Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File:                     BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier:          LwM4qPMoY408oT5HOHTwHJ31U2DLt+YeuE2U7RGoUL4=
Subject key identifier:   BC:20:DA:E0:68:9E:D7:FC:1D:EB:D7:0A:1A:F1:BC:54:EF:D1:C2:35
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer:       /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial:       01901DEC42F8E82E044F58D222B4B3FA4D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number:          08A6
Signing time:             Sat 15 Jun 2024 22:02:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:21 +0000
Files and hashes:         1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: Zv51CaEGYVH92q4DKw4nAjOn6xyyYvAxp0DsP12VVD0=)
                          2: OLvNTFgwrP0V-f497z9QcSZ7J9E.roa (hash: aY6bfFgo6QwX7aHfPcJ+6mkAfRzcLQ3A6Hx/FzRy5H8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:42:f8:e8:2e:04:4f:58:d2:22:b4:b3:fa:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
        Validity
            Not Before: Jun 15 22:02:21 2024 GMT
            Not After : Jun 16 22:02:21 2024 GMT
        Subject: CN=bc20dae0689ed7fc1debd70a1af1bc54efd1c235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3c:e6:72:ac:db:24:82:3b:16:ad:f2:b9:9d:
                    b0:a9:70:6b:a8:ae:b3:0a:07:af:0a:55:e8:5f:1f:
                    1d:1a:e4:b9:1e:42:51:4d:77:38:63:f9:ed:37:68:
                    b4:79:80:3c:2b:c7:cf:f2:e0:a6:c4:9d:bd:16:80:
                    f6:39:5f:54:52:36:1b:bf:ec:92:c0:a6:14:0c:61:
                    fa:df:1e:0c:c9:0c:ec:37:c9:1c:11:03:3f:22:be:
                    6f:c4:a0:80:4c:32:2c:a6:32:b2:58:f2:98:92:f3:
                    45:40:c3:36:e5:75:94:c2:f5:79:55:c5:ac:1d:57:
                    68:5c:87:f4:7e:2f:c9:55:21:3f:ab:9f:72:4f:bf:
                    f5:01:68:d8:6a:13:f7:71:30:86:f6:dd:2f:c5:2c:
                    11:49:22:9a:6f:ed:fe:ea:3d:44:75:3a:f4:1a:44:
                    1f:7d:fd:8d:dc:2a:33:a2:82:38:91:e2:06:06:98:
                    4b:cb:69:ba:f8:0f:42:e3:22:0d:31:fa:44:cd:01:
                    57:c7:83:58:99:76:69:cf:aa:47:77:ef:d8:a1:55:
                    97:e3:98:7f:6d:a9:3b:7b:70:19:9c:b4:a1:e4:e9:
                    3b:f0:48:d9:ea:1c:c7:de:21:e9:c1:9b:41:f1:14:
                    e7:95:25:ed:0e:a3:ad:3d:cc:91:da:4a:7b:3d:86:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:DA:E0:68:9E:D7:FC:1D:EB:D7:0A:1A:F1:BC:54:EF:D1:C2:35
            X509v3 Authority Key Identifier:
                keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:01:73:2a:4f:65:0a:2a:e7:82:47:4a:78:2b:ef:77:57:
         27:33:38:6b:a5:2b:46:36:3e:f2:1f:5e:48:97:b6:00:12:1b:
         39:61:7d:87:a6:18:2d:e6:62:20:61:2a:4b:0d:c8:2e:51:d1:
         b0:7a:d8:81:ca:34:69:b1:42:28:e1:83:26:00:4a:db:85:b6:
         a5:0f:04:c2:4a:ce:58:01:90:8d:74:06:fe:57:04:3a:35:8a:
         02:dc:6b:49:aa:6f:99:8f:c7:33:4c:28:b8:a1:2f:1a:99:9a:
         f4:38:4b:69:3a:0d:39:b6:fc:51:62:78:f8:3c:97:f4:6c:3f:
         39:4f:c8:d2:86:aa:31:bd:45:12:45:a2:a8:93:9c:b4:dd:22:
         7f:4a:6a:8c:3c:9c:c9:d1:df:8f:d8:46:7a:61:65:40:76:08:
         87:fd:66:ee:ae:80:a8:ff:33:7c:a0:69:5c:cc:57:a7:24:1d:
         42:82:9c:6e:65:04:fd:0f:61:ea:b2:54:4f:6f:f1:c5:08:cc:
         b8:cc:32:1c:a9:f4:8f:59:ee:6c:b2:b5:d7:5a:30:25:f4:8a:
         62:00:bc:e1:85:7c:f0:60:cc:f6:1f:1b:b7:15:4d:05:a9:81:
         31:2a:88:c6:60:06:b7:b7:a0:44:3a:22:cb:57:5f:29:df:ac:
         a2:6f:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:31 2024 by rpki-client on console-ams.rpki-client.org