Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          7kW2qdjGNCe9Zgm9GOr/feDqPoIVmIskx6ly1fR/z4w=
Subject key identifier:   32:10:CC:A0:55:40:86:35:AD:F7:7A:50:B7:8D:45:CC:52:27:3C:C5
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       018F87ED913C2601BDA05B4AFB2A107F5C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          05AE
Signing time:             Fri 17 May 2024 19:00:44 +0000
Manifest this update:     Fri 17 May 2024 19:00:44 +0000
Manifest next update:     Sat 18 May 2024 19:00:44 +0000
Files and hashes:         1: FbJfXMZmyn4LQeQMFHWTu-237ds.roa (hash: UdkwSd2zeGSqhQ2VSRLCiX3cLHedHTMjIORr/pnypLI=)
                          2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: BGSTNplhyPc8r7wXNaTujClkSC0wGdeiUPw1MOq6jT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:91:3c:26:01:bd:a0:5b:4a:fb:2a:10:7f:5c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: May 17 19:00:44 2024 GMT
            Not After : May 18 19:00:44 2024 GMT
        Subject: CN=3210cca055408635adf77a50b78d45cc52273cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:00:01:f4:a1:08:50:33:53:35:a8:f4:12:
                    32:a3:e6:99:3e:0c:3b:b0:ac:30:59:50:e8:b0:cf:
                    11:f8:80:f0:06:b8:4a:ba:c8:ce:67:d3:70:2a:fe:
                    10:d0:3c:2c:e7:28:81:11:8f:cd:99:7a:1a:c3:6b:
                    35:4b:9a:a8:0b:b9:a3:20:8b:4b:ed:cf:24:26:1c:
                    3b:f1:17:a8:ed:f2:ea:57:f6:b0:4d:4c:c7:d1:f4:
                    ce:1a:08:3e:92:72:e5:24:ee:70:db:96:56:d2:f5:
                    bd:cf:d8:da:1a:da:f4:00:e0:c8:18:00:31:e4:e9:
                    a6:5e:b8:f9:fd:ad:9b:5d:5a:26:5d:46:70:8b:bf:
                    e4:c4:37:a1:51:a2:75:ce:38:73:1b:7d:c0:f2:f6:
                    19:94:55:5b:2f:87:4d:2f:37:e3:56:09:3c:45:a2:
                    c6:90:9e:fd:98:54:fe:91:7d:b3:8d:1d:e5:c8:5f:
                    3f:ad:f9:16:bf:1f:7f:44:63:76:f0:a5:ae:8e:5a:
                    c5:05:95:ed:b3:7c:30:67:d9:90:9d:56:98:b6:ea:
                    7f:da:fc:04:53:a1:fc:64:0f:19:b1:99:fa:05:b9:
                    e0:44:07:13:06:69:bb:ab:3f:8a:c5:df:75:fe:8e:
                    45:51:06:eb:6b:64:21:50:41:91:a4:e5:a1:4c:15:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:10:CC:A0:55:40:86:35:AD:F7:7A:50:B7:8D:45:CC:52:27:3C:C5
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:02:31:ce:44:aa:0a:3b:c4:01:85:1e:b0:01:81:cd:c3:
         46:83:bc:13:49:c9:06:84:10:a5:aa:ff:15:f0:a1:3d:42:7f:
         12:66:99:ce:a0:a9:fa:15:33:a2:45:f7:a2:46:e4:5c:d0:12:
         58:c1:22:99:60:86:72:f9:62:c0:76:55:c1:f6:4b:9d:1f:92:
         e9:43:7a:fa:2b:3d:ba:1e:3a:90:11:bc:70:e4:8e:ef:58:22:
         6b:d5:9b:73:1d:66:76:ec:f8:4c:93:16:d3:d0:ec:3d:01:c6:
         5c:73:d2:08:ae:d0:9d:d1:7b:40:50:09:1c:d2:04:40:70:f7:
         57:3f:79:c2:c3:e8:db:f6:91:20:0a:da:0a:1d:c7:e8:67:65:
         5e:eb:06:20:5a:dc:31:36:c4:38:18:41:63:b5:f8:84:e3:48:
         47:34:b5:1f:e3:a2:1d:39:e2:6e:19:31:d2:03:f0:62:d5:67:
         c8:a6:b8:cb:6c:31:c5:60:e4:32:b1:23:90:a5:71:4b:d8:1e:
         61:43:7a:bb:8d:63:5f:f2:50:25:82:1d:71:44:db:0f:2a:11:
         4e:41:0a:61:3d:8d:99:cb:81:30:cf:40:8a:fb:fc:f0:b8:2e:
         78:1a:62:7a:07:c2:f5:20:62:07:9e:7e:05:eb:c7:2e:13:ea:
         3b:8b:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:00 2024 by rpki-client on console-ams.rpki-client.org