Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File:                     bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier:          Lc6+StTPIAsrkq/vCH//U3R2PP4cJ/7/gIPWv/Kr6po=
Subject key identifier:   95:32:0E:08:39:57:F0:CD:3E:8B:0D:D8:07:C3:17:87:37:C7:FA:28
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer:       /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial:       01901F34984CDEC333E9C1F65CDBBE79ECFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number:          03BD
Signing time:             Sun 16 Jun 2024 04:00:58 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:58 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:58 +0000
Files and hashes:         1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: D/IjOu4CMwg1CQtwE+wMB6Myr0u1BrcDVjNZG+Cm18g=)
                          2: iGZ_t3TvseaaSR_Ao_QM6sZmuiE.roa (hash: YhLoi4X3i5x2qgwp+ou7pOYkqF/F0bjd6I5Bi5KIMo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:98:4c:de:c3:33:e9:c1:f6:5c:db:be:79:ec:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
        Validity
            Not Before: Jun 16 04:00:58 2024 GMT
            Not After : Jun 17 04:00:58 2024 GMT
        Subject: CN=95320e083957f0cd3e8b0dd807c3178737c7fa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:a4:cb:2f:d0:f8:24:03:d8:65:9f:21:de:
                    0c:4f:80:26:47:39:a0:5d:a6:5d:48:5f:42:af:50:
                    c4:5e:7c:36:af:cf:70:d7:40:8b:85:f7:45:34:cb:
                    bd:f2:64:73:11:f0:9f:3f:03:a9:0c:f1:65:8d:8e:
                    c7:2e:e1:97:78:b7:f2:b9:16:7f:68:f8:2c:ef:ed:
                    b5:d1:c1:5a:25:97:98:dc:ce:29:81:fd:51:c5:79:
                    3c:f5:56:02:fc:00:1a:6e:35:e6:c1:e6:18:b8:59:
                    c0:74:0b:2f:91:08:9a:7c:b8:82:f3:7c:e1:52:d0:
                    19:a8:4c:04:29:83:58:9d:43:f5:7a:78:84:b9:d0:
                    49:81:96:84:eb:48:f9:ed:e9:af:a7:b9:83:0d:24:
                    ba:48:91:d3:e7:2a:1a:55:3b:3c:4f:32:af:47:c3:
                    c2:a9:01:d0:e5:e1:22:45:c7:6e:4d:a0:bc:9d:dc:
                    d9:c7:0b:d7:ce:61:ef:25:66:cc:70:60:4e:4a:5a:
                    6e:ae:4e:01:2c:8d:a5:60:f2:7c:a8:f7:d2:f9:f0:
                    c1:57:fa:72:70:a1:85:d6:0a:a9:45:b8:75:46:e9:
                    f5:45:fc:c6:89:28:c6:29:e7:41:27:e5:86:ba:03:
                    62:0b:42:55:f9:65:f6:a5:b2:21:cc:1f:98:0f:64:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:0E:08:39:57:F0:CD:3E:8B:0D:D8:07:C3:17:87:37:C7:FA:28
            X509v3 Authority Key Identifier:
                keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:33:9d:b5:1f:bb:d3:a2:ef:41:05:26:c5:6b:43:04:79:3d:
         cd:67:e7:ad:e6:1f:23:99:1b:f8:84:81:63:6d:9b:ab:01:73:
         ce:22:46:bd:49:e8:c5:10:d5:fb:62:03:8e:52:e7:38:a1:1a:
         3a:dc:d9:15:4a:57:3d:07:7d:d7:26:d2:88:c8:6e:f6:27:d7:
         50:36:28:2a:80:eb:5c:18:e2:67:73:6c:dc:99:49:b5:3d:9a:
         4b:de:e4:58:fc:1a:b5:da:78:b7:ed:32:8a:b2:f0:62:d2:d3:
         84:8d:66:46:4f:04:60:19:7d:f9:98:98:92:00:fb:8a:7d:03:
         d5:fa:df:7f:bd:92:e8:9d:46:72:5e:6d:1d:63:68:69:64:1a:
         8b:77:b4:db:a7:c4:27:a4:0b:4d:d0:92:95:7c:2c:8b:28:3f:
         2e:59:06:5c:32:21:5e:45:8e:1f:2e:36:ad:79:69:37:65:7f:
         89:a6:e3:19:f6:df:78:3a:66:b4:4f:f3:9c:a4:28:c5:af:86:
         b9:ee:cf:98:87:aa:7a:6f:40:26:3d:99:ab:50:13:de:cb:6e:
         3b:ed:53:9d:aa:55:15:d9:c5:ca:6d:6b:72:ae:7f:e1:4a:42:
         b2:93:a9:6a:95:8e:96:86:32:66:d0:2f:bf:a8:80:44:6e:b5:
         df:53:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:49 2024 by rpki-client on console-fra.rpki-client.org