Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          /o5VRGNEdgTocMmb3s0xHtZIr0ioQGJomEQDIhiHkGQ=
Subject key identifier:   60:5F:42:4E:83:77:C0:80:77:E6:61:F2:CA:90:CF:67:2B:77:3B:14
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       018F855A8E278CB31B18D2A2683A6A428DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          0386
Signing time:             Fri 17 May 2024 07:00:55 +0000
Manifest this update:     Fri 17 May 2024 07:00:55 +0000
Manifest next update:     Sat 18 May 2024 07:00:55 +0000
Files and hashes:         1: 0ENZgtloNsItLMv-0ohLJXkH4FU.roa (hash: HRJXJv+RP5Y5gK4WwoYh2rlTOq3f0Vgu33byzehSXjk=)
                          2: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: SvheWlRH84xzJO/gOA+J/BiCpM0J1BQqKfiu25Fl3nU=)
                          3: aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa (hash: 68lkjcJ9z/QFmgoq7nyO2oC0TgK8YEhUgXa9kTboFhI=)
                          4: h5YdmnvV1AQtSkmCWQI_s8TbR68.roa (hash: Q3KRHEm4NFuGLlfKOJgY1hSGzXdFqc7/yE81XLjJwY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:8e:27:8c:b3:1b:18:d2:a2:68:3a:6a:42:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: May 17 07:00:55 2024 GMT
            Not After : May 18 07:00:55 2024 GMT
        Subject: CN=605f424e8377c08077e661f2ca90cf672b773b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:2b:ed:97:8e:43:ec:fb:53:42:c3:69:27:
                    70:1f:fd:43:2c:44:3a:fc:17:73:a9:1f:50:73:41:
                    e3:86:44:7b:ec:f7:c3:29:a0:20:7f:65:d4:2f:0e:
                    a0:f3:d6:a1:ea:ed:42:86:0c:0a:f0:a8:b0:3a:e1:
                    45:04:4a:85:db:09:a0:ab:d8:8f:57:4a:5e:33:b7:
                    73:76:4c:f8:96:38:d8:29:d7:9c:cf:6e:e1:51:58:
                    fd:a4:3f:1f:59:14:9d:3f:32:6b:45:02:bb:bc:9b:
                    cb:b8:02:be:64:9d:24:1a:89:ca:f5:f1:ad:16:34:
                    35:e6:53:11:1e:60:31:1e:c2:9e:10:67:5d:92:92:
                    63:3d:3e:25:c5:ea:0a:7e:74:e6:37:65:c6:f0:a3:
                    44:dd:a2:c2:23:cf:8b:c6:64:a0:3d:60:6f:7f:70:
                    01:7f:7f:e2:a5:5c:93:33:d7:9d:69:b8:e6:08:8c:
                    9f:c5:9d:3a:9f:bb:39:0a:33:80:fd:39:c2:f7:a8:
                    89:42:e2:77:28:62:e1:ac:51:68:8c:4e:f2:8e:6f:
                    7a:03:4f:bd:8d:4a:81:1c:0d:a6:14:b4:14:8f:6b:
                    9c:66:82:6b:7a:e9:00:1e:7b:a3:f5:20:7e:d4:9f:
                    fa:39:67:13:93:b5:0a:13:ba:23:2d:63:9a:5f:50:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:42:4E:83:77:C0:80:77:E6:61:F2:CA:90:CF:67:2B:77:3B:14
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:b6:32:b0:4a:1e:83:e6:ae:83:0c:53:ef:29:69:11:04:
         eb:1d:42:d6:7f:0e:7a:93:af:f9:17:f4:5f:07:10:08:11:3a:
         da:49:bb:66:d7:16:4b:bf:68:77:82:ca:6f:86:6b:40:24:3e:
         0b:4d:8d:62:33:85:af:b9:30:ba:4a:3e:67:d7:0e:1d:3a:c5:
         ae:b1:83:ac:da:b6:e8:c6:be:96:93:5f:ed:8e:10:70:7b:3c:
         c8:e6:44:4f:c1:34:65:76:d5:31:c6:f9:01:a8:e2:4a:b1:2c:
         2e:66:24:15:f0:70:2f:46:38:2d:62:c1:d3:0d:26:c3:43:ce:
         a9:b8:c6:34:da:ba:0b:56:0b:b4:c6:ab:bf:47:5f:14:23:20:
         60:98:e8:96:53:38:5f:b0:0b:91:12:03:d0:f1:a3:0a:f1:5a:
         41:37:34:10:04:c2:ad:c7:fc:a3:61:bd:fb:ef:dc:78:9b:52:
         c2:c6:24:f6:14:e5:d4:d9:d6:50:b9:71:0b:3f:b7:41:52:10:
         25:b1:25:28:99:8d:11:96:58:d8:4c:63:83:e3:3e:8b:8a:01:
         88:37:e5:8c:1e:ea:43:ca:5d:63:6c:70:45:98:6a:a3:f4:84:
         11:b3:2a:fa:27:1d:f8:fb:34:a2:15:0c:13:5c:12:c3:e3:73:
         5f:59:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:19:32 2024 by rpki-client on console-fra.rpki-client.org