Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File:                     bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier:          SyF5odNnfKSsr2NCeFpX3yNahbRWAVCba2Iv9D3uVTQ=
Subject key identifier:   9E:AC:A3:FB:EC:64:B4:95:FE:B7:3A:5B:DA:A5:14:4F:C5:23:EA:10
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer:       /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial:       018F885B5855BFCCB8F1E417BDCA0777BD02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number:          10D0
Signing time:             Fri 17 May 2024 21:00:38 +0000
Manifest this update:     Fri 17 May 2024 21:00:38 +0000
Manifest next update:     Sat 18 May 2024 21:00:38 +0000
Files and hashes:         1: LfUOskYRWwD2G69eF0FzJyoVPc4.roa (hash: nyqhsonAMzrWMjboE4lzwrE3ErA9QijzbOgugWTXtlw=)
                          2: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: NpjiV0UlmOJNmiwBjD2L9xiqoOM9JX1BvfZWmUaJz8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:58:55:bf:cc:b8:f1:e4:17:bd:ca:07:77:bd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
        Validity
            Not Before: May 17 21:00:38 2024 GMT
            Not After : May 18 21:00:38 2024 GMT
        Subject: CN=9eaca3fbec64b495feb73a5bdaa5144fc523ea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:be:8f:a2:e5:5a:b7:50:9c:ba:26:a4:1c:
                    18:20:a3:17:d3:68:ba:83:8f:3e:ac:59:79:ec:20:
                    03:94:be:fd:c6:ba:30:7c:69:c1:16:26:d7:ac:fd:
                    2d:77:2f:df:4d:02:ec:a9:63:29:32:34:e3:ab:8f:
                    42:47:dc:4d:d4:28:c1:11:07:46:dd:b2:1b:a3:72:
                    40:f9:07:35:20:97:ac:7a:d6:b6:26:ed:ab:51:ea:
                    99:98:84:9b:52:a5:72:fb:70:2b:a7:9a:83:b5:d2:
                    67:66:c5:d3:25:a6:97:a1:dc:37:1e:fc:63:94:2e:
                    ad:94:93:e0:89:e7:95:ef:50:a6:01:f3:c7:1e:61:
                    ac:e9:44:5d:86:3b:6a:b7:66:d9:f3:eb:53:88:3a:
                    f8:22:60:bd:b1:9b:6b:7b:11:41:e9:72:c3:bb:2d:
                    4d:e0:20:48:70:75:eb:7b:dd:ef:44:69:7c:cc:53:
                    c8:5c:54:f1:59:bb:69:19:c2:c5:85:6b:57:51:2c:
                    4a:0a:9f:c1:26:54:31:33:c4:45:c3:b5:e2:3c:f1:
                    25:26:67:fc:f2:49:5d:09:80:f8:ad:c3:ed:64:d9:
                    95:9f:c4:c8:e4:e0:9a:8f:32:37:cd:3f:e2:6f:6c:
                    ae:99:b4:b0:fe:b2:9e:cf:58:fa:a7:50:8b:ee:d0:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:A3:FB:EC:64:B4:95:FE:B7:3A:5B:DA:A5:14:4F:C5:23:EA:10
            X509v3 Authority Key Identifier:
                keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:79:7c:16:65:01:6a:2a:7d:6d:69:91:88:ed:05:4e:2c:64:
         47:20:51:8f:a9:86:d8:43:8f:08:94:73:95:02:d9:83:7a:49:
         a5:ef:9a:7e:2a:66:16:63:1e:df:ef:5f:6a:9f:a9:8d:55:2f:
         3c:44:73:f3:26:cf:3f:09:ce:a7:7a:15:25:0b:72:72:eb:a6:
         5a:08:e3:20:26:4c:08:6d:2a:ed:3a:90:a3:a7:34:a5:c0:7e:
         00:c8:91:b6:04:48:1a:32:c7:93:2e:82:41:60:34:5d:df:c5:
         18:78:f9:bf:4d:51:a7:f4:c1:5f:da:a4:2f:06:0d:d9:c5:0e:
         d8:61:83:f3:49:06:87:5c:89:7f:be:f8:49:c6:eb:2d:e6:7e:
         02:a8:8f:1a:ad:10:85:35:25:64:cb:ab:31:76:ec:d9:62:81:
         ba:ad:bb:b8:5c:b7:93:77:40:6a:66:43:e9:d3:e4:27:80:cf:
         3c:b0:5e:3e:28:ba:8d:92:50:4f:23:e4:a9:75:78:c9:98:50:
         93:31:c9:35:0d:e1:96:b0:4c:f1:c2:54:97:98:90:c3:ba:af:
         f1:21:6e:08:b4:db:f3:5a:fd:91:9f:7f:60:73:00:f6:16:4d:
         3e:91:25:1a:e8:43:b2:bd:0b:20:9b:3b:0b:6f:a7:7a:26:ab:
         2b:46:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:05:28 2024 by rpki-client on console-ams.rpki-client.org