Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          Y9v9ZQPGy0WeIsPJ3JzyzeESlFXGZ056MPcXJYBh17M=
Subject key identifier:   8D:34:9D:A3:57:5F:F8:5E:E7:F5:11:40:B6:69:53:51:98:65:73:33
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       018F5137C8C6496D2DA88B4C2C46329E7433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          0FF1
Signing time:             Tue 07 May 2024 04:02:41 +0000
Manifest this update:     Tue 07 May 2024 04:02:41 +0000
Manifest next update:     Wed 08 May 2024 04:02:41 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: /mgpOj0QI85dMxE3Qi8+Q9Pf396OXhuQ9oGYOMsyk3I=)
                          2: QP7YE6rhGNkXqdMC_9ivO3mUegk.roa (hash: SRdQsAt44OpOt6JNcqyzpDVM/8rOMP9eZQtFMYo2nKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:c8:c6:49:6d:2d:a8:8b:4c:2c:46:32:9e:74:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: May  7 04:02:41 2024 GMT
            Not After : May  8 04:02:41 2024 GMT
        Subject: CN=8d349da3575ff85ee7f51140b669535198657333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:bd:d4:18:0e:a4:6d:68:b1:2c:b3:77:04:
                    5f:97:a2:31:19:65:0b:b5:12:c5:12:e1:aa:06:19:
                    4d:fc:b2:5f:18:84:ad:c1:2e:1b:2f:b3:0c:21:fa:
                    a6:fb:a5:d0:46:af:f6:8e:3e:3c:13:8e:d8:35:f8:
                    bf:25:a5:c7:f2:5f:83:4a:37:63:87:f7:4e:d4:10:
                    8f:f9:a7:99:40:94:a0:fc:75:d4:96:70:a6:16:ac:
                    b3:ad:5e:cb:96:d8:92:64:da:c0:f8:d1:19:5d:ce:
                    24:34:33:c3:03:d4:19:6e:58:ca:3c:7f:64:2c:25:
                    41:5b:9f:57:32:64:43:7e:b9:9e:cb:cf:e9:7e:3d:
                    99:08:05:c9:fe:ca:bb:3f:24:fe:01:d9:15:06:3f:
                    62:c6:0e:1a:08:b6:fd:00:b9:7a:de:cc:b0:67:71:
                    9d:b3:3c:29:2e:64:fd:6f:e8:6d:e5:90:4f:8b:4a:
                    76:f9:4a:84:b1:c9:df:bd:bc:9d:51:7d:df:3f:9c:
                    9f:93:cf:af:11:51:da:6c:a9:44:7e:a0:48:ca:fe:
                    f9:4f:84:05:0e:5a:0e:7c:c6:ef:17:25:a6:80:81:
                    83:4b:98:86:8e:68:8d:9b:9c:5c:cf:c7:10:98:57:
                    b1:8c:d0:39:f0:e0:d6:cc:ba:78:e0:fc:6d:80:18:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:9D:A3:57:5F:F8:5E:E7:F5:11:40:B6:69:53:51:98:65:73:33
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:39:53:3c:38:31:dd:42:8b:c3:ad:7a:5d:6e:17:c1:1e:f9:
         65:7c:26:3a:76:96:d6:ed:ac:86:8b:26:8b:0c:00:e5:7d:27:
         5e:65:0f:14:de:29:e3:87:aa:2c:83:6f:f6:6e:e0:75:a9:4a:
         e4:7c:49:f7:24:af:74:72:e6:dc:ec:2c:8d:ee:d7:d7:58:af:
         13:5b:72:cf:f6:57:b6:10:ae:47:2e:45:cc:52:f4:68:41:1b:
         99:32:b4:91:d0:9c:e0:aa:5e:f8:e2:fc:96:c5:70:25:6a:86:
         90:f8:ed:08:9b:5c:28:f3:4f:01:3b:c4:b3:8b:dc:8a:28:2a:
         b8:48:c3:36:9a:86:60:33:26:d1:5e:6f:48:4d:54:2d:86:25:
         5f:17:61:12:55:28:a1:74:db:36:19:9b:b5:1a:ad:dd:f9:37:
         b3:8b:7c:85:cd:13:aa:05:c5:0d:da:f0:c6:58:2c:8f:68:2e:
         9a:e1:1d:b1:c9:f5:7d:b0:e9:da:89:44:6b:f7:9e:14:70:e5:
         7d:28:5a:d4:74:19:46:a6:9b:87:a4:ee:72:7a:a2:be:c1:14:
         74:ea:56:76:4f:d1:b0:a2:cd:04:b8:9f:50:d2:1e:a5:1c:14:
         4f:49:db:f6:9e:41:7c:04:7d:e4:7f:f0:70:36:fa:b1:a4:80:
         f8:84:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:52:59 2024 by rpki-client on console-ams.rpki-client.org