Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File:                     CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier:          itVz1q42SKZ/m7ifthBrO6YayZGxpKFdlBMIlbuOm2w=
Subject key identifier:   B5:CB:EE:5C:BC:68:25:57:74:A7:F1:F4:76:65:DE:D2:25:EA:9D:B2
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer:       /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial:       018F362F8527BE18733ABFD4F78573AC5486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number:          0BB1
Signing time:             Wed 01 May 2024 22:03:54 +0000
Manifest this update:     Wed 01 May 2024 22:03:54 +0000
Manifest next update:     Thu 02 May 2024 22:03:54 +0000
Files and hashes:         1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: pYk89BxLaP3LvbJzP9vv+I7UG/fX0lO1eHtZdPoke/Y=)
                          2: Zbax72lHDvEreFynAYzSo49toXo.roa (hash: c9Mh22d8cLtizyKudqyzKSaPEaGolgOLYPxYm6dUsxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:85:27:be:18:73:3a:bf:d4:f7:85:73:ac:54:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
        Validity
            Not Before: May  1 22:03:54 2024 GMT
            Not After : May  2 22:03:54 2024 GMT
        Subject: CN=b5cbee5cbc68255774a7f1f47665ded225ea9db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:de:be:56:52:2c:0c:3b:61:58:5c:d4:d0:
                    07:b0:24:80:4b:cf:4b:54:85:24:f8:af:5d:25:21:
                    3b:cc:eb:c4:7d:e9:cf:68:e9:3f:2d:c5:d9:8b:38:
                    a8:b1:3b:f4:1b:d3:e7:27:53:53:6b:65:57:08:f5:
                    d9:3b:16:13:5c:5e:5e:92:e8:8f:ef:c6:3b:70:0b:
                    07:02:0d:59:e8:3d:13:8c:c9:50:f3:4a:94:77:44:
                    0d:63:04:26:6a:5b:26:33:56:85:9f:49:5f:88:8e:
                    95:27:8d:45:d8:5a:d6:72:ed:99:b0:c0:1b:10:4b:
                    c1:0b:ca:72:e5:07:50:84:a3:5f:b5:56:a5:7d:a5:
                    1e:b0:d7:95:43:f1:0c:8c:39:c7:1e:91:d8:70:c8:
                    5d:ad:60:c7:4d:64:11:18:d4:5f:69:6a:49:90:6b:
                    94:f4:27:10:f8:f0:71:89:a1:b4:3e:21:1c:58:89:
                    74:57:b1:d7:0d:19:c1:4f:57:c4:98:22:fb:85:bc:
                    9b:aa:04:ed:d7:a4:7b:1d:eb:6a:62:09:7f:0a:d4:
                    e2:41:7c:9a:07:ab:99:cf:b2:54:56:df:e2:18:77:
                    0e:39:f2:99:78:90:ed:69:3e:8d:34:43:87:48:7c:
                    70:d9:e8:56:35:eb:d0:c3:44:b5:bb:61:35:3f:7a:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:EE:5C:BC:68:25:57:74:A7:F1:F4:76:65:DE:D2:25:EA:9D:B2
            X509v3 Authority Key Identifier:
                keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:4d:6f:1a:47:09:1a:ef:f7:3e:cb:03:c8:e0:cd:ae:6b:
         99:6c:87:61:46:3b:ed:42:da:62:04:b3:e4:7a:e1:b4:1e:b0:
         29:aa:aa:68:5b:c7:f1:6a:1b:33:86:9d:5d:04:b8:7c:43:4f:
         21:b6:da:b3:2e:20:9f:86:88:3e:3e:03:0f:84:11:cf:59:3c:
         57:4b:9c:d1:3e:91:12:bb:56:40:1e:2b:08:15:0c:89:c0:ec:
         68:d7:08:34:83:89:c8:b1:7c:fa:cb:23:4d:5f:d4:29:6d:bf:
         6c:31:56:45:3a:e8:81:36:d2:1e:a4:fa:56:ea:a4:85:bf:dc:
         e6:72:79:28:04:8d:56:21:9b:c1:7b:86:96:bc:c7:6a:03:ef:
         28:a5:60:7d:54:4a:50:a2:47:e9:f4:e2:79:36:4b:a4:dd:ef:
         59:18:ed:e2:fd:79:50:30:0d:5b:9c:9f:f5:53:f8:6d:09:a1:
         96:14:4f:f2:25:ba:90:11:30:e8:20:fa:17:e2:9b:3f:8d:91:
         fd:1c:51:43:17:29:b3:52:43:c0:5c:f2:be:9f:1f:a3:df:10:
         77:46:d6:8a:59:00:78:24:5f:3b:57:03:50:99:13:8c:b7:33:
         c2:1f:44:2c:e5:6e:71:32:5c:e1:e9:93:d4:1c:90:11:4c:ca:
         6a:8d:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:51:41 2024 by rpki-client on console-fra.rpki-client.org