Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File:                     BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier:          qD2vlrw4FdmwV2RsVgZv+Llv1r8M+G592Ryn+/KHehk=
Subject key identifier:   C8:87:5B:BF:21:5E:7D:E0:83:5E:CB:EB:4F:9E:BF:A0:C3:D1:D4:27
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       01935274EBB1F1A6042897A0CD5CAB1CD85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number:          1463
Signing time:             Fri 22 Nov 2024 06:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:14 +0000
Files and hashes:         1: 3De6nI4j2a8LTeXVacztvoz164Q.roa (hash: CddBF8+iJJBeB91tcCX9oFK5WI5ZkOkO1D/QDfzWK4s=)
                          2: 9ZH69W1YnakgeGpdaURJ6q7krXA.roa (hash: i0nXid7GwGZoweaIfT9l5LaH9hT+4Mewie6yGeAN0rM=)
                          3: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: urGInUlrD0BOpLLCa1w287ZlesSAJF40qt6NjpnYipQ=)
                          4: KwqbwUX6KEKA9oCAbqrACS7VzdI.roa (hash: rLVVIxv+oky7Goh14DCSsRvkWMIOhntxJEeoJKV0rDw=)
                          5: OMveuboZb4VUvAKuhKykySXRnjk.roa (hash: d8cVi308rmPrjjyF0+SCK760pptrI7DaWHmvHow/6+0=)
                          6: TFwbxPo9ptuvmqxcON6N5NC3pyE.roa (hash: IhSi2fm+DZnUuTEl0OTeTbUsxae3Kn5COmAe7U6UpmU=)
                          7: WLXqCKuFnqufZYdZj60QibY4G48.roa (hash: 4Wx0qkod104FJ547BpIFqNvyKh3NPj1nkFq89JzA2PY=)
                          8: _BRG0tEcafQoojuU0vlyj5tNhmI.roa (hash: c3mEUsmJ4ik5MdFu/pbzUH+nuUiBod0zMvBpPPhNMQY=)
                          9: bPmN4QLDXWuiaRKrUSWLmjHo6_Y.roa (hash: azVjh9sYT/ZH3NTR6bgXFHYU0nq8FbLu8b/TGj52814=)
                          10: orxVdghea9mwQ8zY0A5_l0f1b8k.roa (hash: HXCOeSwfgdbIyCT3uMZ0wfGajmJikjQrQtk1t0JFH5U=)
                          11: vi6WM7sEUnflo_6nJkMKIs30HnE.roa (hash: 80emMOGDa7fzjqbhyioI81co6V6k57qDKBgdSINVxt4=)
                          12: vu3jKUXKtt4usvfqhtH0r_66jtc.roa (hash: 7nGbHe3n7r5nOYvBT4euTuKaJLTWv+xPmkBt1IUiaxI=)
                          13: wsXLF19DGfi1db0r94y3vxncFm4.roa (hash: 8WJvd1F6KvEA+ZRzE2Xrno3soz37rs0rPVRTDXiRHX0=)
                          14: xNhw1lF5NNVmw87JYxO8gG-_4uU.roa (hash: 5coXeFFqPmIYT6knq01A4/KB4+XISjPzWhqBWNjYBvk=)
                          15: yAgG0_a3X_AZY3yNh2aK0myVp60.roa (hash: YmuuzAmnDnT+UrrWt0k5/UPenz9iELOoaQA3l4xA/3M=)
                          16: yz7p4Wed67t2paEbQm0PQfAVQKo.roa (hash: 3h+wonJSdbvHDeX8pC6csnV/AxvbHFNFUFHHkRQvf0M=)
                          17: zg8iWDnjaFCgVuIBkpxXuY2mKIQ.roa (hash: RY1GwX1UrZHg3j81XiL4Mxzv545F/bUkfn7Ka1U/jpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:eb:b1:f1:a6:04:28:97:a0:cd:5c:ab:1c:d8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Nov 22 06:00:14 2024 GMT
