Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File:                     bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier:          geVPPSRJRx4LVMsIot52zIViITQKYaGxBzxvVBs/v4k=
Subject key identifier:   46:52:05:77:76:61:BA:D5:89:69:6D:FD:5F:09:A4:71:46:80:E5:E5
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer:       /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial:       018F87495B4F2BA064B2DA3C2B1AAF8C0E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number:          05E3
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: Qjn9tUU0WMkGrBf2CBampV7Fj90.roa (hash: nLkMU6T9mgB9Pqm/W8NlsX47vyx8+jMGtFzGW17FtDs=)
                          2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: b1lfqe//J/fJTqvgwjNggON1CwivTleA156uUimpsMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5b:4f:2b:a0:64:b2:da:3c:2b:1a:af:8c:0e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=465205777661bad589696dfd5f09a4714680e5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:1c:18:62:92:4f:80:dc:17:aa:43:68:63:
                    6e:57:56:78:62:b4:54:65:bc:d7:70:eb:4a:b0:35:
                    68:c5:3f:29:9c:4d:94:a7:36:2c:ab:c3:35:50:b7:
                    2a:cf:e6:87:e5:15:19:d3:9b:90:80:09:26:7a:c1:
                    0d:c1:7b:45:31:d7:a9:90:3b:67:8e:21:8e:01:06:
                    9f:b4:57:c4:be:5c:6f:b5:3f:70:ef:13:0a:53:09:
                    f0:0f:e8:ff:89:18:6b:99:cf:c4:ef:d7:f1:f6:0f:
                    8d:69:f6:c0:53:8a:5e:72:19:7b:5f:9b:32:27:08:
                    cc:1a:8b:50:b3:fb:04:bb:c0:cb:2e:7a:c2:a3:b7:
                    4f:13:22:3a:c9:2d:9f:18:42:56:cb:9a:15:2d:2a:
                    ce:97:99:3a:4e:e7:9a:f0:ba:f2:16:fa:04:27:c2:
                    b7:e5:4a:a0:46:a6:67:d2:f7:b0:c7:96:25:07:d0:
                    df:66:20:1f:12:68:d7:6f:cc:ae:79:c0:a9:f8:52:
                    2d:8f:84:13:b1:b6:38:06:b9:6a:95:7f:85:e5:15:
                    c1:e5:d9:ff:1f:9a:15:57:e2:f7:5e:02:15:0d:52:
                    55:61:9f:3d:9e:97:73:91:6e:9d:d5:26:1e:1e:18:
                    2c:e5:6a:48:51:08:62:35:7f:d8:10:51:6a:ad:ee:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:05:77:76:61:BA:D5:89:69:6D:FD:5F:09:A4:71:46:80:E5:E5
            X509v3 Authority Key Identifier:
                keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:ad:f8:03:94:df:0f:41:50:8d:1b:77:04:33:c4:14:d4:
         5c:21:9e:03:a8:2b:2f:24:b3:1f:97:9b:49:d8:7b:68:63:7e:
         6d:e3:71:e7:f1:52:f0:78:da:56:9d:e7:0e:3b:4a:93:4c:f5:
         e2:1b:60:d8:4d:1e:bd:ca:c5:99:02:40:b5:15:9d:d4:7d:3d:
         4c:0f:d6:e8:85:19:9f:b3:07:9f:31:62:50:68:0b:cd:6a:e7:
         e0:eb:97:71:92:a9:d9:2a:14:73:30:41:23:06:a2:36:1a:7e:
         35:05:70:22:74:8a:2a:a8:04:33:77:60:b2:fb:3c:49:5a:b6:
         d3:0d:aa:1e:c3:63:8b:74:86:c0:96:1f:c1:78:65:e2:86:4f:
         47:a2:5b:86:09:2e:1b:9f:58:83:24:dd:cd:ed:ac:93:70:25:
         41:a8:a3:56:1c:55:27:8b:5d:71:a0:b3:13:12:ce:f8:76:80:
         a2:e0:fb:6f:e0:4f:bf:51:9a:93:e0:9e:c4:c1:d5:42:4b:43:
         f4:d5:a5:fc:0b:9e:55:e3:2b:07:8a:30:03:c6:b0:10:b7:23:
         3d:9d:25:69:83:32:5d:26:d6:ef:a8:88:61:bc:7e:2f:8c:87:
         5c:42:88:a1:d4:d2:d9:d3:bc:71:77:5a:28:2f:ec:1b:b5:2b:
         ed:33:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:32 2024 by rpki-client on console-ams.rpki-client.org