Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          EMBIVd6vZzR2bBDexblki3aSAY0NTaBqaVDP55AmtMk=
Subject key identifier:   DF:94:52:A4:9A:FA:99:66:FB:09:DE:0C:29:A0:C1:5C:C6:F1:EB:63
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       018F8DEF2966DEA70D7C45D32257F5320540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 23:00:12 +0000
Manifest this update:     Sat 18 May 2024 23:00:12 +0000
Manifest next update:     Sun 19 May 2024 23:00:12 +0000
Files and hashes:         1: 2oQHb671K9MdNgea5R2XWi2VM0Y.roa (hash: k009K3by9fiQg9tZJAL27+swlYlkwb/HG/7Rt6pHHGM=)
                          2: 8uc5BnZbEkgBPsYtOOTY_B_H_ZQ.roa (hash: 8WP9SiXL4thETRCPIE15tU1t9Rg8pKiMt4Fxw8AemQk=)
                          3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: BCJ9LcRUArWYIa2dwddCvHjyjZTZY2FHkvv3p1m+TNM=)
                          4: Yw8bRU6gxROAIFYsQd1ff1kx6cM.roa (hash: K1m6Yo1JTVyjw7K57R9vzVcrgTv2Yg6eAhgDdwduCM4=)
                          5: b_mtNyZAeQwOCBgnmg5mdxnAPwg.roa (hash: OgzO+T8t6eLzHwXhE81Mg5p9KXjBDBlwCETR2WeC5ps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:29:66:de:a7:0d:7c:45:d3:22:57:f5:32:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: May 18 23:00:12 2024 GMT
            Not After : May 19 23:00:12 2024 GMT
        Subject: CN=df9452a49afa9966fb09de0c29a0c15cc6f1eb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:bd:70:b1:e3:4c:ae:21:01:8e:15:3a:31:
                    a8:63:33:e1:d3:9c:f1:f3:b5:0f:80:5e:9e:37:b7:
                    d9:50:f7:18:59:2a:f6:a8:37:04:15:31:57:4e:4c:
                    cc:19:aa:df:67:c2:bd:8b:ec:0d:88:7a:ea:f2:b6:
                    e2:04:b4:99:e2:62:6d:f6:0a:5e:5d:34:db:62:92:
                    ab:3d:63:aa:88:1a:2a:dc:93:0f:92:d7:90:0c:c1:
                    46:66:85:62:c1:c9:b1:04:6b:b7:08:98:67:74:6a:
                    d7:17:4c:62:4e:bc:ac:7e:f2:4a:be:54:3f:ec:cd:
                    b8:e5:50:25:8d:ab:31:05:19:ef:25:bf:74:96:bf:
                    47:35:e5:eb:35:11:80:28:fa:ef:f5:59:1e:17:5d:
                    15:92:70:5a:72:24:78:f7:f1:4e:b4:1f:d3:c9:46:
                    65:e9:7f:f2:76:c8:c4:0d:56:0a:e6:8a:0d:21:3a:
                    e6:aa:07:28:33:a1:95:db:39:53:bb:b6:d6:ea:9d:
                    81:89:84:4f:9a:2a:76:4f:54:d4:01:ba:fc:b1:4b:
                    85:c2:f4:5f:7f:30:c8:e0:3d:0e:34:4c:fa:bf:f5:
                    54:9b:74:f6:1a:25:5e:b7:c9:46:3b:32:f7:63:3f:
                    51:32:33:94:3c:f1:1d:6e:f0:56:0c:ed:2e:5d:88:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:52:A4:9A:FA:99:66:FB:09:DE:0C:29:A0:C1:5C:C6:F1:EB:63
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:35:39:31:a7:59:28:89:ca:82:14:2b:e0:e8:00:aa:22:
         67:48:80:b0:48:f3:9b:a8:ad:51:c9:68:d7:13:38:d0:20:94:
         ee:aa:cc:a4:6d:6d:81:7e:65:d4:86:60:d8:fa:1a:45:1a:c1:
         8b:bd:b5:f6:1a:4f:6b:d5:64:79:0d:44:40:c8:06:2c:e1:bd:
         31:38:9f:f8:22:4b:80:03:6d:97:86:84:cf:1f:d3:86:6d:d0:
         44:46:c7:d4:ae:07:96:04:1b:1f:12:0f:ed:6f:6e:cb:b6:2b:
         68:09:1f:5d:fe:0a:27:ec:ef:bd:ce:41:ae:1a:5e:bc:bf:fc:
         d2:05:b3:f9:da:4d:ba:4c:f4:d9:e7:c3:8b:c7:b1:6a:4b:ce:
         b5:6f:e3:da:41:68:5a:a8:37:9f:e2:54:d8:63:11:51:72:8a:
         01:ee:18:c4:bc:90:e9:d7:9c:bc:99:de:0f:54:ef:f8:20:8b:
         dc:8d:0d:ed:94:e7:01:5b:96:c3:55:38:5d:4d:24:e3:e2:0a:
         1f:44:a1:40:2b:7a:ba:0a:13:13:b8:f9:e5:8e:da:cd:82:48:
         ae:89:e1:09:46:f5:d9:30:1c:53:4d:93:0b:a8:fd:84:e8:fb:
         cb:7e:75:c3:71:bd:83:c3:7d:76:ae:12:0c:93:d3:56:0c:5e:
         fa:9f:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:02:03 2024 by rpki-client on console-fra.rpki-client.org