Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File:                     bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier:          FfCg3RdxMzrvdjWSZZBuugeuDuws4xIKKWZg+bkAfPg=
Subject key identifier:   B1:9A:3D:F2:E7:42:6F:EA:88:DB:8E:A7:A3:D4:0C:23:0A:D3:00:3F
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer:       /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial:       01901D467913822FB6A488610DA5FD872718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number:          10FC
Signing time:             Sat 15 Jun 2024 19:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:16 +0000
Files and hashes:         1: a6X3JHuxHKIxTVhmsJPuUx-LI78.roa (hash: 9ilOKG2yKGg5tgA9SgjgZNEx/xrIrTffjNWPltxT9Ag=)
                          2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: faLYIGLpbg6bvTWqMM3FIv691U4wsQbwBZqwOoOP5xc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:79:13:82:2f:b6:a4:88:61:0d:a5:fd:87:27:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
        Validity
            Not Before: Jun 15 19:01:16 2024 GMT
            Not After : Jun 16 19:01:16 2024 GMT
        Subject: CN=b19a3df2e7426fea88db8ea7a3d40c230ad3003f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:67:37:91:85:d5:ad:5b:94:f8:01:f2:20:d5:
                    0c:d1:69:2f:4f:b6:ee:fb:20:88:b2:cc:3a:62:8d:
                    92:c3:5b:5e:e5:10:3c:7a:fb:61:d7:df:e4:3a:fb:
                    2f:4c:c5:cb:7d:9d:2b:d3:a1:21:c5:54:da:e0:30:
                    a5:cd:ce:a4:a7:4b:43:2f:c0:c3:56:42:29:5b:ee:
                    b3:49:45:13:a5:ac:8f:25:bd:91:af:02:87:f0:ce:
                    c0:38:62:c2:df:2e:19:43:f6:fb:64:71:a0:72:77:
                    bf:ce:3e:59:df:59:46:4d:29:07:5d:d3:89:65:85:
                    1e:a4:11:5f:2b:64:69:5a:a1:29:07:d9:65:32:e1:
                    ee:37:de:6c:a3:38:5f:9f:5f:46:32:ad:bd:bd:cb:
                    56:32:f4:60:be:ad:70:68:06:6b:83:4a:9e:91:25:
                    54:da:af:56:65:3b:3a:f4:8b:17:6c:a3:ed:1c:d3:
                    84:d4:91:12:28:a0:d7:6a:8a:3a:d5:53:74:51:c9:
                    7e:67:c9:cf:91:29:1c:c2:fd:5b:b3:34:bf:e3:25:
                    25:d4:13:0d:08:46:7b:bc:2a:4f:da:08:03:04:f5:
                    2f:04:95:f0:3e:14:32:fe:4d:d2:31:ed:9b:fb:77:
                    31:fd:65:0c:b1:63:e5:38:66:d8:6f:bb:70:4c:e4:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9A:3D:F2:E7:42:6F:EA:88:DB:8E:A7:A3:D4:0C:23:0A:D3:00:3F
            X509v3 Authority Key Identifier:
                keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:87:10:02:00:82:24:da:02:2f:50:25:3a:89:45:41:ce:
         27:a6:a7:72:4f:dc:a9:0f:19:1f:88:57:12:af:11:70:39:43:
         2c:44:0e:38:2d:4a:28:d9:bd:90:9a:db:4b:ce:39:86:8e:84:
         70:e8:aa:9b:e4:54:7a:d0:9c:2a:15:e5:33:8b:eb:e5:2f:f0:
         e1:22:3e:bf:f4:ff:53:f8:8f:a4:79:96:c7:1f:a1:e2:66:ad:
         67:4e:c6:46:17:f1:f1:19:b4:c2:35:69:1e:94:7f:cb:cc:fa:
         ef:33:42:ac:77:28:69:3f:b1:ec:3e:9b:5f:7e:cf:9b:dd:14:
         d6:42:bc:e5:e4:c5:d0:aa:79:11:ae:d5:84:fd:db:7d:30:57:
         86:d7:cc:70:06:35:5d:dd:38:f0:c5:7e:88:56:ea:31:ca:f7:
         29:ec:a6:ca:12:c4:f1:c1:dc:6a:d2:b2:d1:95:38:21:05:25:
         7c:c5:02:b6:49:7d:1c:3d:7c:e9:92:be:cd:a4:3b:ce:4a:52:
         4c:4d:5d:9f:cd:a4:f7:a2:97:32:ad:32:32:50:60:f5:0e:ed:
         50:cb:ba:66:e6:98:6b:91:5b:5c:84:d9:60:03:ce:1c:1f:39:
         ac:ff:05:6c:12:fa:a4:27:12:7d:4a:bf:2e:ed:00:6a:a3:34:
         a5:b1:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:54:35 2024 by rpki-client on console-ams.rpki-client.org