Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          +i9UpGo2yWyatovfh7uB9O8u9sDCyLGIGulBIrN9GCo=
Subject key identifier:   73:DD:E4:FB:55:A4:10:86:00:A1:C9:4E:AA:05:B1:01:84:7E:CF:AC
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       018FBDC9AD1D5565B4AA7F91202C26617F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          04EA
Signing time:             Tue 28 May 2024 06:01:01 +0000
Manifest this update:     Tue 28 May 2024 06:01:01 +0000
Manifest next update:     Wed 29 May 2024 06:01:01 +0000
Files and hashes:         1: 1ApCj1mTKGawNsfwzr18sOFA7J8.roa (hash: NnlubluZDlMJf3QvMT0KFthGvW5hM+M/CcBDX+IMPQw=)
                          2: 4g8_u0bsEXzbmeX0REKamwOumC0.roa (hash: 2B4xB792i+8BnvOO1kuQgIhBrAKv2KlLp9olmMlDsPg=)
                          3: 7pPa5Xh8PW297wWLLi9UYAYU7vg.roa (hash: R+ihgl+yjmP3xJ54QDDB+r1oJt513HLffhVvEeCikUQ=)
                          4: 8MInqxj4916UiKo1GLX9fXcvi_Q.roa (hash: wbiVc6D/p7ury1PWHB28KS/FZ7SipCbEvFb97JeS1jI=)
                          5: BehJ3cgG5BTTJz8pN9ZTVxK3Vtk.roa (hash: Ds91fNGjfU1LLHCydfKE30ldfDKqFETGjbrMBD2ryjo=)
                          6: Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa (hash: 3yswKjvcZEV1OZjckujfoBGmCCvoppTNrnGrFd/R27E=)
                          7: Doax2lNTyCsTAl4OZyPQbhpZiWo.roa (hash: DNZw6G0yigWsm6ZECP/aWwtk5BuKwTey75Y2gK6xNWw=)
                          8: MgGI7B3fjab8TDG9TqsDbBpzIuo.roa (hash: qF8Sb0iuLLd9l8hswuRKDq+U6ctKMzkl4p/eruCW1ec=)
                          9: QqIcYvGsEJ8pIwpok5K_jVxdbgc.roa (hash: kXwj+Bhl9oYYqQqPG/hBdgUQEY46GqyLVLeaOR7Twak=)
                          10: SepNI5BvNqZrKQQ0FfT7pr1pdeg.roa (hash: ga3FlFqUPF78mWs86DFnDk2WxYprTEnaWthB9skXHok=)
                          11: T9IGzX4jznxZBQurk7rAdD3rCpw.roa (hash: wC1/bruaf4MOZ6/2wp4+kiDH9QhPeHh20gkZhiRYrGE=)
                          12: XAI2UqrMpufn-4VDS0I-zHzSApE.roa (hash: TO23SsXBjJW/ueHqPFts3VaqwklMyMCyjFHDJmUSNeU=)
                          13: XHBAZfNMxptI5_0VPGJquMV1Hho.roa (hash: xXFEIyKE2e57KWYjfe6BvMX8d3luQz4OJwofWv0hA4g=)
                          14: _8XCcFEdxETexy0Dqw358b3NoPE.roa (hash: iYt/FD00ew8W5BpQc2CBuaWRLFVEUHRP7dx0nzpO39I=)
                          15: _MCpzUFozB8AKVYlTpuz2A7wfCE.roa (hash: GsiaFwEdtPHr49gfNK4IYUi2FWFgxgW4k5hFJD9HVVs=)
                          16: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: CiUPj9Lb3TcmSz39ly9s+2KCzhLJiY579JLCbGyDChA=)
                          17: cq-aHm-UoUn0CnLPrgfFz8I21CM.roa (hash: 2OVQIOeRpyUInQSn+XI7VTU3nU9Fwlsfgmq7P3AoKy4=)
                          18: fa9bgVzG_NqW505Mr9fKcyQox0Y.roa (hash: e96VaTYxTsBVb2yjFKMWL0FYHJK7j/D8/BLvGgMAUHQ=)
                          19: h1S0ILwwnxtd73LeXJx_s4eu-0g.roa (hash: GnUWmXYg/7kqcvNPgW7PBgJ+PNvCRgdMDTZ74uiRD4I=)
                          20: idgfV6mOa2fOKgvftqR9qxBn-6w.roa (hash: dDJZDHwb5UeXXYmk7D6i9HLy8LMSCPV0HjsNhT/d1Nc=)
                          21: jc2C7IxpW78uAHvLhqllOQqx_Fg.roa (hash: FOQBY3wUNvxVA1j+o9KqM2GRFV1alJrPoPyrXy9CNPg=)
                          22: kTgL49kQNf0VYKBenIZY6s5PXfA.roa (hash: COVmLrXX9uwQYMqriLoDJAMGejweT0D5Z9JHgtsXrNM=)
                          23: n3dFzTvlFo8Xx8pJRpz2-9Q6_sY.roa (hash: QLCvypYAbCeCTFOCWGM+/Eu1ub5SCMgx2bTGWsW2RIc=)
                          24: nwJlYFnSzwMt9vuF_AchihpPMOY.roa (hash: KGa47Wfm/zawLn5n4gdW9tWD506ftzW586Vgf7erAoM=)
