
                          24: rUzBuLfMTnGa0Sw4qWDG8MdNv8Y.roa (hash: xgXz1M4afQozNwIOLdafkUm7BvYEWhyCq4btNRWRY+M=)
                          25: so3611zKNeWDC7xRB_gxQRKcfE0.roa (hash: 1I8I3fP+BXgxqvv4+VEimTztqZSIqwxgXnPKlgwP0KE=)
                          26: tXzCu7HU1iQIa1IG46ejSsoHoTA.roa (hash: 1qFE0LUluZ0P/Oyt+0AJYBKNasL68koX7VEUM9iuHz8=)
                          27: uE7fBnbRHYfmBCkHPxXmbGGjA8o.roa (hash: qoYnsB8xu2nQbGo8D50i97IapNq2JumQn04kxc9+nE0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:08:da:e4:ed:93:65:b3:08:89:eb:cb:33:d2:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jun 22 13:00:40 2024 GMT
            Not After : Jun 23 13:00:40 2024 GMT
        Subject: CN=0cb4be27df5764a58a3e48c328e5c39f9618ea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:63:f9:59:1a:7e:00:2f:a3:74:4a:3b:f5:
                    c6:b0:fa:6b:2b:72:da:17:e9:8d:9b:01:d2:be:4d:
                    cc:a6:53:53:1d:51:d7:24:b7:92:54:2f:f6:d1:3c:
                    0c:d1:16:98:3d:74:da:d0:1b:a7:26:a6:93:3a:3e:
                    30:c4:a9:c1:42:06:ad:2a:41:eb:ce:f5:ec:51:dd:
                    af:10:b4:0b:cc:3a:b5:c7:10:c1:07:b7:b2:4d:00:
                    46:77:8b:c0:7a:86:37:3e:fa:aa:77:13:0f:e3:59:
                    e9:91:52:6e:46:84:71:8e:85:d8:8d:71:58:b6:9b:
                    cf:84:ff:a7:ca:46:c3:88:8c:7b:f2:0b:27:ce:5e:
                    b2:90:b0:42:00:56:28:52:cd:0c:c1:3f:59:97:a7:
                    52:a4:2f:31:4b:f0:10:3b:4b:88:be:f4:a1:bf:de:
                    f3:a0:5c:df:62:ff:4f:ab:56:f2:fd:d2:39:9b:e9:
                    e7:e7:98:d3:84:cb:07:63:76:e3:d9:16:30:fc:ce:
                    ff:c6:a5:b4:2f:20:aa:fc:36:d0:94:d4:1c:a8:24:
                    30:19:9e:a9:d4:d4:43:b4:31:71:9a:d8:d6:70:81:
                    8e:58:5f:a3:29:09:ab:ef:e9:46:a0:e6:fb:10:32:
                    c2:75:77:b7:34:2c:a1:19:41:25:10:7f:ca:26:2a:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:BE:27:DF:57:64:A5:8A:3E:48:C3:28:E5:C3:9F:96:18:EA:10
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:25:17:0f:9a:e0:54:f9:cc:c3:78:3a:2c:56:a5:d4:67:f5:
         75:76:80:82:ac:bf:21:a1:b3:eb:d7:ea:a8:e1:9f:de:58:65:
         8c:7a:d4:bf:40:6e:87:60:d1:7e:d8:38:62:69:e0:19:be:e3:
         c1:42:a9:14:03:00:55:a1:ce:6f:47:f5:3f:1b:fc:98:e3:51:
         c2:5c:39:74:1d:83:53:91:22:4b:16:8a:9d:5e:ab:fa:ef:8b:
         98:33:63:75:46:00:1f:0a:ab:af:be:c2:2c:37:95:99:12:6f:
         2f:26:33:a3:45:39:c7:b1:6f:45:71:13:f1:2a:db:11:1e:24:
         12:27:b4:95:94:10:80:df:bc:c4:f3:ca:50:f4:ea:51:3d:c7:
         14:0d:41:e9:de:8a:c3:b7:60:2c:30:a1:0b:8f:a2:84:1a:a1:
         e4:f4:3f:d9:db:d4:c5:11:5d:11:c8:77:b0:69:3b:9b:be:1f:
         a1:ce:0a:17:eb:3d:28:ff:53:58:69:01:26:60:78:91:f5:45:
         30:b5:9e:1d:54:64:10:26:5c:8b:3a:1a:ae:ee:5e:05:3a:cd:
         7a:23:1f:84:e8:b7:dd:31:f1:f1:3a:5b:44:57:2e:53:de:d0:
         dd:44:29:1f:b0:90:5c:c2:e0:f6:df:2c:95:7c:61:1d:06:21:
         f8:9f:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:07:12 2024 by rpki-client on console-fra.rpki-client.org