Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File:                     BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier:          E38L6EfIo9gxLXomImxYBLR+D76tGfVMLniiPbDTWrg=
Subject key identifier:   E1:54:E1:4A:3C:79:E4:71:B4:C0:9A:90:B3:EF:AF:9D:9C:F6:2B:DF
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer:       /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial:       018F498001E872E4E3CA40F0263633105B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number:          1074
Signing time:             Sun 05 May 2024 16:04:36 +0000
Manifest this update:     Sun 05 May 2024 16:04:36 +0000
Manifest next update:     Mon 06 May 2024 16:04:36 +0000
Files and hashes:         1: BfWa7cKCluKRck95N954jichZAg.crl (hash: TG9Uo1J6VyAKiSM1ksOzDAakBGLbZrIcWhjYfe8PSt8=)
                          2: FoVdP2zXQO7JmuUnUjOTZep-vgw.roa (hash: ZOk3u6PTcx4pIna4BmuFtp/Z7fekpAtw0hyzoJOXo8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:80:01:e8:72:e4:e3:ca:40:f0:26:36:33:10:5b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f59aedc28296e291724f7937de788e27216408
        Validity
            Not Before: May  5 16:04:36 2024 GMT
            Not After : May  6 16:04:36 2024 GMT
        Subject: CN=e154e14a3c79e471b4c09a90b3efaf9d9cf62bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:a4:62:8a:c8:96:ec:8a:3b:be:1b:03:08:
                    68:2d:71:d6:4b:8e:e6:c5:ef:62:4d:83:ca:9a:f3:
                    70:83:da:07:8c:0a:e5:0b:77:a0:b4:bf:20:15:e9:
                    00:6a:84:a4:d4:e4:7f:ba:33:3c:4a:f7:41:ec:0c:
                    83:b7:02:a4:84:81:4a:8a:cc:e2:e3:78:a0:cd:70:
                    ae:5f:a8:69:04:1c:6e:a9:5f:df:5e:78:0f:9e:20:
                    20:d7:72:e1:84:8c:9f:df:a7:c1:29:34:72:0f:3d:
                    37:f3:67:7d:99:54:a1:79:49:6e:1c:09:92:33:b9:
                    fa:6b:71:cc:be:92:9b:c1:fc:e9:55:01:23:f4:f1:
                    d0:e6:09:30:bd:74:a3:79:40:7d:3e:d1:b8:97:8e:
                    90:a5:44:fc:c7:f2:0a:35:2b:a0:25:35:20:f1:96:
                    ab:4e:24:79:74:3d:53:60:f9:0b:51:81:d9:60:00:
                    21:2c:cc:08:4f:7e:34:11:b8:8a:1e:ec:b3:8a:6d:
                    90:6b:11:96:ee:e6:af:1d:ef:a4:db:b9:14:57:7e:
                    db:83:01:a1:81:40:fe:d1:c9:b5:5e:e3:f1:10:f5:
                    ca:08:6b:36:7e:62:2d:91:f2:d1:fa:ed:fa:05:c2:
                    d2:e0:5e:c6:0b:ff:cd:f3:47:53:36:86:1e:d4:60:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:E1:4A:3C:79:E4:71:B4:C0:9A:90:B3:EF:AF:9D:9C:F6:2B:DF
            X509v3 Authority Key Identifier:
                keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:93:f1:ba:49:19:99:d7:ba:6f:67:51:3f:e9:0e:a2:63:
         e1:45:8d:8a:3a:0e:98:ac:f2:86:dc:97:e9:05:d9:fd:e5:ef:
         9a:c4:4a:f0:93:92:ee:f5:f7:70:3f:f1:92:13:82:1d:25:0c:
         c3:ce:f6:e8:7f:5b:31:0b:95:22:85:de:c9:18:2e:de:8d:83:
         92:61:c0:c6:f0:e0:3c:9f:ad:4b:83:95:69:c8:e4:1a:75:bb:
         a9:40:47:52:4a:b4:2b:4e:b8:11:1a:6a:6f:b6:08:37:05:b9:
         03:39:01:7f:a4:a3:db:0e:83:32:56:8d:81:75:c4:f5:71:ef:
         ef:b1:c7:d6:83:f7:e3:c7:24:79:7c:0b:af:ec:52:63:6e:f4:
         d3:6d:b3:5b:94:83:61:7e:c3:36:b2:62:17:6d:96:bf:24:22:
         ee:1c:fa:aa:da:77:34:fc:24:f9:14:b0:d3:12:ff:fc:5b:0e:
         cc:e7:4c:4c:ff:20:19:21:02:4e:13:6f:20:64:d0:71:2b:89:
         d4:b5:80:29:3a:b5:6f:c3:e3:29:c2:45:87:bd:95:d8:37:f1:
         2d:ee:4c:5d:dc:8f:9c:e5:00:91:b4:04:a1:01:55:7e:48:86:
         eb:6d:c5:d9:b3:8f:e2:e9:d6:d3:2c:dc:48:2c:28:61:da:9c:
         ce:b1:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:11:11 2024 by rpki-client on console-ams.rpki-client.org