Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft
File:                     BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft (raw, json)
Hash identifier:          4VoGhgSl87RtkAKoNromgmFcTH1dhC7LjPcXyJuyngA=
Subject key identifier:   B0:61:85:58:EF:E5:21:5A:01:9F:50:C1:86:B7:51:99:22:58:73:23
Authority key identifier: 06:5C:4B:FF:9A:0E:E9:F9:87:95:1F:48:0F:81:57:B9:1A:89:83:F8
Certificate issuer:       /CN=065c4bff9a0ee9f987951f480f8157b91a8983f8
Certificate serial:       018F34AC62F208E26B4930C077CF4BF94BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlxL_5oO6fmHlR9ID4FXuRqJg_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 15:01:03 +0000
Manifest this update:     Wed 01 May 2024 15:01:03 +0000
Manifest next update:     Thu 02 May 2024 15:01:03 +0000
Files and hashes:         1: BlxL_5oO6fmHlR9ID4FXuRqJg_g.crl (hash: 8QPSqE0eb9QHYRULC69zUGaCaw3pyfo2xq2hU2ZauA0=)
                          2: kUr9DjEwmehbKgfncE1Pj-8N80w.roa (hash: uRvPZbPZA85Z01MYPkPEQAj8iDxJ5N/90GVH1bYc8ZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlxL_5oO6fmHlR9ID4FXuRqJg_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:ac:62:f2:08:e2:6b:49:30:c0:77:cf:4b:f9:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c4bff9a0ee9f987951f480f8157b91a8983f8
        Validity
            Not Before: May  1 15:01:03 2024 GMT
            Not After : May  2 15:01:03 2024 GMT
        Subject: CN=b0618558efe5215a019f50c186b7519922587323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:84:b4:49:fc:ab:d2:d4:32:47:eb:cb:ab:
                    a3:06:f3:b7:4a:35:bf:fe:d3:fb:ac:c7:90:44:b9:
                    f6:e8:4d:5d:ae:f6:e4:02:88:13:ec:ac:b5:84:0b:
                    c7:41:a6:00:a7:59:cc:8a:67:e6:3a:ff:fb:25:89:
                    7b:4e:3d:bb:e1:91:c8:87:71:4e:c8:7b:5f:2c:9e:
                    ab:1f:64:19:c2:fd:50:b1:59:62:f7:a0:94:6d:3d:
                    db:9f:99:1b:15:fd:e7:7f:7a:e3:e5:c9:0b:25:9b:
                    49:ac:84:2a:40:2d:32:63:e1:3d:b9:94:6f:05:91:
                    18:1a:69:66:e8:ed:79:7f:d6:a3:6d:f1:82:d6:4f:
                    d9:9d:8d:71:39:4e:98:4f:ca:88:e6:56:ba:5e:24:
                    cb:d7:ba:0a:d2:80:bd:5e:e8:13:bf:a8:d7:9d:78:
                    5c:e1:15:98:c8:b9:9f:08:bc:56:3a:a1:fa:65:da:
                    ed:20:46:8a:cb:81:4b:77:01:ed:c1:26:ab:53:80:
                    ef:68:a3:ee:4f:b6:9c:9f:b4:b9:49:02:eb:d7:db:
                    bf:a8:10:ce:d0:2e:e2:3f:1c:44:25:76:d1:89:12:
                    00:67:07:07:2b:cd:e7:43:37:68:5b:83:da:c4:a3:
                    5a:9d:96:fc:fa:eb:18:85:63:89:9b:0f:f5:53:8d:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:61:85:58:EF:E5:21:5A:01:9F:50:C1:86:B7:51:99:22:58:73:23
            X509v3 Authority Key Identifier:
                keyid:06:5C:4B:FF:9A:0E:E9:F9:87:95:1F:48:0F:81:57:B9:1A:89:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlxL_5oO6fmHlR9ID4FXuRqJg_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a4b48-a719-454e-8c98-b3e8595d1cee/1/BlxL_5oO6fmHlR9ID4FXuRqJg_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:8a:d4:e9:95:4c:48:25:a5:6f:2b:04:e5:0e:3a:6a:20:
         c5:c7:b0:f3:72:29:a0:70:dd:40:f6:27:fd:c7:36:41:86:bb:
         b0:ee:ae:09:8e:bc:f3:c7:51:d8:1c:b4:0b:b3:67:83:d2:91:
         01:7f:5f:48:36:c8:7c:bb:68:01:63:8e:46:60:bc:54:79:1f:
         64:19:3f:ce:33:3f:20:97:ae:84:14:f3:86:3a:a8:b8:ea:28:
         63:91:9b:70:5c:78:d9:a9:dd:45:e3:75:db:78:7d:43:dc:d7:
         10:48:e7:16:2c:e5:dd:52:e7:b8:c8:8d:33:a3:58:2b:a9:e9:
         b4:46:ef:70:af:66:f0:b5:d0:9a:c0:6e:f0:ed:47:70:e0:82:
         c6:fc:7d:36:31:4d:a4:ed:51:3a:64:95:aa:3b:1f:46:9b:44:
         eb:ab:f5:3c:e7:c8:36:21:9d:7d:a5:6c:df:69:51:7b:4f:39:
         f3:24:9e:20:da:2e:7d:3c:fb:ab:7e:db:67:11:23:ba:78:18:
         e0:17:ae:af:be:33:8a:cd:0b:24:7e:65:7d:eb:c8:c9:af:7c:
         46:f2:59:67:11:5b:3d:a5:1a:bd:52:35:56:f7:0e:ca:7e:94:
         39:5e:cd:4a:57:ae:6f:c4:37:a1:40:b9:5f:ec:f6:93:3a:ef:
         a5:7b:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:43:57 2024 by rpki-client on console-fra.rpki-client.org