Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          wXiABd5LC6lVVnUj/NYwh+Y9c40l7DT5xuXJR5Zxnnc=
Subject key identifier:   9D:DA:EC:4F:1D:E7:DC:35:4F:48:6F:08:69:C6:A1:53:F1:D8:C0:C3
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       018F396587B5110FF1123A43DA804147B03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 13:01:46 +0000
Manifest this update:     Thu 02 May 2024 13:01:46 +0000
Manifest next update:     Fri 03 May 2024 13:01:46 +0000
Files and hashes:         1: 7q93Qtz0Joas6oXWoUqHs9WLTls.roa (hash: o3JPzwHLaYCS4V+PZ0mbQvY7XZBXYEA1GJltgBWA8l0=)
                          2: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: SP4SksFg4xMFCR0SpfiB9zTNx7VTTNgNjZQGgXAk2U0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:87:b5:11:0f:f1:12:3a:43:da:80:41:47:b0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: May  2 13:01:46 2024 GMT
            Not After : May  3 13:01:46 2024 GMT
        Subject: CN=9ddaec4f1de7dc354f486f0869c6a153f1d8c0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:bb:22:ee:9b:3e:2f:45:6d:74:3d:e6:0d:
                    5c:a8:ab:46:ae:28:f7:b3:bf:28:02:3e:22:0e:83:
                    16:87:67:95:83:7d:76:2a:42:6b:82:76:b6:18:1d:
                    f0:2c:09:e8:e5:a0:94:a4:bd:8c:77:fc:b1:ea:48:
                    74:b0:34:7d:37:75:9c:36:eb:0c:85:38:fc:dc:17:
                    c2:b5:3b:93:53:1b:27:4f:91:75:60:1d:97:94:f2:
                    1e:40:67:ba:cf:b4:6f:ea:24:51:96:47:43:3c:5d:
                    6a:01:9f:c5:85:64:44:f4:31:a9:b0:b0:4e:37:8f:
                    cb:ba:02:35:99:d8:1f:fb:b5:e8:5f:95:05:64:af:
                    d4:90:ed:fe:28:b3:86:6d:8d:11:67:bc:40:57:49:
                    eb:74:96:2b:16:13:65:53:05:5c:ed:a4:66:2a:83:
                    9a:c0:04:fc:c9:3b:52:8e:f9:e4:4b:b9:ce:b0:96:
                    17:3e:14:ed:f4:a9:7d:ba:a2:21:fe:41:b0:ef:1b:
                    27:75:10:48:e2:8c:cf:40:0f:51:1a:7b:bc:94:b9:
                    d4:0a:60:31:3e:69:28:f9:2b:62:71:db:60:d5:f3:
                    d7:e2:f2:3c:3c:91:db:44:17:81:49:d1:1f:63:27:
                    c0:72:27:b4:a8:fb:18:49:78:cb:1e:0d:cf:c9:07:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DA:EC:4F:1D:E7:DC:35:4F:48:6F:08:69:C6:A1:53:F1:D8:C0:C3
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b8:e3:8d:05:10:53:ab:47:a5:26:da:95:f8:8e:b5:6c:d3:
         89:a4:62:a9:d0:2c:90:96:ae:cf:3a:68:3c:96:f6:f5:90:9c:
         28:df:c3:1b:48:dc:e3:f1:da:d7:ae:04:be:76:77:a5:5c:1c:
         a3:14:04:7c:90:70:86:91:bc:a5:d2:87:be:29:33:49:d8:fc:
         2f:90:28:af:b8:f4:81:13:e6:18:e5:63:5f:61:01:31:df:39:
         3b:aa:61:4d:e3:4b:e9:1d:5f:45:c0:26:5f:e1:22:fe:c0:1b:
         de:73:f5:5e:38:07:c6:ff:03:f7:5d:45:5d:b3:89:cf:d7:1b:
         16:cf:dd:b6:aa:a9:e8:cc:29:17:27:53:88:ea:b3:fe:f1:fb:
         29:99:d6:39:51:5b:8b:b2:87:55:3b:d7:15:7b:58:60:30:e5:
         21:4d:55:ad:3d:b0:c0:38:6d:49:ff:a5:c9:39:4d:d0:2f:58:
         e3:30:b6:1b:9d:9d:6e:4a:28:dd:33:3e:40:d3:d4:df:8e:b4:
         fa:ea:be:0c:33:d8:f8:55:af:18:80:50:da:e1:8a:c2:92:8f:
         a8:f7:4c:83:17:0c:73:05:41:81:7e:0c:93:d1:e7:ee:67:d0:
         25:65:81:f0:a6:24:a9:63:51:99:f7:d2:b4:10:cc:a6:f6:ed:
         2b:f3:11:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:29 2024 by rpki-client on console-ams.rpki-client.org