Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          wE0KLDrEkt9xXTWdUegBRhDmyHkcTYdxwlfDePNB5e0=
Subject key identifier:   1A:4A:C9:6C:F8:F6:14:AE:A3:A0:97:40:2D:80:1B:2A:65:65:E7:2A
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       01901BFF1C24436A27435EF767F8DDF83109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 13:03:41 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:41 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:41 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: RYGsGIEgCCkqlgvJJJHkXMmFs7SuSMwLX6XJASphu/s=)
                          2: pkB173lf46Vcywp4IZNJSYM0Q94.roa (hash: C4LdIHu2Vr/u9XptkJAavyORWVfOB/KPvuqFlcksPk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:1c:24:43:6a:27:43:5e:f7:67:f8:dd:f8:31:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Jun 15 13:03:41 2024 GMT
            Not After : Jun 16 13:03:41 2024 GMT
        Subject: CN=1a4ac96cf8f614aea3a097402d801b2a6565e72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:34:03:68:69:a7:6e:06:45:94:72:ee:ea:
                    27:16:d0:72:c4:c9:bf:65:82:1b:79:1c:d8:6f:00:
                    a1:b3:57:7a:a5:6b:d9:e4:c2:bf:63:12:57:eb:95:
                    7c:df:e8:ac:2e:da:ed:d9:a9:14:91:38:2b:b1:ff:
                    22:3c:35:b5:6a:28:05:64:6b:f1:ff:ae:42:06:62:
                    fc:10:1b:fb:2e:4b:e1:63:4f:ff:f8:9f:c5:a8:ac:
                    88:05:0a:16:fa:ba:d0:54:87:67:b7:51:2b:d3:f5:
                    e2:4b:e6:9d:4d:a0:d4:a7:42:b9:34:95:d8:ec:71:
                    c6:51:fb:c2:5c:3d:ab:cc:6a:8e:e0:8a:ef:4b:78:
                    3b:30:5b:d4:b5:6e:e5:65:d7:e4:08:74:18:35:86:
                    f2:4d:dc:98:08:54:87:bf:3f:b7:54:31:b4:4f:33:
                    c5:20:fc:cd:24:99:7c:77:55:2d:87:0f:94:e5:bb:
                    31:0e:30:e8:59:0a:64:52:00:ab:4c:41:c0:6e:f7:
                    ab:51:fc:88:10:cf:94:f8:e0:27:7b:c9:6b:2f:e5:
                    2e:c3:ab:c1:13:31:a8:2b:5f:a2:c2:01:52:28:aa:
                    24:db:49:01:50:f4:4f:51:d1:fd:9a:75:91:ab:68:
                    26:b2:15:c0:ee:e6:da:5a:22:65:05:2c:a0:0a:71:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:C9:6C:F8:F6:14:AE:A3:A0:97:40:2D:80:1B:2A:65:65:E7:2A
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:0a:06:18:bc:a4:e4:53:41:87:0c:68:53:fd:a6:55:27:
         bd:a2:56:36:22:be:b9:77:77:e0:01:08:05:50:c3:69:ba:19:
         ee:c8:91:ed:d0:e6:85:a4:b4:90:84:d4:71:45:c1:65:c7:73:
         56:c8:99:4a:fa:3c:52:b8:42:1d:4a:ad:2e:8d:24:a0:48:67:
         85:0d:c2:9f:64:a4:90:d4:22:f7:96:4d:98:5d:32:b3:0e:5c:
         d7:19:6f:a3:2a:40:a4:27:49:2b:35:95:88:3c:00:ef:c5:9d:
         47:5c:d5:f8:75:6e:f6:2b:c0:37:f6:61:3a:25:e5:b4:90:29:
         e1:c3:62:53:5c:34:15:54:10:fc:10:42:d7:79:cf:37:63:6d:
         d7:27:5d:0c:fd:9d:4a:ce:22:d0:7e:77:cf:25:1d:9a:3e:86:
         80:57:1a:f4:a9:28:9a:20:22:d4:51:ac:75:4b:bb:6e:ce:a9:
         ba:0a:fb:43:f4:dc:3d:6a:c7:4a:54:0a:5c:c2:30:dc:77:bf:
         7c:4b:94:4e:bf:36:07:ca:50:a8:af:63:71:80:42:eb:25:c1:
         3e:1d:b1:4c:a7:43:00:0a:48:c9:89:3b:5e:ff:5c:28:4a:d6:
         f9:c9:bd:86:8b:1f:d5:69:4c:cd:96:55:63:e6:1b:c5:b8:c5:
         7c:ee:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:05 2024 by rpki-client on console-ams.rpki-client.org