Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          XQExZLYKaVgwz7ThDn3yF2ofgCnLeaYVBG/eMPO81II=
Subject key identifier:   A4:B9:6F:33:F1:49:63:22:52:B9:BB:E4:B8:8D:AE:9B:8C:F5:86:19
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01901E8FC0B6F28AA89104F01F84E162ED72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          05D2
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: eJ6SYPZHhqzhlHASeF2UpuSKukL+zsIU1bRNTKX6TDc=)
                          2: lTmVYCw6P4CmlSKbWVRalYObdnE.roa (hash: 5u8wyP69jetpCe2E6aEaehHBsV4q3QXa0p+z87/ftU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c0:b6:f2:8a:a8:91:04:f0:1f:84:e1:62:ed:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=a4b96f33f149632252b9bbe4b88dae9b8cf58619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:7d:6d:f5:24:c3:15:fd:df:f7:30:5e:1f:
                    cc:6e:88:b8:8c:97:8d:b2:15:ec:c5:16:37:c9:37:
                    c5:37:de:7d:a9:93:89:8e:17:8d:0f:cc:50:5a:41:
                    60:45:8a:7c:0f:ff:98:64:e8:85:ff:2e:51:4d:b2:
                    6b:5c:22:89:3a:11:97:68:22:cd:1b:7f:b1:db:a4:
                    cf:68:ac:7d:6f:90:8e:09:f6:3e:cf:48:c2:e9:a6:
                    d9:ed:01:9a:cf:6a:d2:fd:e4:ad:5a:f8:f5:f8:d6:
                    12:25:8c:13:01:8c:74:69:7c:67:55:a4:6f:1d:7b:
                    0c:63:92:f0:b8:db:c2:e5:8e:29:7d:be:f5:e8:40:
                    65:7c:9e:ad:94:45:b4:f5:31:38:22:07:37:10:30:
                    ce:42:f8:c2:49:9c:61:85:7e:df:92:8b:12:88:fc:
                    e6:a8:57:30:59:21:40:12:7e:15:9f:d8:6e:e3:ab:
                    2f:6b:f9:2b:f4:30:62:3b:a2:6f:20:53:19:58:70:
                    3c:34:2b:91:56:0e:a3:ac:cd:8b:06:b1:4a:f0:75:
                    af:09:ff:29:73:a0:7f:2d:7f:68:ce:3d:fd:c0:fd:
                    1b:cb:4f:c0:ff:9f:2e:91:15:33:20:4b:16:8c:3a:
                    99:62:64:d0:c8:d0:ff:c8:6c:f0:3e:cb:4d:d0:98:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B9:6F:33:F1:49:63:22:52:B9:BB:E4:B8:8D:AE:9B:8C:F5:86:19
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:6b:47:ca:f1:ec:bf:4a:4e:13:b6:f8:9d:89:38:f0:e3:
         e2:2d:09:e4:18:92:2a:42:11:79:7d:78:91:32:9e:35:3a:4c:
         2b:89:98:b9:65:aa:c0:be:9a:b3:fb:78:af:82:14:7e:7c:ed:
         7b:1e:b1:d0:a4:18:81:ee:7d:60:29:a9:3c:3e:9f:21:6b:11:
         98:b2:67:2e:20:09:c4:2e:e7:e9:82:30:33:80:cf:e0:41:e8:
         01:1c:67:00:f5:66:9c:2f:4b:31:09:cc:4d:82:a3:31:f2:1a:
         3d:5b:fe:5d:e2:59:60:34:e6:1c:c0:7d:7b:f7:39:43:da:b1:
         d6:ce:70:ff:0f:0b:b0:56:aa:4b:c0:a2:61:87:92:5c:3a:4d:
         8d:5d:db:6b:9b:79:b2:58:58:16:32:18:e2:ad:6f:c0:0f:9e:
         dd:45:18:98:fb:9e:8a:88:5f:a6:dc:0d:df:e2:1e:52:83:74:
         6f:74:e3:7f:ae:a0:33:67:a1:a5:20:60:23:65:65:eb:29:e9:
         46:0a:cd:a2:2c:94:aa:5d:04:1f:30:fe:28:4d:0b:95:af:4a:
         31:9a:03:ef:3c:d3:11:56:dc:ea:8b:67:77:cd:5d:bb:08:2a:
         61:71:22:d7:d2:52:93:af:3e:b6:d1:f7:64:28:fe:b3:ca:d8:
         a5:f0:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:00 2024 by rpki-client on console-fra.rpki-client.org