Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          i2PAhMADUf19rRDin07SjdruN+Td8KiRSJmWjvWSTKE=
Subject key identifier:   18:C7:1C:7D:F2:EF:F2:1E:07:1E:E8:5A:A0:0C:9B:55:2D:1C:D9:8C
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       018F34E374B8140A34096991E77CAFD208DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          0E52
Signing time:             Wed 01 May 2024 16:01:12 +0000
Manifest this update:     Wed 01 May 2024 16:01:12 +0000
Manifest next update:     Thu 02 May 2024 16:01:12 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: QQRBOZgGd2yS1Zshu3vJcJC+bNmCh0MYOG0xw6GkGSE=)
                          2: G1av2SkScdA7pasMTkMgZ9DMDoM.roa (hash: DmAapwPH9qBCtwp/hvzAWHKwiBRMX4rOHpllKuQJZCk=)
                          3: kcLvebvinb_fU9cLNzlPp66YtiU.roa (hash: GqEC4CeIrVTOV+TeT278EX0iWT/g3V3BH7w6DFrfyHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:e3:74:b8:14:0a:34:09:69:91:e7:7c:af:d2:08:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: May  1 16:01:12 2024 GMT
            Not After : May  2 16:01:12 2024 GMT
        Subject: CN=18c71c7df2eff21e071ee85aa00c9b552d1cd98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:4d:a4:66:a4:5e:84:4b:37:1f:34:10:5f:
                    42:ee:af:c6:64:3b:43:42:21:73:71:15:9a:cb:44:
                    ff:be:ed:14:76:09:07:e6:9b:24:39:33:a7:d3:ff:
                    52:82:b8:5f:b8:29:61:ab:c6:fb:9e:59:b6:83:17:
                    1b:dc:1e:9a:f7:b5:4b:29:d8:b8:95:15:a8:18:14:
                    ec:ba:d4:95:6b:33:1b:3a:7a:e7:66:52:98:70:64:
                    d4:ea:06:58:39:e5:68:06:a5:d3:42:e8:2c:40:f8:
                    b3:a2:9a:62:57:27:23:1c:9e:45:8d:48:65:5a:04:
                    d7:a3:cf:31:65:fd:91:5f:49:c4:94:94:17:50:fc:
                    02:7d:d2:82:88:e9:ea:02:6f:97:3a:77:e7:9e:9c:
                    7a:cd:f4:30:64:fe:ca:1b:af:96:a4:e7:69:65:bf:
                    de:95:4d:1f:aa:a1:05:12:93:02:a4:a8:a9:30:72:
                    07:00:b5:75:16:45:aa:a2:75:12:9b:26:af:59:78:
                    ef:6d:19:b7:f1:b0:5d:57:a3:9f:94:52:69:b5:68:
                    3a:6f:a3:fa:00:d9:e4:f9:d6:0b:d1:5d:17:40:a8:
                    36:ea:fe:dc:19:45:5a:cd:df:dd:28:ec:b8:2a:8c:
                    2c:83:09:ac:42:b3:72:b8:6c:87:b1:ab:ce:5b:b3:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:1C:7D:F2:EF:F2:1E:07:1E:E8:5A:A0:0C:9B:55:2D:1C:D9:8C
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:c7:21:b7:a5:16:e0:68:c2:f8:a0:29:dd:e0:f1:1e:11:
         2f:dc:24:95:60:5a:2a:92:78:54:35:aa:f4:42:5f:3a:6b:1e:
         22:ad:31:b0:31:74:f9:8a:44:0b:f8:6c:a0:54:d2:15:01:e1:
         33:00:78:b7:93:8a:e0:56:e4:6d:2a:22:9e:bc:77:71:6a:f8:
         9e:f9:c4:65:b9:b0:a1:c8:51:6a:be:7f:22:14:39:6e:b8:ca:
         67:bc:8e:21:ad:46:72:39:9d:22:16:15:94:79:02:f8:db:fa:
         84:f8:5d:1a:91:7d:7f:f2:89:7b:72:8e:12:96:8a:95:a4:3a:
         f3:dc:c8:21:d0:70:83:c6:8f:4d:19:be:d5:d5:be:28:2e:61:
         74:e8:c1:45:5e:28:8b:4d:a2:68:e4:f3:a8:e0:4a:62:70:c1:
         d5:72:8b:10:3b:c8:7d:e9:ee:b8:f2:5c:ce:b3:26:2a:7b:a9:
         c6:72:63:9d:93:d3:1a:36:70:25:47:01:b5:52:9b:03:33:d1:
         c7:32:9b:96:21:1a:af:66:ef:fd:96:0a:0b:af:38:86:9c:d6:
         99:e3:6d:16:8b:2a:73:e6:3a:48:a2:34:b4:e7:bc:30:d1:24:
         d6:45:1e:1d:8c:77:da:b7:e1:ea:b8:6f:07:f4:6d:d3:ed:6c:
         4e:f5:4f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8043S4FAo0CWmR53yv0gjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODllZTMwM2ZmN2QwZDU1NzU5OWZhMDRiMjkzZGMyYjE2
YmI0ZDQwHhcNMjQwNTAxMTYwMTEyWhcNMjQwNTAyMTYwMTEyWjAzMTEwLwYDVQQD
EygxOGM3MWM3ZGYyZWZmMjFlMDcxZWU4NWFhMDBjOWI1NTJkMWNkOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18dNpGakXoRLNx80EF9C7q/GZDtD
QiFzcRWay0T/vu0UdgkH5pskOTOn0/9SgrhfuClhq8b7nlm2gxcb3B6a97VLKdi4
lRWoGBTsutSVazMbOnrnZlKYcGTU6gZYOeVoBqXTQugsQPizoppiVycjHJ5FjUhl
WgTXo88xZf2RX0nElJQXUPwCfdKCiOnqAm+XOnfnnpx6zfQwZP7KG6+WpOdpZb/e
lU0fqqEFEpMCpKipMHIHALV1FkWqonUSmyavWXjvbRm38bBdV6OflFJptWg6b6P6
ANnk+dYL0V0XQKg26v7cGUVazd/dKOy4KowsgwmsQrNyuGyHsavOW7NADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjHHH3y7/IeBx7oWqAMm1UtHNmMMB8GA1UdIwQY
MBaAFAWJ7jA/99DVV1mfoEspPcKxa7TUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80ZTE5OGUtMmY2MS00NmYzLWI1ZjYt
MDZkNmU5NDdlMzhmLzEvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80ZTE5OGUtMmY2MS00NmYzLWI1ZjYtMDZkNmU5NDdlMzhm
LzEvQlludU1EXzMwTlZYV1otZ1N5azl3ckZydE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl3HIbel
FuBowvigKd3g8R4RL9wklWBaKpJ4VDWq9EJfOmseIq0xsDF0+YpEC/hsoFTSFQHh
MwB4t5OK4FbkbSoinrx3cWr4nvnEZbmwochRar5/IhQ5brjKZ7yOIa1GcjmdIhYV
lHkC+Nv6hPhdGpF9f/KJe3KOEpaKlaQ689zIIdBwg8aPTRm+1dW+KC5hdOjBRV4o
i02iaOTzqOBKYnDB1XKLEDvIfenuuPJczrMmKnupxnJjnZPTGjZwJUcBtVKbAzPR
xzKbliEar2bv/ZYKC684hpzWmeNtFosqc+Y6SKI0tOe8MNEk1kUeHYx32rfh6rhv
B/Rt0+1sTvVP4Q==
-----END CERTIFICATE-----
Generated at Wed May 1 21:22:14 2024 by rpki-client on console-ams.rpki-client.org