Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File:                     v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier:          PNYzuG5Jv7Q49nnlqhPiuvCKjCJGCJW3hwYfzbAoy/Y=
Subject key identifier:   3D:02:A4:55:B8:C3:A3:76:A1:91:4E:8D:95:F3:5F:05:91:E0:53:3C
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer:       /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial:       018F88246AEB59D3396909F81F07AB63B2E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number:          05BC
Signing time:             Fri 17 May 2024 20:00:39 +0000
Manifest this update:     Fri 17 May 2024 20:00:39 +0000
Manifest next update:     Sat 18 May 2024 20:00:39 +0000
Files and hashes:         1: GRuEUjUNuAKJ3IWqx_UjE4_kzKc.roa (hash: uN7GGH34PbZuEORJnGANASuotTu3nY6kj77FUS2K61U=)
                          2: HVjNKTj34WculS_A2Shmfzsping.roa (hash: V2ofoMdxEZVPRMhmX3LE+TeQujVxCn7xdBDCVnigsI4=)
                          3: gCTJIPdZkNTrbjtxvKNrXCCa0X0.roa (hash: 8h0oQ1BI7ZS3YrzfO/MNrv0NoicX+qEYAlo51kcjtG0=)
                          4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: KunSVqqKqA8w3dIJ5W2RTiNkK6YAyosbkQPLcBM0Ha4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:6a:eb:59:d3:39:69:09:f8:1f:07:ab:63:b2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
        Validity
            Not Before: May 17 20:00:39 2024 GMT
            Not After : May 18 20:00:39 2024 GMT
        Subject: CN=3d02a455b8c3a376a1914e8d95f35f0591e0533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:9e:83:26:33:fa:af:ea:b9:00:9a:1e:b3:
                    7b:60:34:34:1e:28:69:bf:d3:0c:2a:04:e4:b5:ca:
                    76:85:77:64:17:2b:63:63:60:8b:12:d5:80:e4:d2:
                    20:eb:d1:c8:de:fd:08:d6:9b:c3:43:41:39:cc:3d:
                    71:d0:f4:d2:42:6a:f0:54:e1:7f:9a:44:83:56:34:
                    f3:33:28:de:7e:df:58:3c:b6:e4:53:7f:3d:f7:1a:
                    bd:5c:1e:15:a0:ce:03:6a:5e:91:a6:94:c3:4c:e4:
                    e6:8b:7d:79:b1:16:51:ee:7c:e4:15:64:02:1d:e5:
                    3e:56:57:c4:8c:6f:ee:d5:f3:4e:de:0e:de:ad:38:
                    47:bb:92:22:1b:10:ff:d6:b0:e2:76:3a:72:d7:63:
                    de:65:56:09:99:23:65:5b:2a:11:e0:01:45:6d:0d:
                    ed:09:a6:38:7b:9c:8f:3b:5d:68:5b:a1:2a:a7:4e:
                    5c:5e:95:8f:98:14:32:23:10:3a:72:dc:e9:1b:c2:
                    c1:6b:1c:3d:e3:7e:72:4b:f0:b9:d2:b3:0f:98:c4:
                    30:6b:41:38:80:d8:14:59:ed:ef:6c:08:10:2c:cf:
                    bf:d0:65:35:2d:34:f5:07:a1:34:6a:a2:62:86:ae:
                    9d:90:36:53:cf:ed:13:a0:61:99:18:b9:70:5b:c2:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:02:A4:55:B8:C3:A3:76:A1:91:4E:8D:95:F3:5F:05:91:E0:53:3C
            X509v3 Authority Key Identifier:
                keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:c1:98:62:a0:72:6f:d0:21:ab:1b:d3:49:3a:a3:ee:80:
         cd:b5:b0:14:0a:a8:6e:d1:1c:cb:bc:c4:00:f6:a3:29:cc:47:
         da:f4:73:f0:ae:74:51:d3:55:ec:b7:88:57:96:8b:22:78:a1:
         c9:a8:63:62:fc:58:29:29:37:97:6c:88:19:f0:62:27:fc:8f:
         ad:1e:d6:5a:05:6d:a1:7a:aa:1a:0c:3c:95:f6:1d:bf:6d:cd:
         61:1a:6c:58:81:cc:4b:1a:25:c9:3f:1c:71:9e:53:a0:f7:25:
         00:89:f4:c2:97:93:9d:18:88:42:76:ad:b5:22:ea:47:2c:12:
         c0:96:f6:a9:29:7d:6a:8c:1a:38:1b:e9:12:c7:15:3c:1b:4c:
         f4:27:4f:6e:99:48:bc:bf:8d:36:74:06:c8:40:5b:54:6d:eb:
         ea:9d:10:3a:e4:c1:59:d4:b1:3b:e1:95:7f:e6:8f:7a:9e:f0:
         d1:6c:be:bf:4b:47:03:a2:36:a2:a9:5a:8a:c7:51:b8:d6:1d:
         2a:6b:54:28:18:18:d4:d0:e3:80:18:91:02:2c:da:f5:2f:da:
         6e:1c:b2:66:b5:1f:35:64:fa:67:49:de:b6:0d:0a:38:45:9f:
         41:42:7e:a3:be:db:6d:85:de:4a:c6:c1:cb:5d:7a:3f:83:72:
         da:90:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:21 2024 by rpki-client on console-ams.rpki-client.org