            Not After : Nov 23 06:00:14 2024 GMT
        Subject: CN=c8875bbf215e7de0835ecbeb4f9ebfa0c3d1d427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:c7:25:e2:10:b4:d8:87:ea:3b:1c:a7:9e:
                    ba:19:20:db:ae:aa:25:ca:ee:a2:6b:12:ab:d8:87:
                    df:88:6d:03:e9:40:4e:f5:fb:88:98:6a:86:4a:fb:
                    85:a5:85:b7:98:bb:18:3c:b6:3d:c6:e7:17:63:67:
                    60:cd:68:3a:b5:bb:b0:f4:97:0b:80:e1:60:64:aa:
                    0d:8f:df:22:19:9c:9e:6f:e4:57:2f:f9:be:af:e1:
                    9e:c7:c5:43:a7:99:fb:03:52:f3:34:5b:7a:f1:02:
                    d6:b3:b7:0d:62:f2:cf:8c:71:46:0b:13:50:69:51:
                    97:88:4c:0b:e8:d5:a3:f3:65:fa:c1:23:fb:28:22:
                    f3:d7:54:51:d8:83:c7:86:a0:0f:18:42:ac:7c:52:
                    89:2b:70:3b:43:ee:ad:9b:29:e1:8a:af:45:3d:12:
                    92:4f:f0:bd:30:fe:c7:07:39:80:30:7d:02:05:14:
                    d9:b6:64:5c:da:24:3b:6a:94:e2:a8:5d:43:15:4c:
                    7f:95:12:f0:d9:4a:d3:c1:5b:e1:7b:2d:bc:96:ee:
                    d0:a0:d7:43:45:a1:60:59:df:ae:bf:d7:f7:b2:3c:
                    a1:e9:8f:1d:ee:d9:24:93:e4:a2:fa:35:0b:72:aa:
                    26:7f:ac:c9:87:73:ef:b2:04:29:e7:1f:30:e1:41:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:87:5B:BF:21:5E:7D:E0:83:5E:CB:EB:4F:9E:BF:A0:C3:D1:D4:27
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:37:55:99:ad:1b:37:05:83:3b:36:00:89:53:7a:47:a2:
         58:94:08:cf:5b:50:04:b1:ad:84:31:c6:8c:14:d7:45:fd:b4:
         ad:f5:41:40:da:c0:8a:b9:e8:ec:f1:5d:00:97:36:ab:0f:52:
         b7:30:8d:23:ff:b3:4e:0a:58:bc:13:4a:f4:3f:aa:db:c1:59:
         96:02:eb:41:1e:be:82:cb:e0:fb:47:21:3f:c9:9f:60:c1:2d:
         e2:32:93:ac:39:1a:31:30:56:3f:7c:8c:a4:4c:47:17:d3:1b:
         f7:c3:f7:a0:fd:36:a9:cc:5d:a7:da:96:14:a3:2d:b9:27:6a:
         42:f7:b8:a2:3e:2a:1a:12:7c:81:dc:07:64:ae:60:b6:e2:3b:
         7d:50:0f:58:1f:00:3b:f2:80:af:13:bb:ee:d3:cc:56:e9:88:
         43:32:01:e8:8b:b7:6b:f9:a4:27:7c:b6:2f:b2:d5:ef:47:72:
         85:a4:f3:ab:32:67:87:da:03:43:12:bc:0b:aa:97:1d:34:80:
         ba:ab:1d:80:eb:13:64:4a:3e:c4:c8:e2:28:00:20:0b:a2:ce:
         c2:4d:19:63:2a:d3:ac:63:2a:fe:5d:04:4c:b4:12:07:ef:bb:
         c6:39:0b:36:2c:c2:06:e7:b8:7f:05:03:37:bc:94:3e:75:99:
         0a:da:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:02 2024 by rpki-client on console-fra.rpki-client.org