Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File:                     Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier:          VrPGh6C23r5QpqRTucmG1acS/J6MNTZH8c0rdEWzNYg=
Subject key identifier:   D5:2D:36:3C:E4:15:5C:D1:00:5D:C4:7C:AE:8D:C0:6C:3C:3B:04:5A
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer:       /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial:       018F3BFB164F5D007DA034A67AB1ED91851D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 01:04:21 +0000
Manifest this update:     Fri 03 May 2024 01:04:21 +0000
Manifest next update:     Sat 04 May 2024 01:04:21 +0000
Files and hashes:         1: 96yEqn-5r16uf84AwwZSttqRJ7g.roa (hash: mhD19QYylXCmoOYGtisHYSc98JnM/oTfkeOTiq9jcFY=)
                          2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: 4Loer0decm1smFC5f2fjFzPR+4Y4/wgnOy3ielyTfAM=)
                          3: VT-zEFkJETJxldAloShGVN_hh6w.roa (hash: 2sVWFnbiUM9GpIzBlmPLhguPBrECdluEVh049e0WI1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fb:16:4f:5d:00:7d:a0:34:a6:7a:b1:ed:91:85:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
        Validity
            Not Before: May  3 01:04:21 2024 GMT
            Not After : May  4 01:04:21 2024 GMT
        Subject: CN=d52d363ce4155cd1005dc47cae8dc06c3c3b045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:0b:e4:f0:e2:e1:79:12:b9:13:8e:8b:4a:
                    87:2a:8b:22:28:ff:4d:2c:2a:7c:90:1e:17:7a:d6:
                    11:77:37:12:f6:52:4c:ba:02:0f:aa:71:0a:1e:87:
                    7d:ed:48:df:fe:a3:4e:6a:1c:d8:78:91:f3:0a:85:
                    ca:84:8d:89:4d:fc:5d:d6:11:09:01:7b:02:d7:91:
                    bd:02:29:01:7f:46:f4:54:ec:80:61:c9:64:84:85:
                    a1:30:b3:5d:ed:94:37:c5:28:85:ef:61:bf:c3:de:
                    85:70:ae:3b:61:97:2e:be:ed:4d:2c:92:d3:9f:03:
                    40:90:bb:e5:f6:1e:92:74:a8:0c:3b:ae:67:c7:85:
                    09:b5:ae:30:a4:e1:5b:67:7b:4f:b5:52:d3:b1:d2:
                    28:83:f5:23:68:d1:74:bc:73:ff:9a:6f:ac:e1:38:
                    04:57:05:c3:26:fb:dd:d5:32:24:e5:37:0d:34:8a:
                    81:5d:1f:fc:9c:67:61:59:42:e1:3a:e2:94:e6:46:
                    79:0a:5d:33:5e:07:1a:d1:ea:4a:44:80:1d:ea:60:
                    d8:2a:27:b4:4e:4d:0a:b8:2c:cb:4a:e3:75:fa:cb:
                    7c:8f:2b:34:f2:ce:02:35:c4:28:a4:34:38:3f:d0:
                    88:2f:3e:45:3e:ad:14:48:8b:91:cc:3d:c1:4a:a4:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2D:36:3C:E4:15:5C:D1:00:5D:C4:7C:AE:8D:C0:6C:3C:3B:04:5A
            X509v3 Authority Key Identifier:
                keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:c7:53:01:09:3a:58:d2:0d:89:c4:cf:dd:7f:d4:97:0c:
         a5:0b:57:5e:cc:fa:e5:57:d5:b0:74:4d:3a:4e:2c:9f:82:3e:
         53:b2:cf:18:45:86:f4:1d:4e:9a:f9:9b:7c:86:c9:4c:cd:53:
         e0:e8:57:6f:7e:4a:52:38:ef:04:f0:af:70:90:ba:31:06:44:
         51:e3:9d:d9:3b:4a:8f:02:bd:86:37:c0:da:a7:62:32:03:28:
         cb:b4:92:7a:2d:f0:c3:e5:f2:cb:37:27:cc:92:59:bd:c6:a0:
         a1:d0:d1:2a:c4:7e:22:9e:ff:66:53:0b:9e:1c:cb:13:58:1e:
         10:67:20:7b:13:b2:1e:27:ce:0b:41:16:4c:c4:a3:fe:e0:97:
         1e:97:3a:03:14:96:29:8e:c3:82:22:97:dc:30:ae:61:27:6e:
         72:bb:75:74:12:bd:ea:92:2e:90:15:9b:d1:b0:b6:36:f0:5d:
         06:84:21:a5:63:63:64:40:65:42:78:76:7e:a8:03:fe:b5:2a:
         cd:e3:cf:22:72:bf:10:2b:0c:49:78:a6:11:6c:90:09:af:2e:
         71:10:92:66:10:3e:c1:5f:07:8d:92:a8:13:eb:88:74:cb:ca:
         32:a2:15:79:3b:2c:70:6a:d9:21:c3:f9:b0:fa:17:6d:51:9a:
         45:40:be:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+xZPXQB9oDSmerHtkYUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjQwNTAzMDEwNDIxWhcNMjQwNTA0MDEwNDIxWjAzMTEwLwYDVQQD
EyhkNTJkMzYzY2U0MTU1Y2QxMDA1ZGM0N2NhZThkYzA2YzNjM2IwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAwL5PDi4XkSuROOi0qHKosiKP9N
LCp8kB4XetYRdzcS9lJMugIPqnEKHod97Ujf/qNOahzYeJHzCoXKhI2JTfxd1hEJ
AXsC15G9AikBf0b0VOyAYclkhIWhMLNd7ZQ3xSiF72G/w96FcK47YZcuvu1NLJLT
nwNAkLvl9h6SdKgMO65nx4UJta4wpOFbZ3tPtVLTsdIog/UjaNF0vHP/mm+s4TgE
VwXDJvvd1TIk5TcNNIqBXR/8nGdhWULhOuKU5kZ5Cl0zXgca0epKRIAd6mDYKie0
Tk0KuCzLSuN1+st8jys08s4CNcQopDQ4P9CILz5FPq0USIuRzD3BSqS7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUtNjzkFVzRAF3EfK6NwGw8OwRaMB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfHHUwEJ
OljSDYnEz91/1JcMpQtXXsz65VfVsHRNOk4sn4I+U7LPGEWG9B1OmvmbfIbJTM1T
4OhXb35KUjjvBPCvcJC6MQZEUeOd2TtKjwK9hjfA2qdiMgMoy7SSei3ww+Xyyzcn
zJJZvcagodDRKsR+Ip7/ZlMLnhzLE1geEGcgexOyHifOC0EWTMSj/uCXHpc6AxSW
KY7DgiKX3DCuYSducrt1dBK96pIukBWb0bC2NvBdBoQhpWNjZEBlQnh2fqgD/rUq
zePPInK/ECsMSXimEWyQCa8ucRCSZhA+wV8HjZKoE+uIdMvKMqIVeTsscGrZIcP5
sPoXbVGaRUC+Jg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:09:59 2024 by rpki-client on console-ams.rpki-client.org