Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File:                     BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier:          rY3iT+OhsQLWVwkJq6jWnhHoKvbKx8zpn/5V1HZ5iNI=
Subject key identifier:   DC:D8:C1:E0:6F:62:33:1D:9C:F1:AE:F2:4C:9A:D8:08:6C:46:DF:00
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer:       /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial:       019366A0CAF68DD903B4BB4D4EFD64F2E6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number:          05B7
Signing time:             Tue 26 Nov 2024 04:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 04:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 04:00:33 +0000
Files and hashes:         1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: coqg3LYm/U2bmdIgHYR6WCN6kyfl/yWbfzWG2a2F4BQ=)
                          2: NLmE571muwKh1aAr-ZZw50qChK8.roa (hash: T+e/8ywbs/dvRVugJtpPZzr0e9ZodgLu6rmEGH/a7K8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:a0:ca:f6:8d:d9:03:b4:bb:4d:4e:fd:64:f2:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
        Validity
            Not Before: Nov 26 04:00:33 2024 GMT
            Not After : Nov 27 04:00:33 2024 GMT
        Subject: CN=dcd8c1e06f62331d9cf1aef24c9ad8086c46df00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:89:cd:bb:9b:99:e6:cd:e8:1b:5c:03:b9:
                    20:fe:b3:3f:e1:35:e3:f8:db:a5:da:60:08:3d:22:
                    4f:82:3d:c1:40:45:05:bf:d0:f3:9c:5e:8d:b1:41:
                    27:68:49:88:25:6a:14:2c:0b:22:21:aa:20:94:84:
                    42:18:77:52:bb:72:19:fe:91:93:cc:20:fe:2c:15:
                    a6:1a:69:8d:9b:65:9e:e7:c5:07:55:12:78:5f:76:
                    81:55:fa:c1:45:37:48:82:af:fd:cc:1c:84:d1:ad:
                    a5:e4:6d:84:26:cb:44:77:fb:0d:e6:57:5f:c0:8f:
                    47:e8:50:20:8b:70:75:3b:e8:b6:59:0b:e5:9a:45:
                    9c:fc:a5:10:7a:c1:09:f0:7c:c6:12:e5:8d:25:d5:
                    63:e4:e9:f8:aa:57:6f:f0:fa:58:14:e8:41:68:d5:
                    03:eb:33:8e:c1:17:0c:c4:c4:d3:37:d2:e6:a8:f7:
                    79:c9:fe:73:ab:b0:f4:a9:ca:3a:89:bb:b1:28:06:
                    53:66:cd:28:21:44:c5:6b:af:27:50:85:19:5e:4b:
                    8e:03:ac:75:a3:11:69:88:ea:c0:ea:5c:9a:a0:39:
                    66:bc:d6:e8:1f:f1:24:39:cb:90:41:64:05:68:e1:
                    69:1d:70:72:bd:46:38:6b:62:80:68:7d:30:0f:57:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:C1:E0:6F:62:33:1D:9C:F1:AE:F2:4C:9A:D8:08:6C:46:DF:00
            X509v3 Authority Key Identifier:
                keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:6c:c0:46:81:51:9b:98:6e:89:da:c6:d1:01:6b:c2:2f:
         98:11:94:f6:13:ae:cb:72:96:71:a6:35:53:f7:d4:bd:da:76:
         4f:5c:61:aa:52:ad:82:86:71:b7:a3:34:54:dc:0d:f2:7a:f4:
         9b:37:8f:80:03:e1:42:9c:50:5d:06:40:2e:4f:0e:93:13:6e:
         0b:2a:dc:d6:0d:c6:bd:43:95:51:9d:e0:dc:a9:22:f9:7e:e0:
         a5:07:ac:22:3d:1a:97:c2:c2:29:6f:16:09:12:ac:35:43:92:
         5e:0e:d1:f6:92:3f:51:80:85:e5:90:58:04:ad:78:3c:bb:46:
         a1:87:b6:a8:a5:d1:ee:5f:b3:ff:9a:ef:54:1e:07:d1:da:bd:
         89:17:82:35:ce:ee:90:fa:0f:85:86:d3:74:0d:11:54:80:c0:
         4f:42:9e:7b:f9:8a:9d:df:a6:57:1b:81:a2:8d:2f:12:4a:28:
         e6:62:c7:7d:11:7d:56:77:56:78:3b:09:d3:50:72:e9:c1:a5:
         08:f3:26:90:fe:ff:91:8f:e6:a3:bf:93:c5:73:8c:30:62:90:
         ad:3e:df:88:df:91:16:e8:f6:c4:b3:bf:ab:2a:c5:ff:95:7e:
         1b:bc:c2:4c:d6:97:d2:06:c9:cd:95:e8:fd:1b:e8:7e:3a:df:
         e1:ee:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:34:17 2024 by rpki-client on console-ams.rpki-client.org