Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File:                     BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier:          GNcSwsbvozVSxLOslRqGAyMIWer6G81F78nw1jDXiUg=
Subject key identifier:   56:87:7E:E5:A6:97:6B:38:33:4C:1D:22:C9:A0:9D:C5:C2:5D:6A:27
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer:       /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial:       018F55EEED4F48AA1175749A900FDEE85BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number:          115E
Signing time:             Wed 08 May 2024 02:01:12 +0000
Manifest this update:     Wed 08 May 2024 02:01:12 +0000
Manifest next update:     Thu 09 May 2024 02:01:12 +0000
Files and hashes:         1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: Bm7y07ZRaUDpxoo1JG4PuUMe33ThH02C/zYjr00pfcY=)
                          2: UyvAd9pVSZYRTJEQM4Nins67arw.roa (hash: 76Wes8iyJIR4wKrAlcL63tsy8Jio7k8TJO8ljDp7AY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:ee:ed:4f:48:aa:11:75:74:9a:90:0f:de:e8:5b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
        Validity
            Not Before: May  8 02:01:12 2024 GMT
            Not After : May  9 02:01:12 2024 GMT
        Subject: CN=56877ee5a6976b38334c1d22c9a09dc5c25d6a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:8a:c5:05:51:81:ca:88:75:1c:db:39:c4:
                    c2:c5:c6:14:14:d2:02:f3:4a:bd:89:c1:cb:9a:40:
                    dd:b2:c6:90:15:e8:f1:d8:7f:b2:9f:44:91:bf:5a:
                    d6:91:f3:29:f2:00:cb:06:c3:64:4d:23:ff:30:6f:
                    29:f6:ec:10:a5:72:c5:c9:7d:ba:1b:cb:e0:36:de:
                    45:db:67:48:bb:2d:6e:32:af:f1:25:f4:c6:31:75:
                    aa:b4:ed:48:61:07:dd:e2:c1:6d:a4:45:56:62:71:
                    f8:e2:71:62:ad:0e:e9:31:c0:c9:01:80:1e:8e:44:
                    08:2e:24:57:ca:6c:e4:5d:1e:79:87:81:e7:ec:df:
                    54:ee:7a:95:b2:9f:c8:c3:a1:34:cb:c6:c1:39:59:
                    c0:34:a8:52:e3:ca:0f:d8:87:39:18:ca:c5:c7:21:
                    c5:1a:c9:cb:70:2c:d4:f4:c5:51:98:60:cc:5e:d6:
                    b5:77:15:f5:c0:71:6f:87:33:4d:20:b8:b1:75:75:
                    03:8d:1d:cc:fc:79:7d:fe:4c:27:36:32:47:1c:4d:
                    81:fb:9a:ee:27:83:7b:f5:3a:90:29:5b:a3:9f:1f:
                    99:7c:10:ff:9c:ed:15:05:68:62:31:f5:c5:14:71:
                    00:2f:02:aa:d5:e8:df:d2:8f:f5:f5:3b:42:34:3c:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:7E:E5:A6:97:6B:38:33:4C:1D:22:C9:A0:9D:C5:C2:5D:6A:27
            X509v3 Authority Key Identifier:
                keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:21:b8:76:e5:83:0c:fc:04:3c:f2:98:c4:33:a5:cc:38:
         61:ff:4a:d8:cf:f4:24:fd:84:25:06:b4:07:95:11:74:49:8b:
         83:70:86:a6:c8:05:ef:e0:85:4c:8d:e0:3d:ea:d5:ec:14:47:
         e6:d2:36:16:f2:4e:10:91:e5:e9:b9:70:d2:01:74:f9:4d:44:
         36:c5:02:71:47:b4:be:c0:98:b7:f9:5c:b5:45:db:70:a1:20:
         10:c0:74:4e:28:9b:ac:7e:2a:ed:c3:40:c4:0d:b7:23:51:ef:
         a8:ef:30:25:66:78:c6:86:ed:7d:ea:3a:f1:1b:b7:4a:79:d2:
         cc:7f:c4:5f:48:3d:42:d5:cb:75:24:72:c9:41:ec:7c:c4:af:
         4c:f8:d7:1a:db:a0:92:08:62:d8:ae:0b:db:c2:45:76:2a:a2:
         e4:da:a4:0b:0f:f0:46:d9:a8:07:60:18:0c:87:24:6f:87:cd:
         66:1a:2d:15:67:20:ec:fc:0d:29:b4:ab:ad:a6:19:a5:8a:74:
         6d:fc:60:6f:3b:7c:c9:10:cc:c6:02:ad:22:2c:71:cf:95:0b:
         14:80:6b:69:ba:b0:f0:89:cc:51:23:4b:8a:c0:a7:fb:e5:e2:
         4e:8b:e7:63:d3:1a:5b:3d:92:c3:d8:f5:5c:c3:23:ea:4d:7e:
         1a:84:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:01:25 2024 by rpki-client on console-ams.rpki-client.org