Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File:                     bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier:          pbE3sdnVtDfiPfsC4xiK/XDAAbylC/OB/zng9OawZB4=
Subject key identifier:   8A:DC:CB:57:18:0E:E0:75:33:64:81:2D:4F:91:D6:94:B7:6A:F6:45
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer:       /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial:       019045D4586E0448875A53650231A0DE8B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number:          03D1
Signing time:             Sun 23 Jun 2024 16:01:02 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:02 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:02 +0000
Files and hashes:         1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: l44so2lT8EJoUwsq9TJvxFtV+OD/AHpIx6QUudfJ55A=)
                          2: iGZ_t3TvseaaSR_Ao_QM6sZmuiE.roa (hash: YhLoi4X3i5x2qgwp+ou7pOYkqF/F0bjd6I5Bi5KIMo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:58:6e:04:48:87:5a:53:65:02:31:a0:de:8b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
        Validity
            Not Before: Jun 23 16:01:02 2024 GMT
            Not After : Jun 24 16:01:02 2024 GMT
        Subject: CN=8adccb57180ee0753364812d4f91d694b76af645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:0d:5e:80:6a:54:95:07:c9:5a:8f:9f:42:
                    a1:43:6c:e6:f6:be:f1:26:1c:6d:b9:31:bc:30:5a:
                    2c:e6:74:34:89:f0:bf:b1:f0:c0:c4:20:11:fd:74:
                    f7:ff:1e:c6:c3:62:cc:4f:be:f4:e3:ba:a1:fc:aa:
                    40:17:70:5e:43:7a:9f:35:a3:48:87:60:78:cc:69:
                    77:87:39:1d:07:5c:91:f5:fc:d0:be:c4:c0:fa:c7:
                    c4:0e:ec:d1:51:18:53:6e:6a:5f:50:a5:b8:10:31:
                    5c:49:32:8a:2a:b9:04:b2:7c:c3:ae:c3:27:91:7a:
                    99:8e:99:c1:a4:ff:f1:c6:32:23:9f:97:6a:3c:03:
                    47:2d:21:1d:0f:0d:c0:27:14:68:98:58:f0:a5:cf:
                    ed:f7:d4:6b:15:36:64:32:71:6d:8c:ad:c9:72:f7:
                    98:70:cd:5a:ec:23:3e:dc:f1:1a:ab:09:09:15:51:
                    5d:85:d5:7b:48:6d:02:35:82:af:1f:15:16:9f:d2:
                    67:a8:62:e5:06:fa:4f:01:69:32:bb:1a:5d:5f:5e:
                    e0:1a:70:41:23:04:5f:a2:79:a8:3e:08:d4:7e:4c:
                    cd:3d:4a:f7:c7:22:99:42:97:f5:8b:18:11:3d:7b:
                    c6:60:1c:ec:96:ee:d7:d2:8f:52:12:76:09:21:b5:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:CB:57:18:0E:E0:75:33:64:81:2D:4F:91:D6:94:B7:6A:F6:45
            X509v3 Authority Key Identifier:
                keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:00:71:5e:72:52:5a:ff:26:1d:b9:65:e3:34:d5:7a:c1:a0:
         5b:a8:83:e5:98:09:ae:2c:a3:56:9b:c6:92:b3:f6:d5:58:d3:
         f9:1c:dd:73:eb:c5:ca:e0:45:ce:f3:56:f3:5a:d4:a5:dd:cb:
         3f:ec:b3:a9:67:98:f0:0b:72:4d:45:63:51:3c:28:c1:c2:12:
         4a:0b:af:7c:a6:d9:6a:4e:b7:7f:cc:19:74:28:76:8c:1f:b3:
         91:b6:38:68:74:a4:02:71:81:1a:fd:e5:1d:77:3e:04:5d:d3:
         16:6e:e9:27:85:8e:ec:24:af:b7:22:47:d2:2a:0b:2d:45:6f:
         59:9b:ae:07:d1:1a:e8:b4:3f:1c:69:40:e8:14:c7:63:df:d3:
         e3:ce:5d:36:b8:fc:aa:90:54:12:00:1f:fc:a2:c3:9b:ec:80:
         c2:f9:9f:cc:07:24:66:c8:dd:e8:03:ac:c8:fa:e6:01:7f:b3:
         b4:a0:3f:b5:99:19:1b:87:ba:3b:51:5a:02:89:3d:6d:6b:60:
         d5:c6:4b:6e:13:32:96:78:cb:3b:6b:35:96:0b:37:a1:fb:70:
         d5:8b:a7:5c:ec:f3:72:6e:05:d9:c5:67:7a:60:96:1f:f3:60:
         1f:5a:93:93:c1:e8:22:28:67:8f:70:c9:ba:7f:ff:14:19:3c:
         fa:e3:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:21:04 2024 by rpki-client on console-fra.rpki-client.org