Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          +scLG7fBWhuquANZlHLgz6uB9EKfYErRIvm+b6mniCY=
Subject key identifier:   19:A1:E5:60:28:06:57:2A:36:83:1B:76:50:D8:2B:78:F3:4F:12:27
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       01935207BF7F75D089CCB9B9710FCFB035D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          06C7
Signing time:             Fri 22 Nov 2024 04:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:59 +0000
Files and hashes:         1: 1ApCj1mTKGawNsfwzr18sOFA7J8.roa (hash: NnlubluZDlMJf3QvMT0KFthGvW5hM+M/CcBDX+IMPQw=)
                          2: 7pPa5Xh8PW297wWLLi9UYAYU7vg.roa (hash: R+ihgl+yjmP3xJ54QDDB+r1oJt513HLffhVvEeCikUQ=)
                          3: 8MInqxj4916UiKo1GLX9fXcvi_Q.roa (hash: wbiVc6D/p7ury1PWHB28KS/FZ7SipCbEvFb97JeS1jI=)
                          4: BehJ3cgG5BTTJz8pN9ZTVxK3Vtk.roa (hash: Ds91fNGjfU1LLHCydfKE30ldfDKqFETGjbrMBD2ryjo=)
                          5: Doax2lNTyCsTAl4OZyPQbhpZiWo.roa (hash: DNZw6G0yigWsm6ZECP/aWwtk5BuKwTey75Y2gK6xNWw=)
                          6: MgGI7B3fjab8TDG9TqsDbBpzIuo.roa (hash: qF8Sb0iuLLd9l8hswuRKDq+U6ctKMzkl4p/eruCW1ec=)
                          7: QqIcYvGsEJ8pIwpok5K_jVxdbgc.roa (hash: kXwj+Bhl9oYYqQqPG/hBdgUQEY46GqyLVLeaOR7Twak=)
                          8: T9IGzX4jznxZBQurk7rAdD3rCpw.roa (hash: wC1/bruaf4MOZ6/2wp4+kiDH9QhPeHh20gkZhiRYrGE=)
                          9: XAI2UqrMpufn-4VDS0I-zHzSApE.roa (hash: TO23SsXBjJW/ueHqPFts3VaqwklMyMCyjFHDJmUSNeU=)
                          10: XHBAZfNMxptI5_0VPGJquMV1Hho.roa (hash: xXFEIyKE2e57KWYjfe6BvMX8d3luQz4OJwofWv0hA4g=)
                          11: _8XCcFEdxETexy0Dqw358b3NoPE.roa (hash: iYt/FD00ew8W5BpQc2CBuaWRLFVEUHRP7dx0nzpO39I=)
                          12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: GuOXRnk/Xwv4pvGRuKRg2ng5/MrZNwK3vJdmurtXqIk=)
                          13: cq-aHm-UoUn0CnLPrgfFz8I21CM.roa (hash: 2OVQIOeRpyUInQSn+XI7VTU3nU9Fwlsfgmq7P3AoKy4=)
                          14: fa9bgVzG_NqW505Mr9fKcyQox0Y.roa (hash: e96VaTYxTsBVb2yjFKMWL0FYHJK7j/D8/BLvGgMAUHQ=)
                          15: kTgL49kQNf0VYKBenIZY6s5PXfA.roa (hash: COVmLrXX9uwQYMqriLoDJAMGejweT0D5Z9JHgtsXrNM=)
                          16: nwJlYFnSzwMt9vuF_AchihpPMOY.roa (hash: KGa47Wfm/zawLn5n4gdW9tWD506ftzW586Vgf7erAoM=)
                          17: suCJ9ht0BT9v5QAQAAHrg4C-FEg.roa (hash: G20bH4mMJ/POb7cdAdj9vYGARzqqhU3SvN2CgXaGpiw=)
                          18: uVSAc-7R8-HSu0eHKVzbPB1CYNI.roa (hash: gaDareia1D56tBGup8i2V/dk9lJOFJ3ruRoE70+wyNc=)
                          19: v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa (hash: FtjXNDtPIxdU08+61hineZ098noqQ1vhwcMoisRAyYo=)
                          20: vscmmUwEbAves4B1AekzWuGiH0o.roa (hash: NWKtjuA3cdWoIObEjBmnwCjnFJHzdoD0eGyI26NBHtw=)
