Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File:                     BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier:          g3Y38mQ0XFl4MYtXuxbxodKBIEtucsTuCIIfcYXaVvI=
Subject key identifier:   15:16:71:67:A5:49:FE:C9:48:17:98:97:8F:99:A9:69:DB:B7:8C:45
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer:       /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial:       01936A7D84307090C033AEEEFA972D2B7A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 22:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:30 +0000
Files and hashes:         1: 7WJVTfeZTk2qg-T-IV1BuWvfjhs.roa (hash: Vy8PSyf8Q30yJuzTBFiXeSX+IvCVR+BSVQFELl6wfMs=)
                          2: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: D7j4s4IpZMO2ROUxJGBG2aZNBP9BU7QJp632acZJAkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:84:30:70:90:c0:33:ae:ee:fa:97:2d:2b:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
        Validity
            Not Before: Nov 26 22:00:30 2024 GMT
            Not After : Nov 27 22:00:30 2024 GMT
        Subject: CN=15167167a549fec9481798978f99a969dbb78c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:8d:fe:08:23:c2:50:42:52:53:05:15:44:
                    3b:52:22:3e:63:e9:94:33:0b:4f:bb:f7:0f:ee:09:
                    cd:e3:6b:47:34:58:5a:f7:8a:78:96:62:fa:8d:39:
                    70:dc:2f:0b:75:b7:9f:d1:dd:28:fe:e8:1a:bf:c6:
                    a0:36:8f:00:c6:08:33:8c:82:bc:5f:f5:8a:63:50:
                    cd:04:46:83:d6:85:61:37:8a:22:31:3d:1a:44:c1:
                    8c:b4:ff:15:53:fd:b8:d1:e7:37:8b:8b:61:fc:4e:
                    bf:f8:12:03:b1:46:69:a9:8f:43:4a:77:9c:91:82:
                    7e:7c:af:ec:a8:40:14:79:b2:c8:c4:d4:1a:c2:ed:
                    3c:80:b2:1e:82:ad:e0:b2:67:38:38:2d:3e:bf:47:
                    36:f3:6a:c6:cd:25:9a:c7:15:6e:33:ff:20:14:0d:
                    11:03:b1:74:a1:2e:7b:05:1f:2e:19:71:8d:1b:dd:
                    1c:c7:fb:12:89:ae:c5:ec:95:ab:b1:da:22:4c:0f:
                    f2:d7:ed:a9:f5:08:7c:5a:7e:4a:49:b1:66:56:82:
                    71:4a:0f:a9:85:e2:d9:70:20:a9:2f:5f:b2:f3:b0:
                    07:a9:2a:33:6e:fa:0b:12:35:6c:37:93:45:36:e6:
                    f4:e4:4f:cd:09:4a:e2:35:72:fc:9c:a1:60:3c:d1:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:71:67:A5:49:FE:C9:48:17:98:97:8F:99:A9:69:DB:B7:8C:45
            X509v3 Authority Key Identifier:
                keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:37:4b:17:b4:d3:f3:e6:97:25:8d:bd:1f:d4:01:de:6d:
         ac:78:30:87:cd:db:b7:92:42:da:91:d1:d0:fd:a2:8d:29:56:
         5b:a5:d9:e8:d3:13:13:be:e8:19:55:ae:29:45:d6:99:a5:fa:
         f3:16:43:0d:90:96:9a:29:8a:34:2f:28:c9:c6:ae:08:f2:bd:
         f3:76:40:05:1a:55:ae:44:1e:24:70:67:6e:9e:96:d1:f3:d2:
         71:42:5b:52:4c:b8:e2:92:2f:5d:c4:3a:0c:6c:36:79:84:78:
         30:e6:32:88:00:63:7d:3d:51:ae:bd:21:be:5b:5c:b6:6f:39:
         5f:5c:6f:42:e1:66:c9:bf:4c:65:1c:2d:46:b5:28:04:c5:83:
         70:bf:80:35:6b:44:22:24:48:3c:06:a2:fc:a6:73:2b:38:4a:
         23:06:0f:f0:8c:7d:de:68:43:a7:3a:86:57:a2:06:da:15:5d:
         00:72:4b:ad:2c:e8:9a:ae:c3:f5:c3:01:c2:36:1f:0c:5e:dc:
         34:3e:25:51:54:c0:33:0b:61:8d:70:ad:75:db:83:cb:71:3e:
         a5:f7:38:74:a2:49:ff:ca:80:be:00:19:e7:f9:d1:f1:42:b7:
         0f:af:6f:f2:66:0f:f8:fc:8b:7d:28:3a:43:5d:ed:7e:e7:bd:
         78:21:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:00 2024 by rpki-client on console-fra.rpki-client.org