Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File:                     BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier:          9GgAgLcUGaWfgf9PyMih8EV+RytbjaZT9rO6AwAbZ2s=
Subject key identifier:   DA:5F:AE:A5:88:EF:3E:A7:BB:6B:10:4C:F3:99:C5:3E:C6:9F:00:34
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer:       /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial:       018F43B1B77CAC22A489663B4CFD99CA2F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number:          0540
Signing time:             Sat 04 May 2024 13:01:11 +0000
Manifest this update:     Sat 04 May 2024 13:01:11 +0000
Manifest next update:     Sun 05 May 2024 13:01:11 +0000
Files and hashes:         1: 7IW3SmTt_8cvqalhdqHuihEjDmE.roa (hash: SXRvEApkGdcOnwH74WijuPo+dx70XkEFptTcPdax7kY=)
                          2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: DDIDVijyRX5z8Gsjc1hAflC94fcQp7MfkXQ+nbHVDM0=)
                          3: N10tvbF_NVgDud9G_U8HdZWgLEs.roa (hash: QQOdiDVY7MERy1uoIGMgoi7QHgGhQ8YrCaxyPxbFMik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:b7:7c:ac:22:a4:89:66:3b:4c:fd:99:ca:2f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
        Validity
            Not Before: May  4 13:01:11 2024 GMT
            Not After : May  5 13:01:11 2024 GMT
        Subject: CN=da5faea588ef3ea7bb6b104cf399c53ec69f0034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:bf:8b:98:d9:54:e5:e8:90:04:b5:f4:c0:
                    68:cc:d1:a9:bc:0c:04:1e:d8:f8:28:fd:62:8f:15:
                    c0:c3:44:60:53:04:1e:7c:e3:dc:9a:09:69:38:9b:
                    a4:00:4c:2e:d0:8c:bc:ee:0a:e7:fb:96:64:1e:f5:
                    a9:e5:17:e4:fd:55:38:ab:3a:78:2d:6a:64:80:d9:
                    de:08:4c:41:b4:0d:9b:89:97:b5:f5:a4:75:0f:e8:
                    2c:93:31:aa:05:f2:f1:db:9a:07:0b:ff:3f:0f:ae:
                    d1:1e:f2:ff:b6:d5:c2:f7:fe:67:e3:a1:c1:ce:c6:
                    22:07:47:38:fa:a0:77:e1:e5:d0:8a:42:da:99:01:
                    32:12:13:bd:83:9a:86:6c:c3:ca:29:2c:1e:c2:ec:
                    63:9f:29:9c:ac:df:54:50:70:b9:44:fd:f9:88:0f:
                    43:e4:bb:7a:6d:5a:1a:80:d7:57:8b:c0:93:ea:63:
                    dc:7e:e1:26:bd:3f:51:80:41:eb:3d:d2:59:80:b5:
                    0e:bd:01:e1:04:9d:11:54:47:4c:54:c9:ac:d0:eb:
                    bf:26:92:52:34:c2:36:2c:46:f1:b1:a6:51:6c:95:
                    d6:31:b7:ed:6c:2a:f2:9a:dd:a1:2b:44:fd:31:9f:
                    e1:c0:ea:f2:27:84:1a:61:18:65:ac:a1:90:72:0f:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:AE:A5:88:EF:3E:A7:BB:6B:10:4C:F3:99:C5:3E:C6:9F:00:34
            X509v3 Authority Key Identifier:
                keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:0e:79:8e:80:73:54:00:16:e8:88:2a:ad:85:9b:92:c7:
         6f:15:88:ae:44:18:1f:4d:fa:f2:13:ff:60:40:6d:95:04:3b:
         bc:e9:dc:f7:16:0f:fa:2a:39:42:51:fb:6b:9e:95:04:24:c7:
         66:e0:1b:1c:1a:22:ff:2d:de:77:46:69:46:81:95:5c:0d:7d:
         d2:08:55:a5:fb:b7:b3:97:24:e0:27:7d:a5:86:1f:84:36:60:
         9a:24:20:6c:05:c5:ca:fb:ac:cb:94:9f:f2:90:a6:a4:ab:5b:
         79:45:59:61:a6:7d:cd:49:cd:f9:40:56:35:26:21:a8:96:9a:
         1e:80:4e:64:8d:54:d3:21:f4:11:88:8c:45:fd:4d:99:fe:fe:
         8b:e7:1b:6b:8d:8d:fb:68:f5:ce:e6:00:c3:c3:de:12:2b:55:
         ca:a2:1d:62:d1:85:0d:de:eb:18:18:14:ef:48:b8:a7:cc:c5:
         2b:75:c4:ea:cf:74:35:28:6d:57:b4:07:d9:cb:fd:2c:ff:42:
         34:ca:e6:9f:c1:e8:cd:8a:1a:e1:03:e7:3c:e0:b0:ae:e5:a6:
         a7:88:d3:31:9b:44:8e:b6:29:2e:3c:6e:a3:6e:b3:58:07:08:
         e9:c4:b6:28:ed:12:41:48:bd:58:f1:fd:83:4f:3a:7b:7d:8f:
         90:01:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:46:35 2024 by rpki-client on console-ams.rpki-client.org