Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File:                     BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier:          t/Kq8gaEIS3ErRPOlLjkchyJIjQ/0cwS7jgVaaR2Lts=
Subject key identifier:   6E:18:AA:5F:54:50:00:A9:37:98:30:6C:52:F4:D8:33:09:59:88:69
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer:       /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial:       018F53252457F8D12ED47D6F185982920069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number:          115F
Signing time:             Tue 07 May 2024 13:01:33 +0000
Manifest this update:     Tue 07 May 2024 13:01:33 +0000
Manifest next update:     Wed 08 May 2024 13:01:33 +0000
Files and hashes:         1: 9PCX8iK7NOFWZDSc2_1bQttVh-Y.roa (hash: 9ZLCA8+VPFcRe8lxsp1aDw3VRRM7HqzrcU7zEYCVMCY=)
                          2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: mzHd1ToantSgfbBxZBpB5ykpSRTLLXCVCR0kTHh1egg=)
                          3: qP1yv6CUxiQ1_rGRlAGjPA0IjDE.roa (hash: qVygkjp7vPrQSermw/1LOr0K7bpWWEq0+B/Fz4k/amE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:24:57:f8:d1:2e:d4:7d:6f:18:59:82:92:00:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
        Validity
            Not Before: May  7 13:01:33 2024 GMT
            Not After : May  8 13:01:33 2024 GMT
        Subject: CN=6e18aa5f545000a93798306c52f4d83309598869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:28:6e:4e:6c:1f:77:95:38:e0:86:cd:6d:
                    70:1c:f2:a3:0b:52:5b:b9:c0:7b:bf:55:e0:e7:97:
                    21:39:c7:29:f7:19:85:c7:ce:3f:2c:20:0b:f2:97:
                    28:13:5b:e2:3c:95:92:27:cb:f6:c4:fa:cd:e8:86:
                    f8:56:5e:11:0d:65:4a:c3:29:30:36:28:68:53:74:
                    a8:11:68:fb:bf:72:bc:a5:fc:45:e0:5a:9c:ec:ba:
                    cb:37:18:2f:c2:e3:d9:07:a9:ad:84:9d:c0:a4:88:
                    8f:9c:33:cc:5a:fd:e5:d2:df:cf:c4:1c:85:a9:64:
                    d4:aa:ed:cb:59:c7:35:e6:36:3a:08:ff:9d:9f:8e:
                    56:1d:47:93:a0:18:84:aa:7b:09:5b:68:db:ab:54:
                    72:c1:36:ad:c4:ae:6d:ba:57:4c:74:84:86:7c:67:
                    3e:a1:29:aa:09:f5:a7:fb:ca:00:d5:68:37:75:5d:
                    c7:6c:9d:88:0b:26:b7:9d:a6:41:0e:09:f4:14:13:
                    7f:76:d8:0f:83:99:0d:0e:33:e6:43:98:d8:18:f0:
                    e3:f6:41:27:10:58:d5:b8:5e:a2:a3:f3:f9:a4:90:
                    be:96:9a:33:ef:fb:a5:fb:c4:66:15:e6:1f:58:00:
                    ff:62:3c:45:0d:dc:88:19:09:7f:69:8d:5d:c6:92:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:AA:5F:54:50:00:A9:37:98:30:6C:52:F4:D8:33:09:59:88:69
            X509v3 Authority Key Identifier:
                keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:ad:74:4a:2b:5b:f9:b5:94:f7:c6:be:3b:6b:34:7f:97:
         4a:6b:8c:a7:17:11:07:93:7f:2b:fc:0e:be:25:81:93:d6:e4:
         d7:b5:44:0c:51:ff:be:70:09:be:76:07:bf:87:ce:30:f7:fc:
         9e:76:b2:6f:7a:63:c9:ab:10:39:9e:65:33:2f:d7:ea:c3:d5:
         78:fe:f5:2b:56:ce:da:bb:bb:3a:ac:97:86:60:6d:1e:58:65:
         8a:0a:5c:5d:ab:58:ea:c7:69:09:bd:18:38:63:3c:ce:b6:a8:
         c0:6e:f5:0f:f4:50:10:62:7f:3e:17:1a:15:ef:ae:64:5b:34:
         9b:14:d7:2d:4b:39:b8:05:e5:65:0a:13:6b:ac:ea:b8:3c:bd:
         84:18:e4:11:17:ed:1c:cc:c1:76:53:6e:2e:c8:fc:2b:92:9d:
         37:51:e3:3c:49:4c:91:22:d3:88:4d:7b:a7:63:c4:c7:a8:fe:
         a1:e4:c6:bb:67:68:7c:f8:9f:0e:de:24:5c:2a:e3:a7:26:06:
         79:4c:68:44:68:34:be:d5:59:18:44:69:5a:72:78:79:0a:ef:
         4b:a7:aa:b0:3d:c3:6b:dc:12:da:ee:f5:97:4e:a4:74:0f:c3:
         8a:e6:29:e3:7e:e3:fe:fa:bc:a3:33:66:34:e1:1a:09:59:84:
         b8:0b:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:36:04 2024 by rpki-client on console-fra.rpki-client.org