Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          M7+9sBwegDjm+kbQE9GerlzQu7uURK7DiFWSlnL70l4=
Subject key identifier:   C9:83:02:02:36:40:65:20:D0:60:6E:5C:B5:41:A9:B0:AB:38:99:96
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       018F234A727CAC629EB4A88D7B83C1423384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          114F
Signing time:             Sun 28 Apr 2024 06:00:32 +0000
Manifest this update:     Sun 28 Apr 2024 06:00:32 +0000
Manifest next update:     Mon 29 Apr 2024 06:00:32 +0000
Files and hashes:         1: 1-JcucGPi_ZDGbYJ6MVR3u8JZDW8.roa (hash: DG0btEsDhiGM4RoQzrrSxO6aRragGbKTlAytC8rRxwo=)
                          2: 1-kTTfbWG9NkSfWX1RuNDsy5bfTc.roa (hash: OcgM/nX5HSeqjui3z/APE8L3iZkLGWMFmjGjyHA/tgM=)
                          3: 1-rxdfFJ9YyGN-xHSCB72dc2EZ-c.roa (hash: 9SJIgoH4IuIN0hOelBfxtD6T/gpzPOKnFCp5LP4S+Ow=)
                          4: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: exuhKjK1eq5skzbduoGRaXUQr03vtAhpUQhJhVw9Pyg=)
                          5: 4_NWUsyidVbz1_LISrkzixT64lw.roa (hash: Z1Y6E4fI9nwPdCO0FPVj08ElOwUp+5pzuj3qGOVt9vE=)
                          6: 64lIq_-PafcItgumSMXvmxkQEXI.roa (hash: 6/pPRRLzdSXB113UOaFXd62LjjsOohmRxxaWUyFAFYE=)
                          7: BkPdC4mcS2HToE9zsM1kbx71nWU.roa (hash: 0uNaR6Wz2uXc8/qmNWg+6Qe6F0WF4S8Xa2S6iRSxPVA=)
                          8: HRNXY-oATs2m5HgWECQ1ybF0Vt4.roa (hash: ec5+fvPRc5Y8lTJ3H1Dsere0YW+tdP7rMVZnZijQ9KE=)
                          9: RO8Kputm9sG1dwFfaYXv_Ad6T14.roa (hash: cRSCfH5EHNFCEmyWSDp5J9rb2R91LOuGh47KAiuJDbg=)
                          10: YUHdfmt4mpsOaPfPGXENhIs5Ugg.roa (hash: p87pw8TlBYACXBvEIKj1rsDrn5pgBEiPYqziCgWQrPo=)
                          11: YmAp41lC9tYrHA7qmTNZdrlL3Ms.roa (hash: vVwnBwZzRgRE+k8wHtwl2ZlcPT2gl69pHHScZYHzIM4=)
                          12: bXyIFuGcKRwgt4KRM9PIbgZ83wc.roa (hash: uBkotGmIibYMPTL2h/f9XOGv8QLb9mnsXpUuNDU2Fd0=)
                          13: dJe8H_JEgT_AbwbbuhdFLEJuOyE.roa (hash: KqJeIgbjcfDzPO+nXDY/MbzeQnpdfkKLF5yu/9U+sxI=)
                          14: j6DKQ1AfL44f95h4MXhz-ySWdtk.roa (hash: rpZ9yPL8D7wIbkQOs92Eaoxs8AkhDpPoiUmxrm2JbQ8=)
                          15: n04jeAVRbsx6lum4w-0JHrqtDUg.roa (hash: LHo+Tfxe3RaF7qcnX3BgTurVdElCc6z/uovmo8Dt6WU=)
                          16: o80vuntiOHyM_DGd8zJe24AzCZI.roa (hash: SQ6l+4+ufr3QSd4mD7NbJjK85h6jk9sPh9x1WVBfD68=)
                          17: oNQI8ZYMaF5OIDyM511rZZAs7Ac.roa (hash: A7LVhxV24Ut05GUdGtF68GqYUI6RTcmpu7SDVrRm4ek=)
                          18: pKfsCeDI13o3fi4mGJ4uyccQQ40.roa (hash: PiniPlesvPjWsm88JhA2nvGrOXDolaaQj31mFaGC28U=)
                          19: pvgX41Wy_vtC3mHGveHJ_bLEu4c.roa (hash: CPFj0DK55YJUkIvP7DkybeTXzSeCNrv0jzOxCS4ttCE=)
                          20: rL4QhDrsYI3g-VaskIZ61wW2NnM.roa (hash: GgF12ZVLFHaH3K5kNXTr16DG927H10GfGQBvR/AITe8=)