                          21: vvqrVx6MEgbucf7NrZod7R1_Wsc.roa (hash: fJXSO/96x3K2jI5YAOMP25YdNvp5abo8niLPxxKDkdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:bf:7f:75:d0:89:cc:b9:b9:71:0f:cf:b0:35:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Nov 22 04:00:59 2024 GMT
            Not After : Nov 23 04:00:59 2024 GMT
        Subject: CN=19a1e5602806572a36831b7650d82b78f34f1227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:5b:30:69:ba:ae:d6:9e:11:10:2e:23:c8:
                    bd:07:8e:ba:90:51:c4:24:8d:c0:9c:4e:c6:a0:c2:
                    fd:c5:ae:c0:23:dc:c1:c8:cd:2d:41:d8:40:21:42:
                    4a:78:31:d2:06:fd:b5:d1:ca:8a:20:3d:9f:88:dd:
                    fd:74:72:cd:8e:a3:76:c1:76:ba:a1:09:ea:1c:5b:
                    12:7f:82:c7:ee:10:6d:36:2c:80:c8:25:be:00:f3:
                    4f:66:94:96:ce:33:7b:00:a3:62:1d:01:3e:50:b0:
                    c0:0a:d9:73:1d:e7:4a:d3:bd:2c:54:3b:66:f7:ab:
                    61:4e:0c:6c:0f:12:ce:d9:25:8b:e4:f6:a5:82:e5:
                    f4:d4:93:d2:4c:41:f2:1f:a3:02:c1:77:76:e0:c6:
                    93:a3:92:fe:a6:0a:64:92:84:6a:b9:ee:9e:e1:15:
                    34:6c:52:a8:71:2f:bc:c6:8c:35:49:61:db:bb:f6:
                    50:5b:d9:d3:c4:f0:fc:b2:71:75:88:ab:42:a9:74:
                    d5:0c:da:a4:3d:65:aa:83:18:45:56:06:79:32:13:
                    02:a7:1f:0c:01:27:95:23:51:aa:5a:2c:6b:f6:85:
                    b3:71:ee:ad:77:b1:21:3f:56:3b:d8:1e:4f:51:c4:
                    66:e2:42:43:f0:f6:2e:ba:e3:6f:a0:fe:54:ef:69:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:E5:60:28:06:57:2A:36:83:1B:76:50:D8:2B:78:F3:4F:12:27
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:43:0e:18:2d:97:99:01:ba:cc:0d:f6:37:0e:c0:5e:ba:
         16:e9:68:d6:27:c9:aa:3f:b6:23:a8:d7:3a:75:da:39:04:a7:
         75:72:64:2a:dd:d8:99:d8:a4:34:da:ab:ed:a7:96:2e:90:56:
         2d:8d:f5:28:47:59:ca:85:0b:37:0d:97:3d:96:60:fb:c3:db:
         c1:8c:04:a1:b3:c9:2c:81:1b:ef:ea:45:7c:d4:dd:f4:4d:f9:
         0b:2b:4c:f0:cd:16:e0:0c:6d:3e:2d:9f:ed:3f:36:04:ea:5e:
         e7:a4:6f:4c:ac:74:e5:dc:ba:e1:11:ff:ba:a7:24:72:c1:72:
         ec:60:d0:a8:93:14:79:46:24:f7:0c:0b:3e:df:77:af:40:d6:
         18:ac:7e:dc:29:f7:26:75:27:fb:54:f7:da:00:93:f6:7a:a0:
         83:39:37:61:91:a0:b5:c5:89:08:2f:3d:1a:9c:3b:a9:6b:96:
         4c:c8:b8:02:f5:4a:1b:57:7b:f8:ee:43:c9:a5:48:25:19:03:
         22:97:78:db:54:a6:8e:5c:27:f6:aa:42:0d:09:a9:37:57:3b:
         38:f6:60:44:ac:eb:c6:22:63:90:4a:97:dd:c5:9f:c0:01:77:
         e2:18:bb:7c:e0:70:17:22:24:e9:95:75:83:47:ad:65:c4:f9:
         7d:00:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:04 2024 by rpki-client on console-fra.rpki-client.org