Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          uf+24oWnxWsso2dH59O8mkKecHfsn0D6cV9bmYv+oRg=
Subject key identifier:   F5:C8:4B:C8:00:17:B7:B7:D0:5E:4C:37:39:9B:85:8C:97:CB:6A:FC
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       01935877AD880BA7FC7CA5277F668FD4E7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          1050
Signing time:             Sat 23 Nov 2024 10:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:58 +0000
Files and hashes:         1: B53Q3LwU9SB8dw25xfz9QtNatoI.roa (hash: a63UvNBlLF4vByg+4vS+Zr5dqG9h59jcIwvJe/OyXxM=)
                          2: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: TbI1jYTHO3MU6tUIDE2jBWrcLJNz9SyQaUVVF4oggKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:ad:88:0b:a7:fc:7c:a5:27:7f:66:8f:d4:e7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Nov 23 10:00:58 2024 GMT
            Not After : Nov 24 10:00:58 2024 GMT
        Subject: CN=f5c84bc80017b7b7d05e4c37399b858c97cb6afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:42:08:3b:35:9e:96:d5:15:c9:89:bd:a3:ea:
                    d8:8e:6e:f5:6c:fb:d6:e6:19:cf:3c:90:c6:85:0b:
                    9d:25:c7:41:f1:99:71:d2:1d:8b:7d:38:e9:cd:a5:
                    7c:15:a8:3e:f0:c3:c1:88:8e:76:64:31:c4:d3:5e:
                    fd:80:34:2a:92:f6:01:42:9f:05:b6:a0:b6:42:69:
                    5a:51:d3:19:04:0f:f2:a2:51:dd:85:f6:a7:3b:ac:
                    8e:7b:ec:cb:4a:aa:bb:36:3c:32:a4:02:45:b7:2b:
                    b6:9b:c5:58:1d:4b:ca:05:5d:a0:e7:77:6b:90:cb:
                    83:fc:00:32:0d:e9:63:50:9c:5f:15:cf:77:25:e9:
                    b9:63:4b:28:72:3d:e3:59:13:2d:e4:27:4f:fa:94:
                    10:4e:69:86:73:70:3a:5b:c1:b4:4e:77:15:86:c4:
                    9e:3b:e4:2a:7c:65:8b:64:34:82:dd:d4:01:75:13:
                    59:74:a5:31:d5:dd:a6:42:a6:63:ca:98:21:41:5b:
                    c7:09:c9:4f:f0:8d:63:37:ce:3a:bd:b9:16:cf:1a:
                    ac:2d:cd:b6:c3:50:4d:d0:59:25:b8:eb:f1:de:54:
                    e3:26:cf:c7:d9:4a:80:7f:85:4f:ce:d9:c2:5c:49:
                    37:5b:f7:b2:f5:3f:9f:f3:ae:43:95:41:0f:46:57:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:4B:C8:00:17:B7:B7:D0:5E:4C:37:39:9B:85:8C:97:CB:6A:FC
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:5e:d5:d2:67:a5:ce:45:11:fa:2e:9b:9c:ce:ed:83:ca:
         6c:ff:b8:20:16:37:84:fd:b7:98:bc:de:46:2d:f8:2a:4a:93:
         c5:a5:ea:cc:5b:93:5c:46:e9:65:a5:15:84:96:15:6e:5c:ec:
         7d:ef:7b:7e:2b:bc:f4:6a:18:04:79:f1:da:e2:53:8d:28:77:
         86:ea:ee:8d:d1:4b:d6:49:be:b1:7d:0b:65:09:51:74:83:9a:
         40:be:56:6a:cb:74:a6:cb:43:73:28:4f:1f:6a:96:e1:a9:1e:
         f5:57:45:5f:d6:7a:fd:e6:c1:ab:10:18:3a:c3:66:4b:5b:72:
         90:75:6b:57:86:bd:f4:d2:7e:22:eb:60:72:94:50:63:64:55:
         51:64:bf:7d:59:49:84:89:7e:2c:cb:60:7a:09:6f:94:2b:21:
         90:70:c3:fd:8b:79:34:cf:57:eb:e3:bb:14:1a:f0:99:36:64:
         71:2c:b9:7c:70:dc:7d:a3:87:43:d5:02:ad:4e:46:ea:98:2f:
         b9:2b:53:d7:1a:78:33:62:0c:40:bf:2e:92:c9:71:8d:e5:85:
         66:0b:a3:7e:db:a6:8c:b7:23:e3:14:2e:6a:8b:6d:54:c3:bc:
         6b:e4:59:75:1e:a4:f3:6e:74:26:36:0c:0b:32:3c:3b:cf:88:
         7c:a1:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:27 2024 by rpki-client on console-fra.rpki-client.org