Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.mft
File:                     BJSyJkkqPuvopjfPiSPnlh-QjMU.mft (raw, json)
Hash identifier:          eMD5iyGwHLSgc9DzOPfh56AhgvAxdoHpxF1BBGV8KXo=
Subject key identifier:   C9:03:60:C1:4C:EC:37:4F:7A:55:79:7F:B2:40:36:4F:30:35:33:D4
Authority key identifier: 04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5
Certificate issuer:       /CN=0494b226492a3eebe8a637cf8923e7961f908cc5
Certificate serial:       018F874A9014094563AB9D87D056EB38A0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.mft
Manifest number:          026B
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: BJSyJkkqPuvopjfPiSPnlh-QjMU.crl (hash: V6n8bZtEbUogmmlNHnlKPqiVWIBRQ/nIN4L4Yo3ea2o=)
                          2: E1bML-BL3mpVN6NeCuBxmFW4VQY.roa (hash: w7XmMP1nxon/HdKYc6cyojc+/3kqhLL2eEveMkyOpKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:90:14:09:45:63:ab:9d:87:d0:56:eb:38:a0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0494b226492a3eebe8a637cf8923e7961f908cc5
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=c90360c14cec374f7a55797fb240364f303533d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ac:b1:22:8e:e3:76:33:db:40:3e:f6:ea:26:
                    4b:d2:9d:a7:fe:0e:f8:1a:b4:23:91:0f:24:ee:24:
                    4c:c8:dd:e3:37:45:ac:c0:cf:1f:4c:07:ae:6e:8a:
                    ea:2c:40:7f:ee:27:17:1f:d7:cf:54:9d:e1:68:16:
                    43:d0:b4:21:5e:72:80:fe:4c:70:75:5f:db:54:f9:
                    0d:6d:e9:9b:ed:0b:99:07:03:7f:82:82:d1:fd:32:
                    5d:3b:aa:c7:ac:3e:39:89:e2:62:51:b1:06:e1:67:
                    d7:b4:cc:4f:18:34:3b:d9:3c:ab:20:63:d8:20:cb:
                    ab:6d:e7:fb:21:cf:06:39:2b:a5:bc:14:7b:2c:f2:
                    0e:44:d0:4b:22:80:f3:b6:a3:31:26:be:5d:d1:fc:
                    9a:58:2c:ed:74:4d:d3:14:8f:b4:f3:44:6c:5b:f3:
                    2e:2a:3a:df:a7:92:0e:9d:b1:96:ea:88:50:30:f4:
                    22:5b:7a:fd:e5:73:7b:bc:16:e0:37:9c:38:bc:7a:
                    d0:c7:99:5d:c1:fb:b6:f8:be:a9:49:56:ba:89:ae:
                    06:02:84:db:c1:2f:e6:1d:4b:a1:2f:c2:6f:c3:e2:
                    81:cf:7d:54:65:04:fe:6d:dd:4a:55:b5:1e:a2:b2:
                    ab:2f:d9:39:b4:cd:1c:6c:2f:1b:e6:23:3b:12:7e:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:60:C1:4C:EC:37:4F:7A:55:79:7F:B2:40:36:4F:30:35:33:D4
            X509v3 Authority Key Identifier:
                keyid:04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:a8:98:9e:3d:45:eb:eb:69:7a:42:2a:8b:95:16:10:d5:
         4f:69:6f:1d:d0:51:0b:6a:3a:6e:7b:7f:5f:30:e4:27:dc:f9:
         30:cc:e4:5a:5d:70:76:76:6b:80:da:5a:fa:ce:ba:ae:fc:44:
         f6:2b:81:7e:d1:42:5c:3e:d4:4c:e1:26:5a:bf:98:6b:23:19:
         6b:a2:44:50:0c:17:71:91:15:57:f5:89:c9:50:24:90:4d:25:
         15:75:c9:fc:30:d6:f8:07:93:37:9c:2c:c5:04:b1:ec:2c:2e:
         7b:5f:59:1e:12:34:00:d7:fb:28:d5:ce:b5:b2:f6:cf:c3:b9:
         b8:ef:fc:08:31:dd:4a:9b:1b:90:77:93:e1:f6:0b:23:54:20:
         05:da:95:70:08:16:2a:73:bc:4d:18:69:9c:b6:8c:8b:61:21:
         ff:f6:01:3a:78:14:c5:73:93:7f:ab:f9:d5:64:d1:db:f6:1d:
         48:65:2d:c9:90:5a:9b:fe:c9:6e:c3:e8:6d:03:84:86:06:c2:
         1b:20:e0:bc:8c:2b:7c:dc:88:b6:9e:b4:d8:fb:16:30:b3:34:
         52:00:e5:af:94:59:b5:b2:21:6d:49:50:71:92:1d:d1:d7:36:
         5f:1d:57:c5:42:a8:ee:0b:00:d4:37:c3:f7:bf:5e:0e:4e:bf:
         e6:b9:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:58 2024 by rpki-client on console-ams.rpki-client.org