Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File:                     BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier:          9l/1ACdsbo0YM/8a0EV1qehid+NQCOP2IAA9csH36aw=
Subject key identifier:   15:85:C5:71:11:CD:A9:D9:72:1F:25:0F:BD:86:61:2E:6E:1F:5A:06
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer:       /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial:       01901CA1835C124C30A398A2432F97A852A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 16:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:05 +0000
Files and hashes:         1: 3msj4c100GTVW57WjC2b5XW7ZEU.roa (hash: HX9Lxz8NC/YeNpjGZoeYGWOpEsjvYPqhfXTVHh/IIkQ=)
                          2: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: vZOA0warAnZmqmixXo3xZJ+2Ke/Qla+excRKdQO8A1E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:83:5c:12:4c:30:a3:98:a2:43:2f:97:a8:52:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
        Validity
            Not Before: Jun 15 16:01:05 2024 GMT
            Not After : Jun 16 16:01:05 2024 GMT
        Subject: CN=1585c57111cda9d9721f250fbd86612e6e1f5a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:f1:0c:bc:7b:57:c4:7c:08:bc:1e:9e:65:
                    ed:e5:64:cc:64:25:b6:6f:bd:bd:1b:7d:07:2f:35:
                    b6:87:da:c5:3c:a7:d5:f1:b9:3f:f6:0d:bd:21:df:
                    76:0b:f1:59:a2:10:b2:2d:14:07:45:fe:5c:fe:30:
                    4d:41:98:4a:92:bc:28:af:0d:80:e6:4b:bd:3c:4b:
                    59:3a:0d:2a:80:9c:a4:63:ef:1f:04:7a:f7:6e:7b:
                    84:77:ed:85:75:60:28:be:f5:92:f3:00:26:65:85:
                    c4:54:13:a3:29:73:06:95:6f:c4:43:e1:c7:c4:05:
                    7e:83:f0:18:84:c8:50:5f:37:91:f1:8a:01:0c:38:
                    c9:5d:18:fd:47:b4:71:fb:0b:f8:9c:c3:73:5f:92:
                    52:fc:6c:d5:7d:ce:d5:6e:29:f5:f8:b8:d6:72:6a:
                    29:16:49:b0:18:be:1b:4d:bc:6f:0c:fb:b4:47:d9:
                    bb:56:3c:fe:15:c9:9c:ab:2c:01:16:e5:5b:c7:4b:
                    a7:89:fc:33:3e:74:25:b7:78:50:bd:44:fd:ff:06:
                    ff:46:a4:76:5a:4f:cf:7d:2a:a5:b0:0a:f6:e7:be:
                    4d:07:16:a5:e0:b0:3c:d9:13:b6:c2:6c:c0:96:b5:
                    e9:2e:98:1b:f2:fb:df:a6:fc:1f:86:70:35:34:b6:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:C5:71:11:CD:A9:D9:72:1F:25:0F:BD:86:61:2E:6E:1F:5A:06
            X509v3 Authority Key Identifier:
                keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:89:df:af:d5:17:62:cf:fd:fc:27:ad:77:9d:73:e4:75:
         6a:e4:22:55:c3:d0:95:42:01:f2:e7:18:b1:58:b7:62:48:44:
         cc:ea:88:2e:50:71:9f:72:fb:35:19:2d:59:43:42:13:f8:e0:
         90:23:c7:d0:30:12:9e:b0:49:95:e4:64:90:54:d1:98:29:38:
         89:be:8a:8d:bf:40:eb:55:53:1b:de:d9:e3:60:40:65:1f:b8:
         1e:02:81:1f:cd:82:62:9e:bf:6a:0b:38:78:ed:db:bd:4b:b0:
         8a:9f:96:48:5b:38:43:4b:43:0b:46:61:c5:32:06:8e:b6:c1:
         f6:8c:a7:65:d6:6f:80:6d:7f:90:48:04:b1:9e:78:d4:e5:4c:
         51:5b:3c:be:4e:3e:d3:14:76:c2:31:94:a6:2c:51:28:8e:99:
         06:17:80:28:41:26:f4:de:e6:11:67:51:1b:8b:b5:49:fe:72:
         86:8f:0e:f5:49:7a:ce:5a:2c:e6:bb:d3:ad:e5:e4:37:b6:1b:
         4e:be:0d:75:78:43:d8:68:e7:73:bb:dc:f4:b6:32:48:07:7b:
         70:99:bf:f2:40:f1:7c:2c:b1:5b:8a:cc:9b:76:73:12:68:5b:
         77:a3:7c:62:06:51:3f:2c:51:e9:67:56:60:a9:2f:fa:bc:8f:
         50:c9:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:55:32 2024 by rpki-client on console-ams.rpki-client.org