                          21: rlnANYhn0Q231-PfjCIDLWqigZ8.roa (hash: tYS4VBMCC5IOv+h+4UqQl4XLZr73w9nq5Q5PDJrqrrM=)
                          22: tVqASIQEwD97IlUI8vvogh0Lmyc.roa (hash: h+aCqM/6dRev+UZ7h0ZJvb0/hkWThEbPKlQgvNJUr+o=)
                          23: uS97Mbuu84hm7H0IVRbnJsvGpuI.roa (hash: I2DnDN72Uvf3hNrxNZRDFBichFf6T2Fqmn+af5znk8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:4a:72:7c:ac:62:9e:b4:a8:8d:7b:83:c1:42:33:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Apr 28 06:00:32 2024 GMT
            Not After : Apr 29 06:00:32 2024 GMT
        Subject: CN=c983020236406520d0606e5cb541a9b0ab389996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:45:63:dc:61:0f:21:1d:bf:82:bb:d0:39:
                    6a:35:61:10:56:31:12:df:06:6b:c4:ea:75:3c:ee:
                    ea:e0:cf:54:b7:3e:e9:5e:58:a1:36:68:2f:4b:93:
                    74:ff:51:52:ec:8f:4f:76:70:60:2a:22:1b:54:f8:
                    6d:e7:4e:e5:15:70:cd:78:6f:1b:26:18:35:5b:e6:
                    35:8c:f4:5b:f7:75:5a:a1:1c:e6:22:84:c5:3f:be:
                    9b:ed:ef:71:be:12:6c:5c:d4:37:b2:1f:c2:99:66:
                    60:c0:a5:af:30:e1:c9:46:ba:79:a4:dc:be:bd:16:
                    1c:54:f6:6a:7b:0f:6a:72:d9:d4:52:09:6c:48:24:
                    22:f3:60:cc:f1:61:b8:7e:50:9c:86:e7:de:0a:49:
                    68:c1:f1:fc:2c:6d:2f:16:e9:34:9f:52:6a:06:5c:
                    1c:d6:31:2d:6c:1f:da:88:86:6b:52:f3:4e:bf:5f:
                    78:1f:bf:0e:ca:40:21:2f:16:b2:cd:b4:07:52:f0:
                    2f:1f:03:7a:02:53:a4:f4:73:36:ad:2e:d3:24:6f:
                    55:d2:31:7c:7c:90:6d:f9:c3:73:5e:9b:a2:d3:fe:
                    ba:79:85:fd:00:85:cc:a6:b3:f1:a2:6f:23:eb:5e:
                    c6:e5:12:c8:ab:a1:fe:bc:ea:9a:45:74:b8:50:4a:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:83:02:02:36:40:65:20:D0:60:6E:5C:B5:41:A9:B0:AB:38:99:96
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:7f:02:09:0e:54:84:b0:35:b8:c6:47:bb:77:f9:64:b2:
         73:92:5c:46:5b:80:71:a5:dc:43:95:ac:83:d6:c7:7b:a1:6f:
         3a:4c:97:d3:77:9a:a4:f9:08:1f:20:1a:54:ee:7c:dc:6a:19:
         63:45:c4:7c:54:37:a3:80:9d:38:87:a6:b6:22:07:32:66:4c:
         59:12:9d:a2:d7:3b:ba:03:1e:8f:b9:2c:a3:5a:01:75:5f:30:
         79:39:74:0e:6e:0d:8e:84:03:95:9d:e5:8b:7b:ce:af:ed:f3:
         13:19:21:74:fb:b7:a1:51:cd:6b:b8:ad:c7:f5:17:0f:5c:9c:
         24:76:c6:43:8b:78:e5:70:ac:87:de:e8:84:9c:0c:3e:1d:ac:
         f4:54:ee:0c:6b:cb:8b:21:5b:28:c8:f1:79:fd:3a:4f:39:79:
         c6:35:5d:c0:7b:d4:da:bb:ef:67:76:7f:76:38:c2:c3:da:90:
         36:61:40:95:79:da:17:9c:1c:3b:13:90:aa:d4:c3:b1:5e:56:
         26:9f:68:6a:71:ee:a1:a8:26:db:9e:a9:56:83:d4:f3:b5:b7:
         8a:f6:ee:3c:44:8d:ae:aa:8f:25:1d:3e:b1:7e:b3:fe:a1:40:
         fe:7e:0a:65:26:fa:d9:d7:fa:09:eb:a6:cc:bb:94:0e:59:49:
         14:d1:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:06:08 2024 by rpki-client on console-ams.rpki-client.org