Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File:                     bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier:          a+UNzxNe3JX4boqtAcR5Df9dwF3KHQ2kDAMc1LszddM=
Subject key identifier:   6B:67:4B:EC:24:73:B1:70:66:64:32:1E:A9:B1:0B:49:0D:95:89:1C
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer:       /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial:       018F87B685FA643F55FA566F0EEACE01BC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number:          04C4
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: GbZy-T_dH67WQNN8htaQD3ROb8g.roa (hash: sOqlZ3bRakJPyH5rMmkrNkDH95aGimG8JZYDcjnIHg4=)
                          2: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: OpiHnZMG82qpW9/nC/qCpB6PwTIlv6HhoU2PIbu0AvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:85:fa:64:3f:55:fa:56:6f:0e:ea:ce:01:bc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=6b674bec2473b1706664321ea9b10b490d95891c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:58:73:f8:04:f0:2f:df:e6:28:dc:09:e6:
                    ca:9d:4a:67:8b:a9:9d:a7:32:99:48:e8:12:0f:94:
                    70:80:3b:c8:4d:6b:fc:f3:73:a0:03:11:c6:53:a4:
                    2b:37:a0:82:a3:0e:37:54:ca:34:63:a3:86:2e:c0:
                    c2:08:46:27:68:77:4a:4f:b1:bb:3e:b8:83:77:ab:
                    59:f2:62:05:bd:b3:4e:82:2b:e9:0c:3f:c8:90:42:
                    a0:17:dd:d9:8e:04:64:06:04:0e:85:07:cd:d9:04:
                    0c:db:38:f0:93:c7:9d:b3:89:84:03:ed:9e:8b:9f:
                    d4:9b:a3:78:12:3b:ff:bb:20:48:a8:b9:0d:37:bf:
                    63:0e:dd:20:ec:f1:6e:a2:07:73:66:f5:78:11:86:
                    5b:8d:49:16:6d:4f:83:7d:d1:23:0f:7a:6b:fd:92:
                    5e:1b:7f:8d:fe:59:00:74:31:98:85:0a:69:db:73:
                    fb:84:9e:7f:80:c8:d9:e2:70:dc:54:4b:fc:5e:27:
                    06:59:1a:ee:5c:c6:b8:54:e1:2c:ce:c1:0f:a4:a0:
                    cd:f2:e1:27:5d:c1:ad:b2:f8:27:75:42:1d:dd:1f:
                    9b:a8:d9:77:bb:5f:07:a5:11:84:f7:eb:4d:56:9a:
                    cf:fd:eb:f0:b2:69:dc:f8:fe:a5:89:9d:af:19:e2:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:67:4B:EC:24:73:B1:70:66:64:32:1E:A9:B1:0B:49:0D:95:89:1C
            X509v3 Authority Key Identifier:
                keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:a1:9c:d1:ec:96:10:a6:90:91:41:7a:a4:8e:b0:9d:09:
         fa:3d:9d:e7:eb:e5:04:f0:a9:da:d7:88:ed:e0:2e:ec:3c:87:
         0f:7e:2d:96:d1:31:1d:23:0c:69:cf:df:a8:1c:f5:3a:63:ba:
         51:60:8f:9c:f0:ac:e0:6d:1e:bc:91:8f:03:8c:e6:38:79:24:
         0d:c9:ca:23:49:7f:e1:12:f7:4b:9f:c9:60:93:2a:2a:19:56:
         6e:23:14:5f:f1:d8:f5:df:15:39:58:29:50:e3:ab:38:f2:2f:
         85:c1:a6:09:8c:78:d2:b8:0a:99:98:51:c4:7e:31:33:66:a1:
         65:63:66:4f:93:69:cf:d9:d1:07:e7:2b:9a:33:1b:3d:9f:fe:
         5c:04:d4:5b:3e:98:46:25:50:f7:ba:4a:f7:23:83:22:c1:53:
         3b:08:11:37:58:55:8d:92:9c:fa:85:3e:81:16:e1:3b:aa:4e:
         62:d0:2d:14:92:c1:14:c3:a6:fa:68:43:57:7e:db:96:3d:5e:
         90:02:09:77:55:fb:44:dc:b6:2d:61:0a:a8:f4:af:d6:7f:30:
         6a:45:d9:fd:78:24:5a:b2:ec:5b:5d:08:55:1a:42:02:eb:08:
         10:f0:e0:e5:85:7c:e8:d3:fc:0b:28:20:35:40:9b:fa:a4:48:
         60:11:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:20 2024 by rpki-client on console-fra.rpki-client.org