Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File:                     xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier:          QBy6PZ/6Aopo76/dfBc+KJLUuh5lUqYR5isJTDXUHWI=
Subject key identifier:   66:17:E6:14:A4:E1:83:0B:D0:04:82:B8:8B:55:56:1E:BF:F7:A0:85
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       018F86A40F12077C9C05F9607C919D98F405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number:          06D9
Signing time:             Fri 17 May 2024 13:00:49 +0000
Manifest this update:     Fri 17 May 2024 13:00:49 +0000
Manifest next update:     Sat 18 May 2024 13:00:49 +0000
Files and hashes:         1: n88NeOg50HzZdtQQIWH2fBtLspE.roa (hash: 2MktlZJ8yih0pO9UI+N77D/BDG1RYDdu7b4OXIWE0mQ=)
                          2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: xKPuaD6WWtM3N28eJkV71S3yF6VSPaTPYKzG948jYaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:0f:12:07:7c:9c:05:f9:60:7c:91:9d:98:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: May 17 13:00:49 2024 GMT
            Not After : May 18 13:00:49 2024 GMT
        Subject: CN=6617e614a4e1830bd00482b88b55561ebff7a085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:5c:3c:45:3c:d0:b6:a4:fd:0d:bc:0f:73:
                    b9:d9:35:b7:ea:8a:07:ec:ba:d4:95:ad:3d:78:c5:
                    3f:1a:98:bf:c1:47:4c:dd:fa:04:da:1d:e7:6b:62:
                    a8:73:85:3b:e9:29:58:b6:39:0c:19:ec:a3:b6:56:
                    bb:3e:04:e4:9e:0b:4e:2a:45:6e:71:be:ce:86:f9:
                    ce:7c:82:e2:09:b5:cb:4d:f7:34:02:1b:d9:eb:d5:
                    f7:14:9b:8d:82:2c:ad:3b:c6:61:5c:08:31:64:5d:
                    58:92:b8:54:e4:a4:2d:05:e9:82:74:50:e9:2c:0b:
                    24:43:53:25:9c:a7:5b:a3:43:21:81:a3:78:4a:e5:
                    dd:1b:78:84:27:c8:a1:44:45:48:b0:2b:f3:b4:aa:
                    d3:27:16:a0:94:e7:71:dd:a5:9d:7a:be:71:16:37:
                    c7:9a:d1:8c:8d:2c:2e:ef:5b:2f:27:28:4e:bc:a3:
                    75:de:e5:e4:0d:4b:36:a4:6e:18:2e:c3:01:77:15:
                    5d:d0:dc:a0:cf:d6:74:09:a2:ac:fc:04:df:6b:56:
                    64:4c:16:88:a3:ae:1a:65:d7:fb:27:ff:5f:7f:ca:
                    f5:25:fb:99:3b:1f:9c:c9:65:7e:5c:f3:ce:69:a3:
                    81:03:a0:be:68:54:63:e6:23:58:3d:9b:80:fd:43:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:E6:14:A4:E1:83:0B:D0:04:82:B8:8B:55:56:1E:BF:F7:A0:85
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:ff:6c:42:4b:85:c3:f5:d7:4e:00:19:a0:bc:f3:55:16:
         c5:0b:a3:f8:32:a6:b8:66:5b:5d:ec:79:97:56:fb:b2:a2:e6:
         3b:d6:6e:39:d4:fe:96:94:25:33:b7:12:09:55:61:97:e7:d2:
         ae:ae:00:82:a9:f0:63:e1:24:05:34:90:21:a1:cc:6b:93:9a:
         62:d5:2a:7b:31:34:86:fd:9a:bb:bf:39:8a:cc:84:75:61:e9:
         37:28:e9:b3:1a:87:16:ff:7d:ce:80:1a:71:cd:d2:9d:17:62:
         b1:d0:22:4a:f5:80:89:7b:ce:6a:a6:93:0d:42:f5:4c:43:ab:
         39:17:77:70:48:89:6f:cd:e5:04:e1:f2:3d:1c:ef:31:7a:9c:
         c4:8e:1a:b3:d7:d0:89:04:26:c7:3a:39:9c:09:4f:68:9e:5d:
         cc:2b:b5:ed:71:70:69:de:81:c0:bb:b5:06:8d:a0:c3:1e:34:
         b3:0d:f9:cc:8c:ca:ac:85:56:84:57:70:fb:e5:d9:d0:b1:06:
         65:99:1d:e1:06:c5:0a:e3:3f:37:c9:55:18:0a:40:03:d9:a4:
         2f:65:c9:46:45:2d:1e:4c:68:00:e5:68:5d:30:5e:81:7a:df:
         b3:11:89:38:c4:36:b7:62:08:b5:6d:50:0d:c7:c7:b7:d8:77:
         24:14:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:56 2024 by rpki-client on console-fra.rpki-client.org