Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File:                     Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier:          eZDzylPOmnJJARzYkaNyFqFeFhaq/aJZ1OuCnzhytSw=
Subject key identifier:   3B:F8:4A:E3:53:EB:64:7A:0A:90:98:22:C9:FB:11:33:11:07:8C:09
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer:       /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial:       018F4A588D321D55BC8B0B60BFDA83FB996E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number:          0FE0
Signing time:             Sun 05 May 2024 20:01:08 +0000
Manifest this update:     Sun 05 May 2024 20:01:08 +0000
Manifest next update:     Mon 06 May 2024 20:01:08 +0000
Files and hashes:         1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: mq8ifRv2AtMVOJJ37u26kCK0/XTuB80IIlLS+GCrLlg=)
                          2: jX76HCBI8HzCt6MaqwSWhd9ECvs.roa (hash: uFbBJ8h9GeCRHbD58fnZjmr/IyBqZVV/95/IaIo2QUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:8d:32:1d:55:bc:8b:0b:60:bf:da:83:fb:99:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
        Validity
            Not Before: May  5 20:01:08 2024 GMT
            Not After : May  6 20:01:08 2024 GMT
        Subject: CN=3bf84ae353eb647a0a909822c9fb113311078c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:52:d6:0c:3b:e1:11:a0:96:d8:97:9e:fb:
                    c0:62:fa:0b:89:c7:09:fc:38:eb:9d:27:da:87:64:
                    e8:36:7f:c6:82:57:1f:01:83:dc:a4:80:1e:76:17:
                    ce:7d:58:79:fa:be:3a:72:f0:d1:0b:82:cd:d3:8d:
                    28:3b:b8:ae:35:c8:68:b3:4e:83:fb:4a:97:b7:d7:
                    0a:fa:1e:65:f1:5a:15:24:50:de:6d:26:9e:5b:2f:
                    91:1c:5c:6d:6a:c8:62:d2:2c:bc:21:88:60:3f:08:
                    56:95:07:20:ff:65:d0:39:95:47:42:f6:17:7b:8a:
                    ff:f5:26:f7:ac:19:90:38:da:5a:de:03:d3:76:40:
                    4a:7a:7b:98:bb:24:32:71:d3:41:ee:2d:de:b1:36:
                    9e:8e:8e:d6:14:6e:1b:a7:00:43:a1:93:75:59:b2:
                    77:7d:57:fe:96:94:fd:2f:02:ea:35:41:93:ee:09:
                    66:49:d3:77:cf:39:f2:53:ba:fd:0d:a9:a5:1e:9f:
                    b0:d8:c8:3d:0d:63:12:5a:21:2d:06:03:5c:0e:0e:
                    80:91:65:95:31:8d:fb:53:94:d9:b1:3f:e7:17:14:
                    6d:24:8b:b0:ee:37:6a:a8:4b:24:9b:2e:72:d0:b8:
                    5f:ce:dd:b9:d7:cb:b7:4d:8d:52:9d:2e:de:ce:1b:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:4A:E3:53:EB:64:7A:0A:90:98:22:C9:FB:11:33:11:07:8C:09
            X509v3 Authority Key Identifier:
                keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:69:aa:87:23:ed:0e:d5:c2:83:c9:a7:69:5c:96:61:d8:
         12:61:c9:4f:87:e5:21:6f:41:5a:5a:c1:77:1f:01:66:d7:51:
         2d:b7:e3:f8:23:0b:5f:cb:40:df:8e:95:7e:54:39:d9:15:5d:
         48:78:9d:de:d1:50:58:89:42:31:c2:e9:c1:fc:59:a7:08:a4:
         75:5c:cc:9d:7a:9a:3c:4e:9f:75:ed:e5:13:80:1a:09:b0:9f:
         ee:05:eb:8b:81:05:aa:0e:af:f5:a7:89:d5:b3:28:1a:13:2a:
         8e:2d:8b:2e:23:b6:f3:6b:80:1d:32:3d:e9:07:7d:dd:f1:51:
         82:4b:d9:88:03:f1:56:42:ca:9e:e6:e2:f0:97:a2:9c:08:80:
         17:0e:43:0b:0a:18:e5:3b:b2:5b:0d:83:f9:b8:6b:1a:83:9b:
         38:78:98:c7:6a:fc:28:c8:cb:35:80:dd:89:19:5e:0f:0d:b6:
         22:22:38:e5:b5:50:93:b2:98:70:18:e5:66:c1:9e:66:be:98:
         e9:d6:f1:45:4b:95:9e:42:d0:17:7a:d9:62:7c:21:d2:78:f9:
         43:48:41:8c:47:b2:dd:ed:b6:df:8c:7d:a0:3a:d3:28:45:84:
         a4:32:10:93:66:30:03:c3:44:a1:ad:fc:e2:ad:21:11:14:33:
         37:e8:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:50:17 2024 by rpki-client on console-ams.rpki-client.org