Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          TcfBImzix9iC6DH3QMre4tqf/C2qUi87LbhtJZ054Uc=
Subject key identifier:   12:67:9D:F3:BE:1A:8E:A5:A6:02:B5:C9:0A:0E:E0:20:98:44:9B:88
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       019044F861CE2089B255AD2FC6C843342828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          015D
Signing time:             Sun 23 Jun 2024 12:00:46 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:46 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:46 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: NzCkg38BqZuBA+Flc+aK49VLZ3LshkjtaqJm/KT/M1M=)
                          2: kfaVPLj-12cBWTfR9GVWC0gt-0E.roa (hash: rTJXaJkcyLQgjl8EnXKw3I8O6nESThlPPRAsAk5Nm48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:61:ce:20:89:b2:55:ad:2f:c6:c8:43:34:28:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Jun 23 12:00:46 2024 GMT
            Not After : Jun 24 12:00:46 2024 GMT
        Subject: CN=12679df3be1a8ea5a602b5c90a0ee02098449b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:da:5a:41:d8:52:ef:f3:b3:83:7d:cd:a8:
                    82:4f:4e:9e:0d:88:e7:99:74:60:87:6a:eb:70:b9:
                    d1:1a:1e:bc:fd:2e:8e:31:e6:6e:fc:41:80:e8:c0:
                    03:68:ca:9e:86:a5:d0:ea:15:e0:d2:20:a9:71:7c:
                    fe:88:0d:f0:f2:e8:cb:39:3f:6b:90:e1:34:c2:73:
                    47:88:7d:b3:08:2d:16:7e:80:1a:da:c4:d5:77:d5:
                    2c:79:fa:3a:65:f0:90:b5:d1:78:e4:d9:5b:e1:48:
                    53:5d:02:69:17:95:f0:f4:df:4d:76:5b:44:14:b7:
                    a4:bd:b5:29:89:84:0a:43:2b:b6:36:d8:33:45:31:
                    5e:26:88:e2:35:09:77:1a:35:6d:29:8c:f3:69:b4:
                    7b:05:bb:20:13:3d:68:6f:c8:b6:41:63:09:06:56:
                    7d:1b:78:84:c9:c1:bc:8c:32:6e:5d:6c:ac:89:3f:
                    73:e2:52:e2:5d:dd:2f:cb:57:26:87:bd:12:59:cd:
                    77:32:17:4b:87:a6:27:78:53:dd:a3:31:3f:1b:a3:
                    c2:64:53:94:d7:db:84:6d:83:61:32:7b:20:b2:82:
                    d6:db:6f:46:66:ee:4d:9e:9e:9e:e1:99:1c:5c:6d:
                    7c:81:c3:fd:97:b2:9c:22:ff:ee:25:61:f5:1b:1a:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:9D:F3:BE:1A:8E:A5:A6:02:B5:C9:0A:0E:E0:20:98:44:9B:88
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:f0:5c:54:6b:c6:c8:0a:46:33:21:f2:f5:ae:e5:6a:57:
         16:69:f1:77:14:e1:b6:4a:09:2e:60:1b:11:af:d5:8b:87:6c:
         25:7f:41:eb:6f:1e:27:5b:64:98:92:da:74:e8:75:58:4c:4a:
         ad:ed:46:66:e8:34:57:6f:8f:5a:f0:c0:84:08:a2:d7:f1:6e:
         0b:fb:4f:0e:92:94:bd:4e:38:ef:46:b3:19:dc:ae:7c:57:81:
         8c:eb:90:4e:44:4c:ca:78:3b:d5:ef:b5:f8:9e:13:3a:87:a0:
         a6:df:46:7b:62:97:fa:59:48:5a:24:86:82:fb:a1:db:6e:3b:
         a8:45:64:b9:f8:c7:d8:4e:1e:b8:b6:11:1f:44:38:e5:23:c8:
         9e:27:b1:e8:6e:e4:e3:d6:d2:2d:33:a7:2b:74:9a:3e:f2:2c:
         26:80:0d:c9:de:ef:64:f9:5d:b3:89:e8:8c:17:b1:b4:2b:97:
         ac:ec:08:3b:7f:3b:35:37:e4:dd:7b:65:4c:67:ef:b3:c9:01:
         23:d3:3d:c7:c7:26:af:86:e3:69:75:9c:f1:94:a7:21:5a:2e:
         c4:3f:a1:b0:94:50:1b:7a:92:26:66:0f:2b:9e:95:1e:63:eb:
         3d:b6:34:9d:7f:e8:39:12:9f:89:5e:61:b8:d1:bf:0e:1a:86:
         24:8e:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:56:09 2024 by rpki-client on console-fra.rpki-client.org