Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          OcF1QsSYYGxRZiuCswqLD63Af3UALcbofB6gbsHG+PM=
Subject key identifier:   FB:51:BC:AE:85:73:70:48:E9:80:1D:77:1A:FB:74:31:41:3F:D4:86
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       01935952E27F7E56EBCA82EEAC101783AFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 14:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:24 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: uFXnSLqY5h35zZZm9zywVzcp9owi6hT+vdRHUTmuy7g=)
                          2: s-v7tYSHCekSl7eUZeKYe4iHd54.roa (hash: dlCO9d232uKfLy5Pb76mmoWkS1Hep0ArJT+1zIKTQCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:e2:7f:7e:56:eb:ca:82:ee:ac:10:17:83:af:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: Nov 23 14:00:24 2024 GMT
            Not After : Nov 24 14:00:24 2024 GMT
        Subject: CN=fb51bcae85737048e9801d771afb7431413fd486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:a3:25:3d:62:58:12:c7:db:f7:51:ec:16:
                    9c:55:c2:7d:d8:98:f1:b3:ec:fc:c1:70:f8:71:fb:
                    91:52:c4:75:1a:13:67:9c:94:81:ea:0f:ed:69:ad:
                    3a:6a:81:49:c4:06:7c:51:bf:80:56:cb:e4:b5:dc:
                    9b:13:87:01:fa:fd:bb:62:8d:c0:f0:19:84:dc:2a:
                    dc:7f:72:6e:49:60:5d:8b:f7:dd:ef:b9:ee:b0:e2:
                    88:e3:13:e2:f0:fe:55:b8:8a:72:4e:4a:cd:e0:84:
                    c8:3c:aa:eb:dd:37:2b:15:8d:f4:6d:11:9c:7a:02:
                    d7:d3:7b:c4:43:71:6f:37:97:67:59:04:27:cd:15:
                    6c:19:f8:b0:ba:ec:ab:e5:85:34:45:8e:5e:b2:e7:
                    d0:cc:6e:5f:0f:8c:2d:fb:63:1e:ff:e6:3d:17:ec:
                    68:b5:d1:df:7b:62:37:85:c0:1c:d7:f1:03:bc:e3:
                    44:e0:fe:6f:2e:52:4d:c3:fc:db:63:32:c5:b4:d1:
                    2c:62:f3:d5:88:2a:df:5e:41:b4:07:48:ea:a9:93:
                    06:d5:da:cd:45:3b:2b:48:8f:a3:e2:29:dd:44:ec:
                    2f:7a:fc:51:a7:62:ed:68:d3:55:f3:ba:52:46:56:
                    16:c8:3c:7b:54:cc:51:21:50:2c:0a:35:0e:82:f7:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:BC:AE:85:73:70:48:E9:80:1D:77:1A:FB:74:31:41:3F:D4:86
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:25:99:a7:ef:71:c8:e6:dc:c1:2e:ef:91:ee:7a:35:54:da:
         b0:4a:bd:e3:3a:31:43:00:e4:11:5f:1b:01:b9:00:ea:d4:25:
         f3:91:d5:cb:0b:2a:7f:c2:0d:66:e9:ca:c7:4b:90:84:e4:29:
         37:45:85:db:54:04:75:1c:de:5b:71:22:2c:24:2b:c3:67:85:
         16:2f:c1:e4:55:78:95:05:b5:db:a4:f9:76:c3:10:2e:40:76:
         18:cd:0b:a3:e9:62:18:5e:67:46:50:0a:ee:80:fe:51:f4:74:
         c6:96:eb:40:95:9c:65:02:cc:c2:74:a0:e2:eb:47:a8:ec:71:
         35:7c:79:98:18:fe:1e:37:c3:a3:73:f7:53:a5:69:bb:95:cb:
         98:50:72:55:b6:c6:9f:a9:9c:70:19:67:46:ab:9f:ad:67:71:
         65:72:87:c3:10:c7:72:81:40:8f:89:97:28:64:25:5f:4f:c6:
         0f:35:fb:7d:ad:f4:81:50:9c:3f:c0:3c:92:3f:5c:99:69:3d:
         c7:88:95:6b:60:82:6d:50:7b:df:8c:4f:6e:14:c9:da:2c:4f:
         cd:b2:dc:d3:19:24:e4:48:3a:59:f6:f2:33:6e:0e:13:f6:9c:
         52:06:4e:ce:8b:8a:a1:cd:81:fb:b1:f0:8d:cc:bd:8b:e6:13:
         9d:87:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:29 2024 by rpki-client on console-ams.rpki-client.org