Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File:                     BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier:          Jy57YKUOHfp03qorWJrzXGnAYUGAchL47KhB1O2oHng=
Subject key identifier:   84:FF:B6:75:89:45:BC:46:9D:2B:54:07:36:9B:3A:58:B2:FE:80:DD
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       018F3C9D5DB84C709527121DF715949D7ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number:          05E0
Signing time:             Fri 03 May 2024 04:01:37 +0000
Manifest this update:     Fri 03 May 2024 04:01:37 +0000
Manifest next update:     Sat 04 May 2024 04:01:37 +0000
Files and hashes:         1: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: i4bh/HrQn9O5ROKaPfpAwAYETVv2/MDJl2gWJ/jjce0=)
                          2: NOLDDkTwYaOTNsHLb2vYPJs2AdY.roa (hash: DAA+XiG1P6rHHWEZNwWbgcG6rwBKPoO7JPG7nIwoLQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:5d:b8:4c:70:95:27:12:1d:f7:15:94:9d:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: May  3 04:01:37 2024 GMT
            Not After : May  4 04:01:37 2024 GMT
        Subject: CN=84ffb6758945bc469d2b5407369b3a58b2fe80dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:6d:03:b3:a5:69:2e:21:e1:7b:dc:3d:ce:
                    82:2d:ac:09:b1:9a:38:de:6a:23:30:10:cd:28:7f:
                    f9:d5:d7:87:3f:d2:0c:85:d2:22:26:5f:f8:0a:8a:
                    b9:44:8a:3f:28:86:37:c4:19:5e:50:43:83:e7:62:
                    09:b0:e3:de:7d:a6:f4:e0:f2:f9:8c:3d:24:7b:19:
                    ce:bb:f0:37:f4:3d:03:df:6d:45:e3:5d:b3:f9:5c:
                    07:15:88:dd:8f:06:3c:72:18:e9:0f:a6:5a:4d:66:
                    66:08:87:3f:61:e2:2d:c7:a8:d2:56:42:aa:ff:1e:
                    e9:7d:14:62:c1:9b:65:0c:34:59:29:a4:a3:9f:2e:
                    7c:5f:06:c0:4b:ed:d6:87:27:06:c2:f3:c5:7d:e8:
                    29:45:e8:4e:08:e5:b3:7d:dc:f7:04:39:a2:01:da:
                    cd:09:4d:85:71:05:80:c5:d3:e6:56:f1:a4:f1:3a:
                    12:78:b7:8c:d1:8a:16:da:77:fe:98:3d:93:50:73:
                    f3:43:78:d7:e5:d2:ee:99:3d:f4:30:c2:7b:13:62:
                    90:85:f3:70:b7:e2:e1:65:f7:e4:4b:b9:cb:6c:89:
                    58:b3:5f:97:19:0a:10:c0:04:58:17:51:d9:ec:de:
                    1b:ea:ca:04:dc:39:cd:93:ca:d8:6e:d9:f4:b7:e7:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FF:B6:75:89:45:BC:46:9D:2B:54:07:36:9B:3A:58:B2:FE:80:DD
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ff:ec:77:31:03:e8:67:b3:bc:23:d6:ee:35:58:84:9b:2c:
         51:56:4e:5f:29:95:1a:80:34:60:de:de:77:1f:7b:89:fd:a9:
         c0:86:94:5e:01:d3:ad:2b:9f:56:3d:f9:55:b5:77:e9:27:d9:
         f9:c4:b7:88:b9:70:ec:26:63:44:72:49:69:17:9f:1f:d8:71:
         15:29:51:cf:9c:17:28:79:fb:c4:fb:39:94:63:bd:f7:4d:95:
         a2:1a:97:0e:84:b9:6e:4f:c9:01:0f:e9:f6:c7:d3:d9:ae:38:
         2c:57:23:2d:bf:e3:83:b7:ff:1f:87:30:40:a6:ae:8c:da:31:
         ee:dd:df:00:81:c2:aa:46:22:08:8e:83:55:e3:da:bf:a6:90:
         0f:ff:e2:b5:39:f2:75:04:ba:e6:5b:4b:0f:b3:29:37:22:2d:
         5f:7d:52:9a:73:e6:47:fb:ad:4e:fc:c7:c2:03:10:51:7e:ce:
         4f:54:e0:2c:b9:77:32:9e:db:08:89:1c:b4:65:b8:57:06:6d:
         65:80:1b:3c:bf:85:0b:2a:48:20:f3:e6:d9:dc:cc:72:60:53:
         cf:27:8d:f4:d9:d2:49:07:35:b0:eb:6d:26:98:62:c5:35:60:
         f6:42:52:42:90:e1:74:85:22:f1:91:d7:3f:8a:4a:94:a8:97:
         d1:2b:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:40:21 2024 by rpki-client on console-fra.rpki-client.org