Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File:                     CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier:          NBV9HiblrM4z1KuCGip/rU1lyRMdRu1dmBPhPeqFvlI=
Subject key identifier:   15:71:3F:A4:CD:F7:CC:49:D1:B8:5E:C4:2E:C2:FB:64:80:26:0B:FD
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer:       /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial:       018F45A2D1332C10D404B2F8D7EE408D8F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number:          0FF4
Signing time:             Sat 04 May 2024 22:04:09 +0000
Manifest this update:     Sat 04 May 2024 22:04:09 +0000
Manifest next update:     Sun 05 May 2024 22:04:09 +0000
Files and hashes:         1: CHBJcj-N1HIS2MambWnbMXxuJl4.roa (hash: WaG7fBgmHmpqNUDdNZExx2pw+VwY1Z3ErUToTAKMvuU=)
                          2: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: V4wgAQOz2uj+iu+aKD06KhamUHQqL53rDiqpU9sdMDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:d1:33:2c:10:d4:04:b2:f8:d7:ee:40:8d:8f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
        Validity
            Not Before: May  4 22:04:09 2024 GMT
            Not After : May  5 22:04:09 2024 GMT
        Subject: CN=15713fa4cdf7cc49d1b85ec42ec2fb6480260bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:c5:7a:47:99:96:91:32:29:a1:2b:06:3d:
                    84:87:ea:d5:9b:43:6f:f0:8a:db:dd:6a:df:c7:6a:
                    7a:79:f7:a3:e5:d2:0b:d0:4b:53:7d:45:af:eb:a2:
                    42:f2:95:68:6f:2b:cc:ce:49:d0:bf:4a:39:22:ec:
                    9f:d7:7f:b8:82:fc:ab:b7:87:66:48:12:ef:7d:71:
                    a5:ef:fc:cd:cf:4b:11:79:b5:d3:10:53:fa:24:94:
                    12:cb:ec:9e:4e:d7:e7:31:b9:82:c5:9f:cf:e0:e4:
                    95:99:50:c7:f9:6a:1c:bf:70:99:bb:98:95:87:79:
                    e8:26:94:ad:e3:b7:b8:0a:ac:60:eb:72:b7:06:7c:
                    3d:cd:61:7f:69:a2:9f:9a:4d:c8:63:60:6b:ac:78:
                    08:aa:b4:30:35:b0:84:cc:4d:02:b4:fe:ea:8d:75:
                    0a:91:2b:75:20:2b:70:2c:e0:6c:0c:7c:7d:62:90:
                    11:47:69:40:ec:eb:9d:00:43:a7:ec:f6:e3:0b:ed:
                    5f:58:fe:2c:bc:ec:3f:8f:06:3e:32:6c:3d:c9:a9:
                    5b:7d:f7:eb:b4:97:18:44:bc:75:4f:c4:74:f6:f9:
                    f5:60:29:c8:8d:50:28:2e:66:94:31:ed:0d:96:04:
                    aa:fc:88:88:78:5e:ef:03:4f:cf:08:3e:2c:41:5c:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:3F:A4:CD:F7:CC:49:D1:B8:5E:C4:2E:C2:FB:64:80:26:0B:FD
            X509v3 Authority Key Identifier:
                keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:37:e0:8d:5f:81:23:35:53:0e:04:21:bb:0e:36:b2:f2:
         8f:4d:94:92:32:45:0b:14:c9:7a:54:89:7d:1d:fd:0c:5a:0e:
         94:0e:23:34:23:80:87:ef:e3:f4:e6:77:ec:91:7d:3e:bb:01:
         ac:7e:e0:5a:3b:7f:45:e1:bf:a8:07:fe:75:11:bd:18:ae:45:
         12:43:fd:f9:63:06:f0:bd:47:bd:1e:63:b9:c4:60:c2:cd:1b:
         73:7d:57:51:f7:16:7e:99:42:1f:37:5a:fd:b6:52:a4:08:b9:
         16:d9:0f:cd:44:5b:50:c6:cb:e8:52:37:04:f0:52:99:3a:9a:
         2d:ec:1f:7a:16:c2:b7:85:31:70:d8:75:66:5e:7d:46:78:40:
         d2:ea:29:f7:d9:d3:e9:6d:7d:bc:5b:49:e3:a2:1b:01:57:bb:
         3b:db:54:00:c9:b8:e1:71:0d:9f:31:a2:2f:26:ff:a3:ff:96:
         be:11:1a:a2:56:24:95:61:e8:88:be:66:5a:cf:f0:bb:59:6e:
         37:7d:cc:aa:16:9b:bf:a4:59:40:e0:11:62:af:97:b7:31:d3:
         18:48:63:49:7e:d2:b9:b3:fc:f5:af:4b:a7:61:8c:e9:b9:da:
         a0:fc:8a:35:92:24:c6:c5:4d:4c:61:f7:ab:15:15:f4:65:a6:
         07:b9:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:18:14 2024 by rpki-client on console-fra.rpki-client.org