Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File:                     BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier:          k0aKBM7rrGEIsqKsTPIb9bEtUEHQC5d7ViuFTR0FsAA=
Subject key identifier:   F7:1A:38:AC:B4:46:0E:00:21:0D:23:AE:56:58:50:6E:BC:70:4D:53
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer:       /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial:       018F3A0C26C709CD0831552518FB5F1ECDF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number:          0F99
Signing time:             Thu 02 May 2024 16:03:45 +0000
Manifest this update:     Thu 02 May 2024 16:03:45 +0000
Manifest next update:     Fri 03 May 2024 16:03:45 +0000
Files and hashes:         1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: 5xlVzQnGLjZZNIPsSfCJ0D3q58HPKToLnON7s5bi07Y=)
                          2: KcwWhQ9w9ix59dQyDMWlIBfwMAw.roa (hash: UbAeYuvEt0JxKAA0RZ2a/NSyvRKvo6uaGrQHq3rvqkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:26:c7:09:cd:08:31:55:25:18:fb:5f:1e:cd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
        Validity
            Not Before: May  2 16:03:45 2024 GMT
            Not After : May  3 16:03:45 2024 GMT
        Subject: CN=f71a38acb4460e00210d23ae5658506ebc704d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:1b:92:bd:51:32:bd:ed:d1:a6:26:be:7d:
                    1a:f0:36:d3:94:be:26:e9:bb:6a:fe:c2:f1:93:79:
                    73:4f:1b:25:ea:fc:ac:93:13:91:92:97:2a:cd:bf:
                    0c:00:fc:a3:9b:de:b5:ec:60:77:5b:62:7a:a2:0d:
                    3e:e3:f4:fa:09:91:25:f5:96:0a:b1:41:82:a9:b3:
                    72:19:4b:bf:da:8c:18:c8:ae:c0:51:da:e8:39:82:
                    07:e8:03:a0:7d:d6:ba:3a:70:f1:82:39:9b:aa:8a:
                    ce:8f:73:40:86:79:dd:20:2d:a2:ec:f7:22:e8:ff:
                    09:8e:d2:21:4b:ae:31:e3:75:ee:f6:02:c6:1f:0b:
                    24:d0:5d:52:a7:7d:04:8d:bd:b0:90:84:5a:90:b0:
                    c4:a8:70:b9:cf:4a:61:99:15:40:16:57:00:6d:48:
                    1d:6c:41:c4:a6:de:e6:ef:1f:78:ed:1a:a5:ae:4f:
                    f3:52:4d:55:74:d4:c2:e2:5a:6e:e0:11:ac:31:95:
                    5d:9d:d8:06:55:4e:1d:19:7d:60:c7:ea:80:b9:9a:
                    51:d1:2f:4c:98:ac:43:09:ea:ab:f4:26:62:11:95:
                    9e:8f:0d:f2:f7:f0:4b:4a:2f:d3:11:3a:1d:11:57:
                    53:48:3e:a8:96:07:3c:4b:1d:23:16:96:29:db:14:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:38:AC:B4:46:0E:00:21:0D:23:AE:56:58:50:6E:BC:70:4D:53
            X509v3 Authority Key Identifier:
                keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:4a:15:7e:96:ef:d9:30:d3:07:80:7e:a9:06:3b:3d:c4:36:
         8d:d6:37:3e:cc:53:55:84:bc:72:07:00:c2:0d:c9:77:50:f1:
         b1:6c:77:e9:f8:41:29:9b:89:9d:fd:2d:a0:1e:06:29:97:3c:
         80:b9:09:01:26:9a:f8:3a:88:ea:da:f5:bd:86:72:b2:35:3c:
         90:3a:63:d9:92:8b:7e:28:97:7f:12:24:5b:91:3d:67:c0:1e:
         73:57:55:b9:22:f7:e3:f8:d5:2a:20:37:2a:8f:60:c0:1f:f8:
         2c:34:3d:bc:5b:e8:36:e0:3c:ae:76:2f:26:15:a6:d6:8d:3c:
         1e:f4:28:33:10:f6:e5:1e:79:d7:0a:d8:9c:ec:0b:3b:5d:c0:
         0e:08:a6:c7:cb:12:e8:ca:57:fb:7b:06:ad:e7:6c:05:f1:0a:
         29:67:62:d1:1a:46:f3:59:5e:4d:eb:cd:c1:b6:dc:54:1e:8a:
         5b:01:cf:90:b6:c1:aa:c0:55:ea:80:69:c7:2c:9c:3c:01:c6:
         47:64:f2:97:f2:86:63:20:84:aa:da:71:15:69:56:ca:5f:c4:
         cd:6b:7c:f1:f1:b2:ad:60:b1:3a:25:7d:1b:6e:17:64:7f:15:
         21:84:50:d2:47:5b:9a:09:5e:4c:fe:e9:56:5c:f3:a1:79:ab:
         22:9e:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:17:57 2024 by rpki-client on console-fra.rpki-client.org