Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File:                     bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier:          vpW0e1Bb0/rm6vfcfbmxzNxfBnwCApbJ7yPJcv4hh5o=
Subject key identifier:   E4:4F:6B:4D:C8:C3:58:EB:A9:CE:A6:C4:45:05:3D:8D:1D:F4:19:27
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer:       /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial:       018F877F47C0B1544350DCEC442D9A88AFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number:          0725
Signing time:             Fri 17 May 2024 17:00:16 +0000
Manifest this update:     Fri 17 May 2024 17:00:16 +0000
Manifest next update:     Sat 18 May 2024 17:00:16 +0000
Files and hashes:         1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: K7yGx5Z0Hi3m0pe6ct3O34cJkW4vtJC+0vO7yhL3SKU=)
                          2: t_NfG1xZ6AYS8YaVfirBcomKsSc.roa (hash: HLCn5IIm78OjdAbyeT5gTOtspdLp8AKngR0ZKfjO34g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:47:c0:b1:54:43:50:dc:ec:44:2d:9a:88:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
        Validity
            Not Before: May 17 17:00:16 2024 GMT
            Not After : May 18 17:00:16 2024 GMT
        Subject: CN=e44f6b4dc8c358eba9cea6c445053d8d1df41927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:b9:39:3a:27:0f:8d:42:f2:fe:80:3e:6b:
                    c2:9d:b7:3b:80:8a:77:df:d3:83:8f:ae:55:21:26:
                    cb:34:4c:3d:0f:1c:2e:e7:cb:72:b7:1c:ad:fd:f2:
                    80:ad:99:58:48:9f:87:dc:fe:d7:f2:63:76:9d:6f:
                    57:69:e0:3d:2a:43:62:41:bc:ff:03:62:05:be:b1:
                    fe:23:81:41:ef:cf:1d:34:7a:d6:94:f0:cd:54:52:
                    ec:75:95:99:70:61:7b:f8:2a:b0:0f:54:7d:70:46:
                    ec:bb:8e:92:74:77:9c:1d:52:65:08:fe:de:98:b1:
                    50:14:f6:ac:60:f7:2f:42:6d:7a:27:ae:0d:aa:59:
                    1f:9b:9b:3b:b5:13:86:92:62:46:fe:08:58:6b:38:
                    39:3d:1a:a2:aa:13:05:e3:69:18:e1:27:a4:7d:40:
                    e2:83:e7:3e:61:30:a7:27:fb:db:ba:7a:6f:5f:2c:
                    0f:ad:bb:be:27:44:ba:95:15:f2:c6:c0:c0:02:3e:
                    25:98:4d:a1:29:66:e4:68:8c:a3:09:e9:5c:2e:11:
                    a5:e1:a1:f1:bd:5c:eb:31:80:d1:db:0e:d9:d1:89:
                    00:46:2d:16:31:3e:18:4a:f9:63:e5:60:1d:8c:53:
                    41:88:39:63:9c:6e:8e:e9:51:b7:51:ee:4e:28:91:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:6B:4D:C8:C3:58:EB:A9:CE:A6:C4:45:05:3D:8D:1D:F4:19:27
            X509v3 Authority Key Identifier:
                keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:da:97:f5:4b:26:e1:bc:3d:02:31:14:0c:33:20:92:3a:0f:
         53:66:0e:1e:98:fe:43:7f:1c:5e:6d:c8:80:5b:59:7d:f2:bd:
         7d:8c:8b:05:e0:58:87:99:7c:c3:c6:12:d4:20:c8:2a:25:74:
         13:e8:9a:08:6b:6d:5c:e4:c8:8a:21:a7:14:d0:72:8c:86:14:
         f3:28:4b:90:eb:f4:c3:ee:0b:a5:6c:76:77:d3:7d:57:03:89:
         23:04:4e:72:4c:6d:51:54:e4:fa:dc:c1:89:7f:ac:12:a9:41:
         5b:30:41:f1:2a:9e:cf:79:17:30:b7:fa:02:e0:48:8e:d0:b3:
         7d:f1:4f:31:2a:ae:82:ea:37:ac:e7:f1:ec:5b:75:9e:0f:54:
         fe:94:1e:e9:61:2e:9b:c3:01:bf:9b:ce:a0:8b:b2:b4:d1:05:
         23:16:7b:ad:16:a9:cb:a7:d6:2f:9a:ad:cb:2d:0d:59:2b:8c:
         88:c6:e4:93:19:75:8c:8f:9c:4b:dd:fb:af:b5:52:86:5b:d8:
         92:fa:a8:6c:b9:e9:08:a4:31:82:ff:bc:1e:26:68:27:02:1e:
         49:fe:58:da:45:5f:cd:e6:45:6d:70:16:92:98:c8:d3:5d:18:
         20:1b:10:e2:46:8f:e6:f9:9f:14:3f:cd:90:e1:d0:f5:1e:03:
         b3:c6:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:56 2024 by rpki-client on console-ams.rpki-client.org