Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          IVRVtiURa4671oCdzNW7RLuEo8Ydji+2rg2fwGTGqFg=
Subject key identifier:   B1:CA:25:C2:6A:33:2E:BE:D1:BF:FE:13:9B:94:56:81:DE:02:16:84
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       018F87B6CB701943DCD14D6E8EE439236746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          04CE
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: 1ApCj1mTKGawNsfwzr18sOFA7J8.roa (hash: NnlubluZDlMJf3QvMT0KFthGvW5hM+M/CcBDX+IMPQw=)
                          2: 4g8_u0bsEXzbmeX0REKamwOumC0.roa (hash: 2B4xB792i+8BnvOO1kuQgIhBrAKv2KlLp9olmMlDsPg=)
                          3: 7pPa5Xh8PW297wWLLi9UYAYU7vg.roa (hash: R+ihgl+yjmP3xJ54QDDB+r1oJt513HLffhVvEeCikUQ=)
                          4: 8MInqxj4916UiKo1GLX9fXcvi_Q.roa (hash: wbiVc6D/p7ury1PWHB28KS/FZ7SipCbEvFb97JeS1jI=)
                          5: BehJ3cgG5BTTJz8pN9ZTVxK3Vtk.roa (hash: Ds91fNGjfU1LLHCydfKE30ldfDKqFETGjbrMBD2ryjo=)
                          6: Bkg2pm5q2fYJFQWV8GTjWK3GI4k.roa (hash: 3yswKjvcZEV1OZjckujfoBGmCCvoppTNrnGrFd/R27E=)
                          7: Doax2lNTyCsTAl4OZyPQbhpZiWo.roa (hash: DNZw6G0yigWsm6ZECP/aWwtk5BuKwTey75Y2gK6xNWw=)
                          8: MgGI7B3fjab8TDG9TqsDbBpzIuo.roa (hash: qF8Sb0iuLLd9l8hswuRKDq+U6ctKMzkl4p/eruCW1ec=)
                          9: QqIcYvGsEJ8pIwpok5K_jVxdbgc.roa (hash: kXwj+Bhl9oYYqQqPG/hBdgUQEY46GqyLVLeaOR7Twak=)
                          10: SepNI5BvNqZrKQQ0FfT7pr1pdeg.roa (hash: ga3FlFqUPF78mWs86DFnDk2WxYprTEnaWthB9skXHok=)
                          11: T9IGzX4jznxZBQurk7rAdD3rCpw.roa (hash: wC1/bruaf4MOZ6/2wp4+kiDH9QhPeHh20gkZhiRYrGE=)
                          12: XAI2UqrMpufn-4VDS0I-zHzSApE.roa (hash: TO23SsXBjJW/ueHqPFts3VaqwklMyMCyjFHDJmUSNeU=)
                          13: XHBAZfNMxptI5_0VPGJquMV1Hho.roa (hash: xXFEIyKE2e57KWYjfe6BvMX8d3luQz4OJwofWv0hA4g=)
                          14: _8XCcFEdxETexy0Dqw358b3NoPE.roa (hash: iYt/FD00ew8W5BpQc2CBuaWRLFVEUHRP7dx0nzpO39I=)
                          15: _MCpzUFozB8AKVYlTpuz2A7wfCE.roa (hash: GsiaFwEdtPHr49gfNK4IYUi2FWFgxgW4k5hFJD9HVVs=)
                          16: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: GPUFvibrJacfce6vSezXJznWE5kqWfw7nqCravqbt/Q=)
                          17: cq-aHm-UoUn0CnLPrgfFz8I21CM.roa (hash: 2OVQIOeRpyUInQSn+XI7VTU3nU9Fwlsfgmq7P3AoKy4=)
                          18: fa9bgVzG_NqW505Mr9fKcyQox0Y.roa (hash: e96VaTYxTsBVb2yjFKMWL0FYHJK7j/D8/BLvGgMAUHQ=)
                          19: h1S0ILwwnxtd73LeXJx_s4eu-0g.roa (hash: GnUWmXYg/7kqcvNPgW7PBgJ+PNvCRgdMDTZ74uiRD4I=)
                          20: idgfV6mOa2fOKgvftqR9qxBn-6w.roa (hash: dDJZDHwb5UeXXYmk7D6i9HLy8LMSCPV0HjsNhT/d1Nc=)
                          21: jc2C7IxpW78uAHvLhqllOQqx_Fg.roa (hash: FOQBY3wUNvxVA1j+o9KqM2GRFV1alJrPoPyrXy9CNPg=)
                          22: kTgL49kQNf0VYKBenIZY6s5PXfA.roa (hash: COVmLrXX9uwQYMqriLoDJAMGejweT0D5Z9JHgtsXrNM=)
                          23: n3dFzTvlFo8Xx8pJRpz2-9Q6_sY.roa (hash: QLCvypYAbCeCTFOCWGM+/Eu1ub5SCMgx2bTGWsW2RIc=)
                          24: nwJlYFnSzwMt9vuF_AchihpPMOY.roa (hash: KGa47Wfm/zawLn5n4gdW9tWD506ftzW586Vgf7erAoM=)
