Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File:                     BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier:          rhxQlPh9vKogWL0xIM1sgxvJoX9ndp71x3GNuNRtmNs=
Subject key identifier:   93:A7:E7:36:30:5F:A7:3C:B0:0F:5E:8F:27:1F:3C:9C:39:33:0B:B4
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer:       /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial:       018F5137E181DEDE5E484DB8CD6548FDC409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number:          0883
Signing time:             Tue 07 May 2024 04:02:47 +0000
Manifest this update:     Tue 07 May 2024 04:02:47 +0000
Manifest next update:     Wed 08 May 2024 04:02:47 +0000
Files and hashes:         1: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: MJRe1nW3wb6TvJ6Q9nKSx09YkTX/E/Y6sy0az6fSpQQ=)
                          2: UIanMCCnRJ931-Tk1hoWinJSB0M.roa (hash: AnyZMBxty0eLtBJMG6wbj0B4sAKzvB7Wd+ofxhC7NWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:e1:81:de:de:5e:48:4d:b8:cd:65:48:fd:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
        Validity
            Not Before: May  7 04:02:47 2024 GMT
            Not After : May  8 04:02:47 2024 GMT
        Subject: CN=93a7e736305fa73cb00f5e8f271f3c9c39330bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:eb:aa:d6:f9:63:d1:59:42:09:ab:8d:de:
                    7d:94:d3:c8:50:3b:9a:db:8d:fa:4d:07:84:99:c1:
                    ad:f7:26:c4:4d:ba:57:bf:fe:42:31:c9:a8:38:3e:
                    0f:9b:fa:17:c3:14:a0:14:e6:7f:d2:b0:09:ae:09:
                    13:20:e0:44:2b:2b:19:8a:ed:f6:6a:23:a2:be:16:
                    0f:8d:20:89:be:fd:48:d4:82:a9:2a:df:cc:a2:a6:
                    9f:16:d6:04:53:95:a0:05:58:f5:3e:f8:b3:18:67:
                    87:ef:b9:d5:03:4a:a0:b3:90:e0:9b:bf:eb:ae:73:
                    fe:81:34:76:82:db:d4:9e:31:26:9a:68:23:a6:f4:
                    4c:9d:99:19:72:dc:09:1f:da:6c:e9:30:9a:57:af:
                    a4:5d:df:3f:4d:11:0d:d4:da:61:83:02:0d:6c:11:
                    13:be:2a:4f:72:c1:85:e7:ff:c9:b1:da:67:a6:f1:
                    21:59:af:73:c9:08:d0:89:1c:fb:7f:0a:74:88:79:
                    ff:af:cf:aa:a8:c5:06:ae:a0:a6:28:5f:f5:f5:95:
                    24:f1:1c:aa:97:ae:f9:47:04:49:62:91:47:75:14:
                    fb:cf:18:c5:54:f4:be:46:83:ec:f5:43:4c:8f:e7:
                    2c:6e:04:5f:fd:a1:9d:c5:8b:42:d7:cd:99:ef:88:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:E7:36:30:5F:A7:3C:B0:0F:5E:8F:27:1F:3C:9C:39:33:0B:B4
            X509v3 Authority Key Identifier:
                keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:5d:6e:99:f3:db:72:99:66:7e:3f:72:a8:58:9b:ca:87:
         01:1b:28:94:af:32:b2:14:84:62:e5:0f:60:ec:e7:0a:a4:3e:
         0a:84:ac:de:8c:06:d9:dc:44:53:4b:55:de:4e:a1:69:59:ef:
         c8:1d:13:cf:fa:00:f5:4e:3a:16:76:f8:2e:ce:c0:f4:30:cd:
         ee:90:41:5f:81:c5:05:78:28:34:70:ad:87:44:06:41:6a:d7:
         15:1d:3d:b9:dc:42:3a:80:ad:58:aa:a6:f7:bc:c7:f8:d1:64:
         5e:9e:d9:5f:4b:be:3a:8b:35:71:38:9e:7b:7e:66:64:35:d9:
         59:83:38:96:6d:2a:29:1b:3b:06:31:f2:f4:fb:5b:9c:42:09:
         a8:25:e6:35:d4:55:13:1f:cc:80:41:22:8c:9f:e5:bf:43:dd:
         29:43:13:91:44:70:7e:30:4c:ed:4a:33:fd:0a:b0:32:7d:7e:
         ac:10:cf:86:1e:38:bb:7b:c9:c5:7f:a4:10:2f:61:25:d4:86:
         a1:85:df:d3:e5:19:25:4f:38:3a:d5:58:ac:3b:5e:af:e1:d7:
         a0:18:9f:c8:98:f8:87:1a:2e:9e:5a:bf:25:cf:29:41:13:da:
         a3:ca:12:25:7a:c0:e3:60:70:4f:19:61:0c:a6:93:e1:e2:e3:
         2c:d6:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:17:26 2024 by rpki-client on console-ams.rpki-client.org