Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File:                     tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier:          iSB8H7QfnfDoeRNUbu1MeWP5Wv7KcBkkkGZFwVzaA9w=
Subject key identifier:   B1:A2:44:A1:AD:B1:AD:49:8A:C1:67:DB:AC:C7:E5:17:EA:67:C9:8B
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer:       /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial:       018F85FE97836946DDE69C15587C9D9A21B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number:          BF
Signing time:             Fri 17 May 2024 10:00:05 +0000
Manifest this update:     Fri 17 May 2024 10:00:05 +0000
Manifest next update:     Sat 18 May 2024 10:00:05 +0000
Files and hashes:         1: FCSdlo80WFCmJgOLi6vUM5tAOAA.roa (hash: hLY5v+x+f9On7VZ2H6ycInnku9iSb30He+RctaedEM4=)
                          2: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: Y3CIlgmMruTgkI/A5nI7FFqFfLNGOF1f/lWzPlf6KUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:fe:97:83:69:46:dd:e6:9c:15:58:7c:9d:9a:21:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
        Validity
            Not Before: May 17 10:00:05 2024 GMT
            Not After : May 18 10:00:05 2024 GMT
        Subject: CN=b1a244a1adb1ad498ac167dbacc7e517ea67c98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f0:aa:2f:79:5a:33:59:72:02:38:c2:d8:0a:
                    63:d5:29:2e:88:8c:81:01:2a:c6:3d:ed:ad:d2:23:
                    d4:66:d4:c0:0e:ac:07:4e:f8:f5:ed:b0:96:ce:30:
                    58:a9:82:42:3b:c0:41:4d:b2:bf:6a:ea:bd:3a:f7:
                    f2:e4:09:87:72:6f:4a:d5:dd:a0:43:7f:36:39:7c:
                    26:ea:74:74:05:0d:0f:52:47:5b:68:fb:21:41:60:
                    65:c9:d2:4f:8d:94:7a:13:31:af:f0:52:da:bc:69:
                    71:eb:c8:87:62:b9:3e:b5:9d:2e:f6:83:96:d5:92:
                    9e:1e:87:11:b8:5e:c5:b7:91:ef:8e:06:97:84:4b:
                    a5:ac:d4:37:72:15:ac:eb:03:ed:7b:72:14:8b:0c:
                    b6:5f:c8:75:98:dc:1e:4f:1c:5f:85:35:ac:e5:ce:
                    1b:28:2d:58:74:72:a2:a3:53:f0:fd:ac:52:48:d6:
                    fa:b7:92:6e:d2:41:e0:0c:a7:24:74:1d:bf:2c:58:
                    28:4d:e1:4e:bd:04:3e:ef:f4:02:2a:3b:7e:5f:53:
                    de:22:cd:9f:fd:d5:0d:7e:cb:fd:f6:67:91:09:1f:
                    03:83:01:9e:84:f4:08:b6:8a:bf:2f:47:69:fa:89:
                    fa:18:c9:15:0c:d1:3a:14:6a:6b:32:50:2c:56:bd:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A2:44:A1:AD:B1:AD:49:8A:C1:67:DB:AC:C7:E5:17:EA:67:C9:8B
            X509v3 Authority Key Identifier:
                keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:55:86:a9:ff:54:bd:73:82:22:e4:ac:1d:21:f9:b1:73:
         5d:38:16:18:65:e9:ec:f2:1b:74:d2:47:e1:0f:a0:75:4e:d5:
         5c:3a:89:22:99:90:68:fc:09:a6:92:63:2a:0d:b9:85:11:61:
         ba:07:5a:66:d5:9c:fa:86:63:0e:b3:5f:75:eb:6d:f3:fa:b0:
         d4:8e:a0:82:fd:01:e6:c8:68:6b:dc:68:99:40:a1:a5:d8:f5:
         c5:51:73:2c:95:2e:6c:8c:ef:06:53:2c:bb:db:bc:69:b9:32:
         b7:04:6e:68:8b:a3:e0:ae:41:85:1a:81:8c:4b:a3:48:de:3c:
         fd:d0:78:14:12:88:78:6a:0b:65:7a:42:cf:aa:6c:9f:b0:78:
         1a:4e:d6:f4:9c:d3:3c:fe:66:41:25:df:1c:ad:98:dc:49:67:
         96:70:73:2a:43:1e:07:e6:3a:91:c4:ea:e5:b7:73:3d:27:ea:
         3b:1f:7b:e2:09:c7:18:b6:29:e9:8d:20:e0:d6:b2:cf:12:c3:
         c6:74:d2:07:9c:af:aa:aa:b0:bf:53:b7:87:c3:12:dc:1d:22:
         4e:67:d6:27:55:76:19:d7:96:8a:e2:18:8e:f4:68:4c:38:c0:
         f9:1a:a6:45:b6:b8:f4:29:fd:f3:8a:72:78:77:84:dc:9e:e6:
         85:f7:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:31 2024 by rpki-client on console-fra.rpki-client.org