                          25: shBcqHuMYK54d2-eNKu3BbfoK8U.roa (hash: EXUTP2yBA6T0WhfA+VjPiXIhfIqimWYXi3ahF/xrwLg=)
                          26: uVSAc-7R8-HSu0eHKVzbPB1CYNI.roa (hash: gaDareia1D56tBGup8i2V/dk9lJOFJ3ruRoE70+wyNc=)
                          27: v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa (hash: FtjXNDtPIxdU08+61hineZ098noqQ1vhwcMoisRAyYo=)
                          28: vHA8o25Y95MWMNzt-3xy6YDPJts.roa (hash: wtNOLZFwsEQR4QmUFb6bp5SdhZWkDpYOvYmYW0zwtO0=)
                          29: vscmmUwEbAves4B1AekzWuGiH0o.roa (hash: NWKtjuA3cdWoIObEjBmnwCjnFJHzdoD0eGyI26NBHtw=)
                          30: vvqrVx6MEgbucf7NrZod7R1_Wsc.roa (hash: fJXSO/96x3K2jI5YAOMP25YdNvp5abo8niLPxxKDkdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bd:c9:ad:1d:55:65:b4:aa:7f:91:20:2c:26:61:7f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: May 28 06:01:01 2024 GMT
            Not After : May 29 06:01:01 2024 GMT
        Subject: CN=73dde4fb55a4108600a1c94eaa05b101847ecfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:25:f6:15:88:19:35:f4:fd:78:00:5a:ce:
                    c8:be:11:bb:c3:80:d2:2e:29:30:2d:6d:21:ce:55:
                    84:4e:08:30:4d:b8:20:e5:4f:4d:4b:24:e1:a4:06:
                    80:38:49:dd:19:21:d6:be:03:38:3f:c0:1b:6a:f3:
                    f5:7b:f2:fd:00:9b:31:64:a5:39:82:54:b9:71:d2:
                    13:1b:c2:a6:0c:0a:93:d2:c0:16:64:3c:a1:18:10:
                    b4:38:3c:0d:4d:9d:7d:c8:71:5b:64:4d:28:0a:84:
                    99:2b:11:6a:bd:fb:16:c1:3d:97:b0:14:10:1f:20:
                    49:4f:54:7d:e5:31:27:a5:32:4d:fb:5a:84:b6:40:
                    5b:0b:c1:e9:a9:26:ea:a4:15:84:96:f7:ca:87:22:
                    7c:d5:ee:e5:4f:47:99:5e:19:99:dd:63:29:9b:f2:
                    aa:36:f2:29:fd:b5:85:7d:a9:c7:85:86:d6:d7:ed:
                    10:a7:13:3d:81:db:b1:58:84:44:f7:0c:16:1e:7d:
                    61:d6:72:ed:3b:16:5d:ab:41:42:0d:54:d9:9c:c5:
                    1f:55:cd:88:be:a8:36:2b:2d:8b:56:b9:57:f4:e6:
                    e0:75:fc:65:5a:9d:6e:9d:d3:39:ae:9a:cc:d6:2f:
                    de:b3:42:90:23:8c:40:4c:cb:0c:55:7d:30:a9:3b:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:E4:FB:55:A4:10:86:00:A1:C9:4E:AA:05:B1:01:84:7E:CF:AC
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:d0:5c:b9:e9:9b:23:88:d3:09:eb:00:3a:2b:8d:a0:bb:
         49:ba:95:b3:7e:f1:d6:1d:e9:b0:8c:af:9a:8e:3d:f1:f8:3d:
         9b:3e:96:b8:9e:62:e7:7f:07:04:16:d2:d3:48:5e:ae:81:77:
         85:fa:4b:1f:90:a0:0c:a4:3f:1c:fc:e1:43:4f:6e:46:64:74:
         48:2e:29:eb:35:8a:ee:5b:63:bb:db:71:e2:99:25:84:a0:f5:
         0b:61:03:76:bc:8a:a5:98:f4:8e:f2:57:88:40:45:8f:13:4a:
         db:a8:b7:da:71:c4:4d:f8:45:9d:61:b7:5c:cf:2b:17:11:24:
         bb:4b:6a:76:f6:19:e0:54:b9:cb:2e:e0:ed:41:c6:ef:21:7e:
         d9:6e:f9:16:ad:3f:7b:22:f2:4a:fc:e7:8a:e4:7f:c4:0a:ec:
         a2:a0:1e:ee:da:38:2f:5b:02:bb:96:60:e3:e7:66:3f:5a:6c:
         89:81:51:b9:6b:43:ea:a8:09:e9:2b:8b:fb:fe:d5:2e:85:f9:
         2f:a3:b8:4f:1e:70:f5:e6:4b:ad:16:a0:5a:8e:e0:0c:7e:84:
         54:90:a4:df:3f:dd:28:23:a9:ea:02:ce:a9:9f:fb:76:07:68:
         eb:3f:b3:2d:54:1e:b5:c3:2b:04:7f:9a:cd:19:e1:bb:1e:17:
         f2:38:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 16:12:00 2024 by rpki-client on console-ams.rpki-client.org