                          25: shBcqHuMYK54d2-eNKu3BbfoK8U.roa (hash: EXUTP2yBA6T0WhfA+VjPiXIhfIqimWYXi3ahF/xrwLg=)
                          26: uVSAc-7R8-HSu0eHKVzbPB1CYNI.roa (hash: gaDareia1D56tBGup8i2V/dk9lJOFJ3ruRoE70+wyNc=)
                          27: v0mBl6YQdMVuXPnOoWYLrsdVF8U.roa (hash: FtjXNDtPIxdU08+61hineZ098noqQ1vhwcMoisRAyYo=)
                          28: vHA8o25Y95MWMNzt-3xy6YDPJts.roa (hash: wtNOLZFwsEQR4QmUFb6bp5SdhZWkDpYOvYmYW0zwtO0=)
                          29: vscmmUwEbAves4B1AekzWuGiH0o.roa (hash: NWKtjuA3cdWoIObEjBmnwCjnFJHzdoD0eGyI26NBHtw=)
                          30: vvqrVx6MEgbucf7NrZod7R1_Wsc.roa (hash: fJXSO/96x3K2jI5YAOMP25YdNvp5abo8niLPxxKDkdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cb:70:19:43:dc:d1:4d:6e:8e:e4:39:23:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=b1ca25c26a332ebed1bffe139b945681de021684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:05:51:db:2f:41:27:06:a5:e5:7d:92:b4:
                    9d:4a:01:1a:a1:ee:93:d8:eb:02:a1:18:77:79:e6:
                    3d:d5:db:c1:d1:38:f5:d2:b5:e1:62:3a:4e:08:68:
                    d0:21:f2:7b:49:7e:89:c4:a8:99:c2:48:0b:71:3a:
                    00:88:4d:23:c3:d2:87:88:50:fa:52:1c:f4:bc:1b:
                    a5:24:34:3d:fc:08:2b:f8:87:c2:18:17:db:af:39:
                    05:82:2e:bc:f6:0c:67:69:fa:1d:29:7c:92:fd:c8:
                    b9:e7:6f:8f:b7:d5:0b:06:64:ff:3f:a2:fa:12:ac:
                    9f:b1:6d:03:03:6b:a5:bd:24:a9:f8:c8:12:c7:4e:
                    bb:fc:cc:aa:fe:9c:78:b0:84:4e:ac:66:9a:94:38:
                    bf:f9:5b:a7:30:47:c2:5f:ba:76:c4:43:73:6f:eb:
                    01:da:3b:ea:17:53:d0:11:9c:49:b1:ce:7b:cb:a5:
                    1a:1c:c9:8e:93:2a:f6:e0:c7:42:3d:ec:24:7a:ba:
                    c2:40:55:fa:bd:7b:5f:81:0e:7c:99:ea:3a:e9:63:
                    07:c1:fb:47:41:75:5f:44:48:95:e6:4a:8c:10:bf:
                    91:94:c1:a7:29:b2:26:be:8b:22:82:64:59:59:1b:
                    5d:02:b4:2d:6d:c2:5e:51:36:56:64:70:77:ec:9c:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:25:C2:6A:33:2E:BE:D1:BF:FE:13:9B:94:56:81:DE:02:16:84
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:fe:18:dd:24:a9:ac:cb:8a:b8:34:ef:09:c7:b9:cc:45:
         4e:dd:c8:5a:61:da:39:49:70:38:28:7d:46:81:71:47:45:69:
         9c:34:fd:be:f1:2e:d2:10:27:20:17:f8:ff:92:1f:06:2c:e1:
         30:16:d8:88:30:73:84:d5:ef:ad:6e:96:f4:ac:ad:d2:ef:66:
         61:a9:07:44:3b:9b:3a:58:0d:29:76:6d:a7:a5:41:c2:51:0b:
         db:a0:de:3b:93:04:a5:55:d9:80:a1:e6:a3:3b:3b:c8:1d:3e:
         64:e1:0c:28:ef:24:3e:7a:23:30:0c:77:e0:8f:dc:1c:21:e2:
         40:ca:fd:3f:cf:d2:9e:e1:cd:45:00:50:9f:69:38:0e:3d:44:
         82:2b:5a:f5:e7:1d:79:61:4e:ef:f5:6c:b5:8b:3b:1d:15:cf:
         14:ed:de:44:28:82:56:3d:df:d0:c9:fa:69:ad:ae:de:6c:70:
         72:ba:93:ef:b5:bb:1c:ae:1d:8b:03:6d:99:2e:5f:0b:85:24:
         ab:9d:87:e8:2c:27:91:44:cc:42:24:02:fa:87:87:d6:9a:a0:
         ae:5d:60:e5:f2:58:10:c2:d7:7f:fb:61:ec:fe:07:59:6f:81:
         fc:bf:01:36:5f:b5:9e:43:53:8f:ba:96:f0:c2:24:0c:9c:0b:
         a6:55:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:43 2024 by rpki-client on console-ams.rpki-client.org