Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          xGvNOpiedg7tcpP7RFcC/G7s3G49kI5+Y53gDphQ6p4=
Subject key identifier:   27:9E:75:B7:AB:A2:CF:C1:B8:85:7E:29:3F:37:44:27:C0:DE:00:12
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       019351D0D326530059976CD2745A63156CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          12AE
Signing time:             Fri 22 Nov 2024 03:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 03:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 03:01:00 +0000
Files and hashes:         1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: oAQW/2QnkObq2eEiYFeYg/5m4kDNk7a+fY1Z8/wWxHY=)
                          2: Cy2yi2Wg6gvWxvWinD0y8B7maJU.roa (hash: laRvHoonwa7hd1lB+fKdzsT5OUPZnliZygBXvaoT5kA=)
                          3: EQQ_94fTvbESw7BTesbEPZIw7b8.roa (hash: Pmd5u7EaP+Ji0A4zfL11WVt2rgIoceRypfUNVsK24u0=)
                          4: O7ZImWljWdeJXEnYWz7rEF5NaJY.roa (hash: /KsmAMTcMOXho4qwXR0YspzF0E6bHPIwiq9v6UPmLz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:d3:26:53:00:59:97:6c:d2:74:5a:63:15:6c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Nov 22 03:01:00 2024 GMT
            Not After : Nov 23 03:01:00 2024 GMT
        Subject: CN=279e75b7aba2cfc1b8857e293f374427c0de0012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:cb:b6:d2:fc:b6:88:9b:74:99:0b:a8:d6:
                    f5:eb:12:2f:8d:39:3a:27:66:35:07:1f:a9:fa:76:
                    f6:ac:ce:39:4a:49:6d:44:d0:72:50:ea:d3:fa:f6:
                    bb:c4:c4:39:94:b6:27:6f:d3:89:2c:97:2b:23:65:
                    3e:65:eb:b0:9b:b5:4e:18:37:eb:19:59:b1:54:83:
                    7f:59:c6:6e:33:26:98:c6:a0:d7:55:be:27:17:91:
                    de:a1:b4:cf:17:15:09:a1:19:a0:41:c0:f0:6d:42:
                    e5:77:0c:c4:2e:de:39:2a:06:2a:cc:3c:72:e2:0f:
                    af:b4:ed:4a:ee:bb:5a:5d:c1:b8:4b:61:52:79:5a:
                    97:35:1b:16:ee:d3:b7:d5:18:ae:d5:40:c9:6d:cf:
                    32:9b:2b:af:3c:2e:c7:f6:84:72:f4:d5:0d:fb:60:
                    1d:56:1d:8a:8d:7d:ac:8f:93:4e:54:03:9d:c2:d8:
                    a9:b3:fb:70:42:f9:14:b2:16:42:e5:6b:64:f5:80:
                    e5:55:28:4a:93:b5:64:5d:5a:88:ee:cc:56:2b:87:
                    cf:bc:aa:1e:2f:fa:50:87:5c:ab:e8:ed:67:2f:d9:
                    17:d9:4f:7e:a6:4d:95:8d:11:85:c9:65:78:31:73:
                    f8:d5:c1:46:9f:d4:6a:4f:2f:62:56:20:42:f8:30:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:75:B7:AB:A2:CF:C1:B8:85:7E:29:3F:37:44:27:C0:DE:00:12
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:00:32:df:cf:f9:b0:76:7a:11:95:bf:b5:77:79:94:99:
         ae:f1:7e:c0:33:c4:41:93:fd:fc:e1:63:d5:83:e8:c3:6e:34:
         4e:ca:96:6a:4b:45:89:cc:d5:84:ca:ca:48:61:1d:56:29:df:
         d9:3f:76:d2:82:74:e2:d3:14:12:b1:e7:db:bf:5d:b5:a4:47:
         dc:42:fb:23:f2:a6:13:32:b4:55:d1:f5:86:f4:09:c9:86:9a:
         b9:e7:26:65:fb:73:ae:b2:60:1e:c7:6c:59:07:01:d3:80:f4:
         7a:91:e3:51:02:9c:1b:de:e3:ec:2f:f9:cb:6e:b7:3e:d7:b7:
         70:c3:8f:43:1d:b8:2e:fc:66:75:81:9a:6a:63:dc:79:4f:01:
         d5:4f:64:f7:75:b9:43:10:08:75:96:03:da:71:db:58:8d:ba:
         a3:cb:73:2d:f3:35:90:03:15:99:97:e0:1f:39:46:55:f7:b5:
         79:96:cd:91:01:41:17:62:6f:15:50:76:38:dd:81:f3:a4:96:
         48:ce:3a:b5:18:71:ec:e6:8c:9f:33:aa:73:8c:99:e2:ad:99:
         e5:b4:d0:52:b7:c2:73:cc:d7:7a:96:57:98:49:37:e1:93:69:
         38:ac:5b:aa:74:97:2f:82:28:8d:37:67:89:c3:e9:91:26:a9:
         c9:6a:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:02 2024 by rpki-client on console-fra.rpki-client.org