Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File:                     BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier:          NtB51dq3heUdkNUGrW8FCf7x/l2U73Zt5h9OZia0Z3w=
Subject key identifier:   FE:7D:EC:FE:7A:7D:AC:30:80:F4:4F:22:A9:9D:15:15:C0:A4:B4:15
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer:       /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial:       018F46452090C6F6DF3D1645382B9768BCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number:          0B8C
Signing time:             Sun 05 May 2024 01:01:26 +0000
Manifest this update:     Sun 05 May 2024 01:01:26 +0000
Manifest next update:     Mon 06 May 2024 01:01:26 +0000
Files and hashes:         1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: V3uDYe4nwasotwSgs630TTLF2ReHDpjue4t2ayC1+Pk=)
                          2: VYC86uxe5UnwAnLo-mJqLfSLS7Q.roa (hash: 2yy/iwgPPp7Wl/x2iusjbbC+5w9Ur2o4jl7tVi9kkWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:45:20:90:c6:f6:df:3d:16:45:38:2b:97:68:bc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0632542221caef6448cc545214e000071bd56b86
        Validity
            Not Before: May  5 01:01:26 2024 GMT
            Not After : May  6 01:01:26 2024 GMT
        Subject: CN=fe7decfe7a7dac3080f44f22a99d1515c0a4b415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:07:57:8c:cf:e0:f8:74:f8:bd:99:01:84:
                    6c:be:e4:6b:1b:95:ea:f9:3c:bd:c9:d6:ca:77:73:
                    a1:29:c5:31:8d:32:1b:2f:0a:a8:91:3d:0a:e7:3f:
                    59:84:d8:2a:76:fc:98:a3:f7:f2:b0:e4:9d:31:40:
                    d1:f0:1e:08:cc:b0:3d:3a:a3:ec:07:a6:7c:46:70:
                    45:8a:80:48:57:81:b3:51:80:52:11:34:1a:44:c4:
                    ea:d2:78:ab:4a:0b:05:f2:93:aa:c9:26:04:e4:b5:
                    ed:e5:33:9f:f6:72:0f:ba:a2:17:02:fc:e5:80:be:
                    bb:8f:56:82:61:b7:34:e4:78:a4:37:ba:74:98:3b:
                    e1:7c:4b:cd:13:95:2e:b9:b3:97:b0:2f:57:e6:24:
                    89:7f:67:2b:ad:57:67:52:8a:99:3d:f5:89:f2:8f:
                    37:ff:c5:65:55:c1:88:e4:72:d9:02:95:fa:87:11:
                    e9:b7:9f:89:9e:10:e4:c3:14:fb:cb:0c:e1:13:10:
                    31:b8:43:b9:16:d0:bc:87:1a:89:7e:af:2e:41:7a:
                    67:8c:93:bf:83:a8:28:97:3c:78:1e:db:c5:92:ab:
                    2c:22:59:d3:76:b7:37:3d:f8:42:e9:de:56:3c:c0:
                    03:d3:5d:77:d2:3f:21:ee:f8:b6:d8:50:bd:7b:35:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:EC:FE:7A:7D:AC:30:80:F4:4F:22:A9:9D:15:15:C0:A4:B4:15
            X509v3 Authority Key Identifier:
                keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:94:7b:aa:09:ad:1d:2b:cf:94:0d:62:95:ef:97:87:3c:54:
         4b:72:9a:54:41:4c:9c:5e:0e:90:38:dc:f0:3c:6d:de:36:6a:
         65:07:43:56:13:4d:d2:65:f2:f8:5a:4a:9b:09:1a:0f:a7:32:
         07:8e:d8:b8:4c:a4:33:42:cb:01:00:5b:b5:9f:af:2b:38:d7:
         63:49:22:e1:72:bf:63:3d:86:a2:72:e3:ec:06:e0:d7:f3:1c:
         e2:93:ac:83:25:fe:93:7a:8a:c6:2e:06:f7:02:4e:ab:0a:a6:
         9e:75:ad:bf:46:c4:5f:5d:b7:56:6b:f8:fe:6f:b6:56:f8:11:
         4c:d4:b9:a6:0c:d1:47:55:de:38:ab:fc:ae:35:5d:b3:74:4a:
         7f:0c:4c:59:5d:37:7b:40:a4:37:b2:44:39:20:4b:7d:44:75:
         a1:3c:42:5e:b2:d6:cb:95:35:4c:96:c9:e3:bd:b7:3c:85:f9:
         3c:a5:ae:4d:ea:4b:e4:33:45:a9:2b:2e:e3:40:2b:de:cb:aa:
         fc:2d:0d:e3:00:25:7e:f9:97:04:f1:dd:20:9c:75:07:f1:ea:
         d9:4a:5d:ed:c5:ab:07:f6:2b:15:6d:1c:f1:5b:c2:42:ac:14:
         40:fb:3e:7b:e4:30:34:b8:20:07:07:0f:37:b1:b2:6b:2a:67:
         e5:08:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:03:22 2024 by rpki-client on console-fra.rpki-client.org