Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          Q5ubwN1q/zr7KFCqj/z8fOPmPpjnDsGgZb07cysrKLU=
Subject key identifier:   E5:28:06:B6:A7:45:C1:AC:58:3E:97:2C:26:89:EB:ED:64:40:91:D6
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       01935199BF92F319FB352FD78A9AC73092FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          11F6
Signing time:             Fri 22 Nov 2024 02:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:50 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: s9O4NAygSSUkAxKoODPy1IgQ9phd7HRdh43SZzgkliU=)
                          2: jX76HCBI8HzCt6MaqwSWhd9ECvs.roa (hash: uFbBJ8h9GeCRHbD58fnZjmr/IyBqZVV/95/IaIo2QUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:bf:92:f3:19:fb:35:2f:d7:8a:9a:c7:30:92:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: Nov 22 02:00:50 2024 GMT
            Not After : Nov 23 02:00:50 2024 GMT
        Subject: CN=e52806b6a745c1ac583e972c2689ebed644091d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:89:99:69:03:e3:60:21:99:eb:04:85:6d:
                    bf:06:12:21:f2:fd:8d:9d:2a:af:ff:c5:f9:f5:59:
                    ed:07:8c:48:a5:71:21:cb:1a:04:63:f5:0e:3d:64:
                    87:2e:22:40:76:f1:d1:d4:96:e0:78:a1:21:0b:3a:
                    9a:90:4c:bd:01:6b:62:96:52:95:19:67:6b:32:e8:
                    40:f8:d4:2e:0c:63:5e:7f:d3:a5:c2:9b:72:f1:81:
                    7e:70:c4:9b:9b:71:08:61:a6:ed:85:4c:a7:23:e2:
                    8a:2a:bb:7d:96:21:87:ff:d0:2e:01:73:09:8a:8c:
                    06:08:a7:bf:1a:46:5b:91:c4:ba:21:e3:d8:e2:33:
                    f9:65:48:93:bc:d1:12:06:c4:ad:82:ce:a3:da:9a:
                    1c:6b:18:11:66:ae:fc:d7:9f:74:5c:63:08:e6:db:
                    9a:aa:47:fc:95:1b:64:61:ac:95:04:89:68:eb:ff:
                    52:90:9c:33:0a:ec:ac:55:1e:15:23:b9:cd:6f:0b:
                    a2:49:a4:ec:8b:29:ae:97:36:0c:99:16:3b:25:32:
                    fa:53:1a:46:5b:08:69:6c:56:0c:c7:48:6e:a3:fa:
                    b6:0f:60:88:03:ae:b7:2d:16:ba:75:ff:36:b5:df:
                    00:78:34:96:d2:79:11:13:f0:e5:0b:4e:92:55:91:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:06:B6:A7:45:C1:AC:58:3E:97:2C:26:89:EB:ED:64:40:91:D6
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:dc:0f:70:6c:58:5b:f5:b6:37:4a:bf:14:68:ba:85:bf:
         fd:f1:18:d2:db:a4:51:a6:f7:ca:db:c5:ec:f1:27:36:22:44:
         17:e2:21:1c:18:84:03:bc:41:d2:07:55:6e:23:97:a6:94:54:
         75:88:e8:a2:11:15:1a:67:60:c8:d7:81:f8:51:9d:29:d6:a8:
         bf:71:9c:03:e0:c1:31:e4:bb:1c:54:02:5d:9c:54:87:b7:b0:
         33:9c:cd:2f:bf:2d:ab:88:1f:77:24:97:f9:c3:cc:67:ee:ba:
         2b:08:81:32:5f:fd:0a:8e:c1:67:30:d7:53:aa:03:0a:fc:78:
         19:d1:01:85:cd:ac:4e:fc:4c:c5:50:f8:65:8c:54:56:f5:49:
         63:90:7a:18:fa:3e:68:80:c2:43:72:e5:a2:1c:e5:37:6f:b1:
         a2:62:97:63:d1:b8:25:61:cf:3c:fe:1c:6e:a8:68:70:2b:68:
         21:8b:60:3e:91:77:23:da:96:c1:fb:d4:27:d5:4a:45:a4:13:
         1a:ec:ca:1c:13:a2:b1:b6:32:88:8e:13:f0:a9:9e:d1:2e:2f:
         f4:1f:6a:0b:15:59:da:ac:b0:86:c9:ec:f1:a4:9b:9a:b6:d8:
         0b:78:c1:24:f2:da:5f:c8:09:69:59:3b:c0:c6:ef:c0:9d:14:
         ee:c8:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:06 2024 by rpki-client on console-ams.rpki-client.org