Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          EucxIHthZW2EffJAP3S7Cm13yj339nKHtE7qQk3eNtY=
Subject key identifier:   9E:2F:32:3E:BE:C2:07:46:00:AF:B2:BE:55:C7:66:A2:73:3D:38:44
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       018F87ED3D1DC05B83825B14D155AF16A8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0584
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: EcSeYpzWjsATK6BcUKfVK8leIserpbKRpgQsWoLucmo=)
                          2: lTmVYCw6P4CmlSKbWVRalYObdnE.roa (hash: 5u8wyP69jetpCe2E6aEaehHBsV4q3QXa0p+z87/ftU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3d:1d:c0:5b:83:82:5b:14:d1:55:af:16:a8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=9e2f323ebec2074600afb2be55c766a2733d3844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:88:e7:a4:ee:7b:1a:fa:02:47:53:b2:b6:
                    8b:42:0e:3b:f2:6b:c8:0b:59:5f:6f:09:c9:f7:05:
                    c2:1e:f4:74:da:dd:20:49:48:26:ed:e7:6d:be:54:
                    03:37:2d:41:cb:51:c9:5e:eb:95:0f:4b:d3:1d:65:
                    d1:a3:2d:86:93:e7:83:81:55:4b:70:17:e4:58:38:
                    e2:c3:20:7b:aa:7e:a7:0f:4b:1b:1f:c1:22:a0:df:
                    c3:07:80:84:4d:c4:16:81:84:de:c7:99:00:1b:e3:
                    88:11:38:37:65:87:df:49:86:77:8f:c6:30:22:ed:
                    ae:b2:fe:9f:a4:d9:d5:b8:23:da:a7:b8:20:fb:40:
                    ef:7c:37:37:60:e3:d0:8d:e2:9d:47:99:d7:b0:c1:
                    cf:4a:60:14:1d:68:be:8c:16:b7:fb:34:c9:f1:83:
                    38:b5:7e:4b:0c:8c:71:7c:db:b2:99:cc:76:dc:c1:
                    95:1b:54:f6:d5:45:c1:24:3d:ea:c3:34:73:a9:92:
                    74:9a:06:4d:4b:68:86:1b:eb:76:55:2d:60:fe:db:
                    23:e0:2e:bb:8e:98:c6:fe:a1:3c:49:c6:fd:1a:86:
                    2c:89:1c:02:a9:53:7e:b0:06:23:ff:85:e9:00:f4:
                    11:32:f5:47:f0:44:1d:9f:e1:c9:d2:3e:9c:4b:86:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2F:32:3E:BE:C2:07:46:00:AF:B2:BE:55:C7:66:A2:73:3D:38:44
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:58:74:08:b4:20:75:35:9b:78:f1:c3:d3:93:bb:86:2a:d7:
         cb:36:f9:51:a0:11:f5:a1:d3:67:d5:cc:e0:e5:65:c3:7d:dd:
         72:55:d0:84:bc:d5:dd:01:f2:e5:31:0b:02:cf:35:ad:f1:f0:
         a8:6a:7d:0e:c9:19:6e:ed:9c:ce:26:92:9f:f1:4f:0b:1c:a7:
         b9:35:3d:be:c1:8c:88:2a:97:43:7a:12:bc:09:ab:83:fa:94:
         af:9d:1f:6f:20:29:4a:24:f7:a5:ee:fe:84:d9:d6:e5:ce:f4:
         ea:65:21:37:02:88:09:18:2c:c4:70:24:5c:e9:fe:5b:38:d3:
         f8:e5:a3:46:6e:41:3f:a5:d7:49:0f:bc:51:ad:2e:1d:71:ff:
         42:0d:e5:e5:74:94:45:50:6a:b2:2d:25:1d:15:90:5e:e6:e6:
         9e:f8:14:46:70:b0:8f:0f:fe:db:8b:a5:bf:73:f4:7f:89:93:
         13:14:c0:e7:f9:dd:2b:a5:5e:0a:d5:cc:c4:70:f2:91:59:1b:
         1b:83:e0:f2:56:c4:da:d9:35:e6:0d:d8:ad:f6:68:5e:a8:eb:
         42:8a:a4:7f:6c:a8:0f:36:15:fd:4f:e2:b5:79:f4:73:fb:ca:
         e1:d7:c1:65:95:58:56:12:d5:a8:ac:be:86:5f:92:7c:46:e2:
         83:5e:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:16 2024 by rpki-client on console-fra.rpki-client.org