Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          LQYXLf1FZsBfDCwe5vtQcG9xHxAOA/v+y0+dKEoJPlg=
Subject key identifier:   3F:B9:D5:86:2F:13:D3:A1:54:B9:27:7F:FA:86:05:B0:72:F2:BE:21
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       0191FA475B6D1755145B8134608292423FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          BB
Signing time:             Mon 16 Sep 2024 10:01:06 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:06 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:06 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: jkAHsl28icSATcJSIhaVL2j4CwVQwygkzAHbefmUzBE=)
                          2: QBfE401U4h1JnON28TUpikI2_Zg.roa (hash: yE3CB3YeTWCnvRCkgxWWqY1ww5//v6KQSnV+CYp/2Co=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:5b:6d:17:55:14:5b:81:34:60:82:92:42:3f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Sep 16 10:01:06 2024 GMT
            Not After : Sep 17 10:01:06 2024 GMT
        Subject: CN=3fb9d5862f13d3a154b9277ffa8605b072f2be21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:c1:44:fe:c0:f1:45:44:cb:77:54:18:7e:
                    94:87:a9:75:4c:f5:c0:0b:a1:92:16:c8:25:42:06:
                    5b:85:1e:1a:a0:b0:f7:b4:2b:e5:a0:1c:0f:20:ca:
                    af:08:7d:00:61:12:f6:79:93:e9:81:bf:b0:93:43:
                    9d:1f:60:be:17:1b:fe:77:28:dc:80:3c:d1:48:8b:
                    78:40:14:f8:a3:d0:db:e1:30:ea:0f:42:75:1b:51:
                    db:43:09:f7:12:43:65:9f:12:38:84:10:8f:32:de:
                    7c:82:75:10:bd:d8:2d:f0:df:ad:ad:9a:3a:df:cc:
                    0f:99:32:2e:d8:7d:ea:77:cd:4d:92:39:3d:05:1d:
                    17:50:05:f7:f1:08:4f:88:79:f5:91:42:f6:07:ca:
                    48:dc:d2:7a:2a:e5:73:1a:05:3c:05:5c:40:1e:d0:
                    0f:c3:89:56:ff:01:f3:c9:72:ea:ce:d9:44:c0:ab:
                    3d:9d:e6:39:3c:a7:b8:4d:86:5b:7f:6c:3f:f6:c6:
                    3f:fb:1f:43:50:b9:d9:44:74:7c:e1:a0:79:25:92:
                    e3:31:5e:e2:7c:49:f0:3b:9a:a4:00:e9:4d:99:a2:
                    05:9f:09:b8:f3:cf:8f:e4:52:55:cb:96:a4:8c:21:
                    33:13:aa:b4:66:5c:11:26:54:01:94:f9:06:82:1d:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B9:D5:86:2F:13:D3:A1:54:B9:27:7F:FA:86:05:B0:72:F2:BE:21
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:d1:6b:a0:d4:77:61:3a:ca:3a:94:2d:6d:22:cc:49:2b:
         1d:a4:01:5a:77:53:f7:50:4b:d3:ad:0f:92:c1:20:d6:46:c0:
         c6:f7:a9:86:3c:91:5a:c4:12:e5:45:20:df:d1:f1:18:3e:f3:
         2a:0e:e7:b7:79:bb:92:a5:a0:88:37:c9:c4:6d:79:23:78:a0:
         64:55:27:fb:62:3a:d1:ea:de:13:ca:b0:7a:c4:51:51:5f:f6:
         3e:8e:9f:7b:ee:76:55:c4:fd:a6:a4:2f:76:3c:47:1d:72:10:
         be:a4:23:49:b6:2a:68:51:3b:09:aa:da:d8:ba:7d:3a:9f:39:
         33:33:ad:3b:58:39:3a:74:6b:65:36:ca:ef:aa:b0:a4:5f:32:
         17:50:79:4f:b1:f7:39:6a:4c:8a:91:88:5b:97:e4:8b:52:1b:
         82:7f:5c:2a:16:bc:fd:4f:1c:01:82:ec:8d:4f:37:b0:76:85:
         5f:d8:73:8c:89:7d:cd:c3:cc:76:e1:ab:7a:21:d1:ea:0f:d0:
         31:f0:0b:69:10:8d:6c:e7:ed:f4:21:ab:6d:89:81:20:72:22:
         c0:25:98:91:75:df:f0:09:46:73:df:b3:d7:f4:10:c2:12:5d:
         8d:a4:3a:ee:16:23:8a:53:ac:9d:39:63:60:d9:16:f5:b8:50:
         98:7d:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:17:26 2024 by rpki-client on console-ams.rpki-client.org