Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File:                     BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier:          wggapX+7ESiQkZYXaszRj0ORFdXtxp86+8zKS+RdCCw=
Subject key identifier:   10:8B:2B:56:32:CC:71:26:80:5F:92:3F:7B:01:9A:AA:75:5A:D1:6A
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer:       /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial:       0191F9A2DBDFAB29230798A2AE906A375867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number:          010C
Signing time:             Mon 16 Sep 2024 07:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:25 +0000
Files and hashes:         1: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: FPooqsOQo5+zn7VVVsOHPj/J0Vgz1YWckf+onlCbppg=)
                          2: JSNxkdlP9tKX-tzblYkybzWcezQ.roa (hash: UGyE+P9Blm5zibHnospzZISVanA54FNXSxi3/DTGN2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:db:df:ab:29:23:07:98:a2:ae:90:6a:37:58:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
        Validity
            Not Before: Sep 16 07:01:25 2024 GMT
            Not After : Sep 17 07:01:25 2024 GMT
        Subject: CN=108b2b5632cc7126805f923f7b019aaa755ad16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:56:af:54:b9:1a:ae:4d:49:3c:ba:b4:2f:
                    9d:62:b4:5c:04:20:4d:c1:fa:b2:de:56:29:e4:10:
                    de:d9:95:17:d2:25:de:a5:41:8a:43:a6:af:58:49:
                    6e:64:d6:95:4c:71:bb:f6:d6:df:31:55:dd:35:04:
                    83:33:4c:86:59:9c:7a:77:63:7d:55:17:45:78:3d:
                    a2:f9:17:a1:93:08:0b:53:d1:f5:ed:6b:00:02:e3:
                    c1:b5:32:1e:fa:17:9e:b0:bc:4e:95:14:7d:7b:85:
                    d7:24:68:3c:ed:06:fd:2f:70:8c:8b:d5:79:e1:86:
                    db:0b:1f:eb:a3:98:ea:b5:77:72:fc:04:31:2f:6f:
                    c8:6e:3f:24:17:3e:80:9a:52:3a:92:55:7d:e9:27:
                    0d:6b:47:43:cc:8c:10:04:f9:45:d3:61:43:4e:fc:
                    c8:80:91:55:e0:f6:fe:2c:83:94:a8:29:a4:c1:67:
                    c6:99:e7:f4:21:41:b3:d6:da:94:13:2f:60:3b:48:
                    7b:c4:23:ca:4c:01:5b:ea:f1:ff:1e:92:21:05:3f:
                    5b:1f:54:c0:0a:4d:e7:2b:84:6f:8d:6e:5f:f7:c9:
                    f4:fa:36:f2:6b:ed:a2:eb:2b:b4:37:44:a2:a3:a2:
                    85:b6:28:cc:22:bf:55:fe:02:a1:29:f1:85:e5:ef:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8B:2B:56:32:CC:71:26:80:5F:92:3F:7B:01:9A:AA:75:5A:D1:6A
            X509v3 Authority Key Identifier:
                keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:65:e4:1f:44:09:14:a7:31:3d:7b:88:5a:eb:b3:56:84:
         5b:9b:92:4c:52:9c:3c:c9:dd:52:6b:d3:f0:ef:52:e9:02:df:
         ab:e6:d8:f2:3e:df:49:35:38:0d:93:cf:85:49:5a:e8:b2:70:
         29:ce:bd:f7:78:1c:8d:b5:3d:fc:b8:d6:e6:c4:95:db:5a:81:
         ad:e5:36:a2:ce:bb:cc:ed:83:11:f7:9d:a2:83:d0:89:ec:d6:
         94:ca:b4:99:52:99:fd:73:00:63:f0:e0:ff:71:0c:c6:61:72:
         07:f7:64:36:43:07:86:4c:1a:c4:3b:16:f3:f2:e0:58:12:5f:
         4e:67:ba:6c:d7:bb:65:e4:13:f0:df:29:ed:b1:42:fc:10:c5:
         1e:66:ce:07:02:35:38:4e:bc:f2:ea:40:13:37:03:71:33:bd:
         c5:4f:53:87:1b:a8:10:50:f8:1f:29:2b:ab:1a:4b:8d:2e:f2:
         ac:10:96:f5:5f:6a:0e:16:b9:96:c4:e7:a3:5f:d6:20:a6:41:
         06:10:c3:42:09:24:36:d0:79:f9:f9:e9:bd:f8:1d:ac:31:01:
         bf:61:3b:e2:ed:c0:6f:51:67:57:cf:9f:0c:99:07:9a:d0:3d:
         cc:4d:71:98:f5:ec:08:a1:83:59:3e:b0:0d:4a:4c:26:40:54:
         42:62:37:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5otvfqykjB5iirpBqN1hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjQwOTE2MDcwMTI1WhcNMjQwOTE3MDcwMTI1WjAzMTEwLwYDVQQD
EygxMDhiMmI1NjMyY2M3MTI2ODA1ZjkyM2Y3YjAxOWFhYTc1NWFkMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr69Wr1S5Gq5NSTy6tC+dYrRcBCBN
wfqy3lYp5BDe2ZUX0iXepUGKQ6avWEluZNaVTHG79tbfMVXdNQSDM0yGWZx6d2N9
VRdFeD2i+RehkwgLU9H17WsAAuPBtTIe+heesLxOlRR9e4XXJGg87Qb9L3CMi9V5
4YbbCx/ro5jqtXdy/AQxL2/Ibj8kFz6AmlI6klV96ScNa0dDzIwQBPlF02FDTvzI
gJFV4Pb+LIOUqCmkwWfGmef0IUGz1tqUEy9gO0h7xCPKTAFb6vH/HpIhBT9bH1TA
Ck3nK4RvjW5f98n0+jbya+2i6yu0N0Sio6KFtijMIr9V/gKhKfGF5e+YLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCLK1YyzHEmgF+SP3sBmqp1WtFqMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuz9l5B9E
CRSnMT17iFrrs1aEW5uSTFKcPMndUmvT8O9S6QLfq+bY8j7fSTU4DZPPhUla6LJw
Kc6993gcjbU9/LjW5sSV21qBreU2os67zO2DEfedooPQiezWlMq0mVKZ/XMAY/Dg
/3EMxmFyB/dkNkMHhkwaxDsW8/LgWBJfTme6bNe7ZeQT8N8p7bFC/BDFHmbOBwI1
OE688upAEzcDcTO9xU9ThxuoEFD4HykrqxpLjS7yrBCW9V9qDha5lsTno1/WIKZB
BhDDQgkkNtB5+fnpvfgdrDEBv2E74u3Ab1FnV8+fDJkHmtA9zE1xmPXsCKGDWT6w
DUpMJkBUQmI3Xg==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:12:10 2024 by rpki-client on console-ams.rpki-client.org