Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File:                     BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier:          B/q/VaPjCyXnAnvFU34057CaSLJ3I6XhDFwyhWaNiAo=
Subject key identifier:   3F:F0:B6:C9:CF:8A:E1:96:C8:D6:B9:EA:6C:DE:12:ED:C9:23:F7:3F
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer:       /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial:       01936A0F7EA107008B0F15A3D94A5698A811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number:          0524
Signing time:             Tue 26 Nov 2024 20:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:20 +0000
Files and hashes:         1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: 39T3OWolWXmWmyBojl1Iy4peEjVDKxCIrGr5XNxvPTw=)
                          2: qeskszLFf92erEy5IxfNDyxwzdw.roa (hash: xQX/g37jnrSJDbWtODn4//od1rW/zmfuLQ+EFKie/y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:7e:a1:07:00:8b:0f:15:a3:d9:4a:56:98:a8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
        Validity
            Not Before: Nov 26 20:00:20 2024 GMT
            Not After : Nov 27 20:00:20 2024 GMT
        Subject: CN=3ff0b6c9cf8ae196c8d6b9ea6cde12edc923f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:4c:0a:25:a2:45:5e:a9:12:07:fc:11:18:
                    50:7e:51:a1:3c:05:15:7a:4a:7e:6b:99:b2:d0:54:
                    73:e2:0e:86:2e:27:7b:ed:9b:4a:4f:63:8b:dd:ce:
                    bd:7d:df:74:a1:77:b5:7f:88:a6:31:c9:04:63:89:
                    0a:d7:aa:6e:20:86:3c:86:98:b8:54:2a:9b:30:30:
                    f6:60:04:51:b0:c1:74:c9:6b:3f:17:e3:ab:38:9a:
                    65:7a:10:4b:a1:fa:52:77:5e:6c:6e:ce:26:98:f8:
                    5b:15:0e:52:ce:69:e6:bf:09:56:c0:70:7c:37:a3:
                    44:a8:01:41:f0:23:a0:45:bf:c4:8c:e5:17:80:cc:
                    06:61:47:ae:42:c5:ab:fd:a6:48:00:3b:7f:f5:7e:
                    18:7c:fc:98:f7:8b:8d:bd:2a:7b:7e:73:e8:f8:89:
                    83:d3:99:75:cc:38:29:4e:0f:4a:63:ce:b3:e5:4f:
                    74:9b:02:0e:0c:ae:b6:e3:1f:2d:d2:d2:48:29:17:
                    9e:65:5b:5c:d8:c1:b5:84:2a:a9:ec:74:8e:a6:11:
                    41:4d:96:da:9b:64:80:19:5a:4e:4b:b7:b8:c0:70:
                    5e:28:32:4f:8e:97:82:62:d0:cb:91:d9:b4:99:81:
                    d7:02:25:07:fd:a3:c2:ef:25:34:fc:ed:5b:8d:21:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:B6:C9:CF:8A:E1:96:C8:D6:B9:EA:6C:DE:12:ED:C9:23:F7:3F
            X509v3 Authority Key Identifier:
                keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f2:30:07:bb:a5:9f:9f:5d:72:71:75:14:30:31:52:49:3c:
         5d:ca:ca:4c:15:f3:b9:67:96:01:bd:c9:ee:d9:5e:95:f0:f8:
         7e:9d:49:18:4a:c7:58:37:52:80:c1:b7:10:61:5c:71:04:ea:
         2b:55:51:01:e1:bc:13:06:01:35:4f:83:75:37:6a:ad:6d:44:
         bd:19:78:0a:da:2b:79:41:3e:77:5f:e7:6b:02:1d:06:89:cf:
         f4:ff:13:a9:eb:20:a0:3b:ad:1d:b1:ed:24:78:3d:3b:1f:2e:
         b6:02:98:e5:b9:c1:07:f7:dd:8f:60:39:f3:4d:59:94:6f:40:
         80:39:ee:53:a0:a2:1e:83:d3:3a:4f:e4:40:d3:2f:75:89:34:
         39:53:f8:97:b5:3d:10:59:72:22:3e:bf:a9:b3:34:dc:1d:5e:
         37:14:96:a0:a7:32:a3:f5:8c:15:73:99:64:c7:9b:8f:dc:a2:
         70:3f:2e:7c:4d:99:08:06:69:3e:e0:fd:1c:3f:92:92:aa:18:
         69:fb:4c:1a:c4:92:2b:c6:7f:60:bd:86:74:c9:5b:82:6b:54:
         ec:03:cd:14:68:2d:18:e7:1f:8f:9a:cd:0e:d8:9c:c8:8f:6e:
         b1:ce:2c:4c:b1:a6:99:31:8c:d4:f5:7f:ce:b0:b6:db:e0:d7:
         67:ac:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:32 2024 by rpki-client on console-fra.rpki-client.org