Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
File:                     suWMwsReWnP0hJQxVVglny_FBtc.mft (raw, json)
Hash identifier:          TEpAyot8pGU8LrJhpKImv/OEumWJ3pB6H58XBVi3CGw=
Subject key identifier:   DF:DB:D0:66:5B:2C:A5:3C:3D:9A:E4:6E:4B:6F:06:79:E2:C1:E1:BD
Authority key identifier: B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
Certificate issuer:       /CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Certificate serial:       018F9796FB7CE4A66D80CDFF3AFB3BA14A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
Manifest number:          1183
Signing time:             Mon 20 May 2024 20:00:05 +0000
Manifest this update:     Mon 20 May 2024 20:00:05 +0000
Manifest next update:     Tue 21 May 2024 20:00:05 +0000
Files and hashes:         1: dfJIRo3nb8UqPWVKyh36bC_WSJs.roa (hash: EtjyP+smK9okSSHnHhwxvGa60ystt+visIt/A4Z1OpU=)
                          2: suWMwsReWnP0hJQxVVglny_FBtc.crl (hash: AJdwZNTanTwNwf0Ra4/NP7wMXCcBceNUicqJ5arI7ug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:96:fb:7c:e4:a6:6d:80:cd:ff:3a:fb:3b:a1:4a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
        Validity
            Not Before: May 20 20:00:05 2024 GMT
            Not After : May 21 20:00:05 2024 GMT
        Subject: CN=dfdbd0665b2ca53c3d9ae46e4b6f0679e2c1e1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:57:8c:58:39:ab:93:e2:f7:7a:c2:8a:c8:
                    5b:b4:5c:62:16:6b:ad:39:19:e9:d1:78:91:38:60:
                    29:b1:b0:80:f4:25:3b:5c:92:16:bb:40:9a:05:88:
                    84:54:65:03:c2:dc:35:c3:2e:aa:1f:96:08:9b:99:
                    0f:91:e7:f0:98:1d:31:7f:84:6d:df:5f:7c:4d:19:
                    19:15:66:c5:cb:40:71:7c:4d:19:4e:42:b0:f1:a8:
                    70:ef:db:e3:41:cc:5f:98:72:ec:3a:c4:10:5d:5f:
                    d8:5f:ca:c2:f1:39:a6:ae:3d:09:32:12:dc:d1:bd:
                    ad:7b:6b:fd:a1:60:2c:1a:e9:06:28:0d:3d:24:c3:
                    6e:aa:a3:dc:9e:96:7d:b9:f2:3f:43:26:3a:6a:bb:
                    4f:7a:a5:2c:34:cd:77:79:97:1d:f8:6b:cd:fc:e2:
                    93:d9:63:89:bf:68:d5:b0:ea:2c:fd:75:a5:ba:8b:
                    1e:75:6f:81:a8:42:97:d4:e7:d7:f7:05:2b:da:02:
                    1f:c2:88:3a:d9:ce:f1:df:ba:ee:9c:d8:83:d3:d5:
                    d5:e7:c5:4a:0c:f6:da:34:8f:58:d4:76:4e:08:2d:
                    38:37:3f:1a:7e:b6:83:54:a9:27:5e:0c:57:a9:af:
                    67:51:31:4b:e1:79:34:28:c6:3e:21:f2:dc:c7:9e:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:D0:66:5B:2C:A5:3C:3D:9A:E4:6E:4B:6F:06:79:E2:C1:E1:BD
            X509v3 Authority Key Identifier:
                keyid:B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:46:ae:90:b0:c2:37:be:39:e4:c6:11:1b:be:9a:bd:85:70:
         e4:38:cb:12:a1:7f:80:c5:09:29:00:45:93:f8:56:16:0a:76:
         84:9b:27:63:a8:72:38:77:b3:13:89:36:90:6c:8c:14:0f:8c:
         24:15:cf:f1:69:d9:2d:b8:9d:76:ef:aa:d9:e6:c0:32:1b:6e:
         18:7f:cc:01:94:96:90:5b:83:b3:79:2f:52:de:95:f7:1a:d0:
         36:15:ff:92:d2:e7:65:5e:42:b0:73:89:ac:2e:64:4d:0e:b8:
         10:f9:b1:62:3c:48:f8:6f:00:4c:33:b1:73:0e:b5:15:fc:0a:
         3d:d5:ec:7f:3f:b6:14:fe:66:2e:99:e5:80:e3:86:f7:9c:e2:
         5e:0c:30:6b:e4:a5:74:69:25:49:64:ea:d5:59:64:c2:d5:d3:
         d4:8e:85:0d:3f:46:fc:e8:18:e9:97:67:83:7b:e9:0c:b8:d8:
         2b:35:25:f5:cc:48:8e:83:49:19:c6:b9:9b:a3:24:77:ea:c8:
         6d:d9:29:fc:e5:37:ce:ff:dd:70:43:a1:22:93:3b:f8:1c:96:
         36:c7:4b:2e:89:2c:da:80:84:0c:59:b2:91:a8:d9:65:bf:8f:
         65:ff:72:bf:d7:d8:7f:37:d7:2d:92:cd:c0:44:f8:ae:b5:07:
         f2:0c:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:51:51 2024 by rpki-client on console-ams.rpki-client.org