Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File:                     BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier:          SFS0Vacm9k5+QEp5FH4d0qPpwWdUShMizUkDzZs603M=
Subject key identifier:   55:C8:C0:AF:78:41:47:D7:B9:B0:ED:1A:95:51:07:D6:CC:38:F9:A7
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer:       /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial:       018F42D62D23B68638C7950CDCE124007393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number:          0D05
Signing time:             Sat 04 May 2024 09:01:23 +0000
Manifest this update:     Sat 04 May 2024 09:01:23 +0000
Manifest next update:     Sun 05 May 2024 09:01:23 +0000
Files and hashes:         1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: /A0+IJ4b2l8oOjjc5BBIk95hgce93OJCPIl/MIPIeZ4=)
                          2: xRLcxCY78ZXkT-imFV-d_9EOfEU.roa (hash: 7EnY32gxDrSwa3e2/ezt6oBcGWwuzlYjRAzKPz9Uze8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d6:2d:23:b6:86:38:c7:95:0c:dc:e1:24:00:73:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
        Validity
            Not Before: May  4 09:01:23 2024 GMT
            Not After : May  5 09:01:23 2024 GMT
        Subject: CN=55c8c0af784147d7b9b0ed1a955107d6cc38f9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:f5:ad:21:65:1e:3a:9b:11:9b:d7:11:20:
                    20:da:9d:06:87:03:49:d3:56:4d:ed:07:d5:86:6e:
                    f1:42:99:d0:7b:db:b0:9c:5b:16:8c:b1:ec:55:59:
                    f3:2a:42:c8:0d:64:6f:81:39:b2:86:b6:57:26:73:
                    8e:b8:d2:4d:02:bf:2d:ba:8d:46:58:96:f0:54:8f:
                    5f:45:92:6e:bf:28:57:37:10:c1:9c:c6:83:7a:87:
                    5e:70:bf:92:19:06:b6:ae:f7:da:ad:c8:b2:5a:92:
                    d6:e2:95:61:a4:76:c5:f8:d8:43:a6:60:4d:dc:d2:
                    e5:42:fd:aa:6f:65:5e:9f:cc:dc:a1:76:97:d5:3a:
                    9e:79:4d:3c:73:10:54:ea:60:a8:dc:73:8b:d8:d8:
                    1d:50:d6:8f:ec:06:45:5d:c1:cf:e7:24:a2:41:d4:
                    5f:9f:8b:cb:1b:c0:fd:ea:85:d9:9c:3b:1e:ad:6e:
                    75:40:b1:c5:21:cc:60:0b:87:da:44:6a:a8:ff:ef:
                    53:3b:92:36:bc:eb:a0:61:e1:76:5d:53:69:ea:db:
                    5a:cf:24:cb:03:20:58:4a:75:9e:21:1d:51:4b:9f:
                    4a:16:a3:71:dd:74:3a:46:4a:ef:86:c8:e6:d0:65:
                    8f:66:0b:cd:f4:46:2d:3d:45:1c:45:55:3a:ce:74:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:C0:AF:78:41:47:D7:B9:B0:ED:1A:95:51:07:D6:CC:38:F9:A7
            X509v3 Authority Key Identifier:
                keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:07:3e:71:78:9d:9f:fc:09:4d:01:0e:c1:87:83:f5:4f:d3:
         57:eb:ca:1e:fb:74:98:41:e8:25:df:4e:32:3f:d2:f6:77:18:
         e6:9b:10:0e:34:b2:19:a0:82:a2:a3:dd:d3:f3:3c:84:68:fb:
         ff:10:ce:9f:3c:b5:71:b7:ef:33:a2:29:13:b7:53:ca:8e:4d:
         79:46:39:ec:7b:8f:ac:28:7d:65:0a:a3:d9:bf:fe:db:58:1d:
         c2:ca:c0:ca:6b:df:d1:61:b8:6a:b9:8a:32:34:9b:ab:e3:14:
         95:b8:c5:3d:96:35:8b:c6:96:23:df:68:50:d7:81:d8:22:00:
         28:34:35:33:43:c5:98:d0:fe:5b:46:2e:4d:bf:86:70:05:7d:
         66:22:1b:44:49:4a:4b:97:c5:85:8d:78:ba:93:af:a8:ef:dc:
         b4:16:de:55:56:1f:7a:5f:62:36:26:d9:11:5e:f9:83:96:96:
         e7:95:78:d6:3b:90:3a:5f:34:85:d9:73:ef:d2:94:d9:82:ce:
         ed:7d:7a:45:66:0b:0e:e6:95:3b:2d:5c:90:87:20:19:70:15:
         10:1b:91:a2:da:eb:05:c3:b1:e6:98:a8:9a:ed:84:3c:da:68:
         24:8f:4f:42:c4:9d:66:5e:e9:35:d5:3b:49:5a:80:41:2d:7f:
         7c:29:b5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9C1i0jtoY4x5UM3OEkAHOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTA4ZmI5YWY0ZDZjYWZjY2ZhZTNiMjhlYzZlZDQ5YzQy
M2VmYzYwHhcNMjQwNTA0MDkwMTIzWhcNMjQwNTA1MDkwMTIzWjAzMTEwLwYDVQQD
Eyg1NWM4YzBhZjc4NDE0N2Q3YjliMGVkMWE5NTUxMDdkNmNjMzhmOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs371rSFlHjqbEZvXESAg2p0GhwNJ
01ZN7QfVhm7xQpnQe9uwnFsWjLHsVVnzKkLIDWRvgTmyhrZXJnOOuNJNAr8tuo1G
WJbwVI9fRZJuvyhXNxDBnMaDeodecL+SGQa2rvfarciyWpLW4pVhpHbF+NhDpmBN
3NLlQv2qb2Ven8zcoXaX1TqeeU08cxBU6mCo3HOL2NgdUNaP7AZFXcHP5ySiQdRf
n4vLG8D96oXZnDserW51QLHFIcxgC4faRGqo/+9TO5I2vOugYeF2XVNp6ttazyTL
AyBYSnWeIR1RS59KFqNx3XQ6Rkrvhsjm0GWPZgvN9EYtPUUcRVU6znT0awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXIwK94QUfXubDtGpVRB9bMOPmnMB8GA1UdIwQY
MBaAFAWgj7mvTWyvzPrjso7G7UnEI+/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEt
ZDJiMjNhMzU1ZWRhLzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEtZDJiMjNhMzU1ZWRh
LzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwc+cXid
n/wJTQEOwYeD9U/TV+vKHvt0mEHoJd9OMj/S9ncY5psQDjSyGaCCoqPd0/M8hGj7
/xDOnzy1cbfvM6IpE7dTyo5NeUY57HuPrCh9ZQqj2b/+21gdwsrAymvf0WG4armK
MjSbq+MUlbjFPZY1i8aWI99oUNeB2CIAKDQ1M0PFmND+W0YuTb+GcAV9ZiIbRElK
S5fFhY14upOvqO/ctBbeVVYfel9iNibZEV75g5aW55V41juQOl80hdlz79KU2YLO
7X16RWYLDuaVOy1ckIcgGXAVEBuRotrrBcOx5piomu2EPNpoJI9PQsSdZl7pNdU7
SVqAQS1/fCm18A==
-----END CERTIFICATE-----
Generated at Sat May 4 17:49:22 2024 by rpki-client on console-ams.rpki-client.org