Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft
File:                     BBTpkCtj_vq8x9aIekyBhcygky8.mft (raw, json)
Hash identifier:          umTW+OQM89/4eewV1fr9LEVXVC+cirkckts/LXnkeDA=
Subject key identifier:   E9:83:72:9F:20:1B:0C:35:23:2E:CE:A5:4A:D4:2A:F7:D7:90:D1:83
Authority key identifier: 04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F
Certificate issuer:       /CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
Certificate serial:       019367EABA4EB9ED7DC8D6F6DD7E90AF3121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft
Manifest number:          0EB9
Signing time:             Tue 26 Nov 2024 10:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:56 +0000
Files and hashes:         1: 6UmwpBkOZ_Qnql5_1r0Yb0eOwZ8.roa (hash: y0oy7sZCxXcpjRTvQaWRbhHYd73bJ6fhkUm4pjCLnR8=)
                          2: BBTpkCtj_vq8x9aIekyBhcygky8.crl (hash: E8IiJFsuCMPVxTYIDA5tCLSb8VoVfD8G1XeFUQ48i2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:ba:4e:b9:ed:7d:c8:d6:f6:dd:7e:90:af:31:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
        Validity
            Not Before: Nov 26 10:00:56 2024 GMT
            Not After : Nov 27 10:00:56 2024 GMT
        Subject: CN=e983729f201b0c35232ecea54ad42af7d790d183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:cc:1f:f5:ba:4c:07:db:7c:3e:64:8d:1a:
                    a0:f4:4c:07:c8:f1:48:c4:71:56:1d:c1:c5:09:28:
                    aa:5a:d4:60:ad:88:60:7b:cc:f8:de:4a:35:8d:62:
                    71:ae:23:60:a2:db:dc:ac:08:b6:1e:11:c7:d1:a5:
                    f1:13:9c:01:d8:68:2e:b0:03:a6:de:55:7f:49:68:
                    74:1a:de:3d:59:01:39:87:08:2a:77:52:02:16:3b:
                    63:72:78:6b:6a:33:e5:8a:e9:01:60:a7:40:73:46:
                    16:9f:50:61:0c:01:d4:63:74:72:25:9e:66:a2:a6:
                    e8:27:9a:8d:c6:52:78:d8:ab:68:1d:cb:4b:11:3e:
                    53:eb:1d:3f:ab:8b:32:8f:67:b7:0e:e8:42:c6:f6:
                    1d:b7:c6:7d:cd:d4:ff:d2:61:50:f4:fe:b2:6f:ff:
                    f6:92:16:73:ed:68:a1:0d:f9:fc:c9:04:dd:2e:46:
                    1b:c9:28:62:55:64:3c:c2:7b:27:e5:dd:90:25:66:
                    a9:68:8c:83:b6:87:28:5e:5b:b6:a5:ca:ee:0b:be:
                    de:27:46:5c:82:c4:95:49:e8:94:eb:6d:4f:57:ac:
                    82:73:c5:ce:ca:72:99:12:bf:9e:53:02:a8:f6:99:
                    0d:4b:6b:13:79:19:8c:e2:54:30:88:3a:35:60:08:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:72:9F:20:1B:0C:35:23:2E:CE:A5:4A:D4:2A:F7:D7:90:D1:83
            X509v3 Authority Key Identifier:
                keyid:04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:d6:20:bf:16:fd:83:c9:90:ad:c2:c2:8a:ef:0f:62:48:
         d8:58:ad:d6:1e:25:ac:e2:10:73:c5:ee:e3:13:26:88:10:b5:
         da:40:ea:ef:e0:71:a8:3d:3c:6a:a6:ef:b6:ac:a5:fc:27:6f:
         1e:0d:04:90:e0:71:8a:7c:35:a1:c1:c2:4d:74:a4:27:86:b2:
         83:fc:1e:1b:6e:24:e6:eb:34:7e:ca:91:a2:ad:55:c2:5d:90:
         a8:bd:24:24:26:72:c0:53:5a:2b:1e:97:05:72:77:3f:79:02:
         cd:9b:ca:74:f9:40:67:e2:a1:7c:28:5a:46:6e:a4:29:ec:17:
         f6:a1:76:38:94:33:c5:4c:be:f6:7a:5f:31:d5:5a:33:86:32:
         de:13:d0:df:74:af:19:2d:86:ab:21:55:0c:50:d5:14:ee:9f:
         c1:1f:50:f2:a7:00:31:0b:06:56:ee:33:71:03:67:46:56:9b:
         95:35:b8:3c:1c:6c:95:1c:5a:37:21:e5:0e:99:af:11:97:f6:
         a0:71:46:ee:0c:43:bc:23:92:40:ac:ae:80:83:02:9c:36:ef:
         a1:26:f7:73:d2:49:c6:dd:5a:f9:e0:6b:27:bf:60:06:18:d7:
         44:20:f9:b1:20:85:85:6d:44:04:73:5a:ca:35:08:4e:14:2a:
         2d:02:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:51:47 2024 by rpki-client on console-ams.rpki-client.org