Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File:                     Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier:          vqHMqD3lmZHw1LTKX5nrW/gNzldb6hglKI7CgutM27c=
Subject key identifier:   50:FC:F8:FB:FE:C3:45:BD:A2:4C:1C:54:19:C1:97:93:07:B1:3E:65
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer:       /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial:       018F47FC43CF15A0100CB15FE5469245FAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number:          0CE5
Signing time:             Sun 05 May 2024 09:01:05 +0000
Manifest this update:     Sun 05 May 2024 09:01:05 +0000
Manifest next update:     Mon 06 May 2024 09:01:05 +0000
Files and hashes:         1: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: Ymp5Fzh45kK+h/kzPjICmAN0vq4uB0HgwyIYj8F9PTE=)
                          2: ObCjhj0_47AE4tfHAzh7r7UDeZ4.roa (hash: kaV/7nJSoKK/KibrPrXeIoLbRzZSPIa/pWVFMOVJ3Sw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:fc:43:cf:15:a0:10:0c:b1:5f:e5:46:92:45:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
        Validity
            Not Before: May  5 09:01:05 2024 GMT
            Not After : May  6 09:01:05 2024 GMT
        Subject: CN=50fcf8fbfec345bda24c1c5419c1979307b13e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:fa:7d:29:b0:c8:4b:9d:a9:bc:62:7e:ff:
                    30:9e:2b:c2:dc:a7:63:e1:87:55:b1:f4:2e:92:a8:
                    01:2a:ed:54:73:8e:58:b1:f9:68:7c:d7:c4:40:ba:
                    f2:eb:b5:14:0c:a5:dd:2e:d6:1b:2f:d5:9d:d7:fa:
                    92:67:be:e8:05:99:00:90:9d:63:ad:2b:7b:61:b5:
                    f6:0e:b9:59:cb:4d:f2:81:65:ff:5c:b9:99:cf:06:
                    50:4e:77:2d:13:d3:b6:f8:38:0d:89:1e:7f:fe:8f:
                    49:18:62:c9:23:26:38:0a:e1:dd:f1:6f:f1:97:ae:
                    6b:27:ed:97:3e:2b:d7:e5:82:8e:7a:ec:8c:bd:17:
                    db:da:65:ab:cf:28:82:f5:24:dc:12:76:4a:ed:77:
                    45:da:c3:be:3a:b1:d4:27:23:6b:ab:76:77:05:02:
                    8d:47:fc:e0:f5:23:2b:68:70:f0:10:40:a3:ee:fe:
                    3b:2b:0d:54:99:8d:8e:2b:9d:ea:3e:bd:52:b2:9f:
                    60:c3:4f:82:79:00:a2:ad:1f:df:51:07:38:8d:c5:
                    75:ef:60:f9:43:f5:80:bf:ad:b8:52:37:ac:35:cb:
                    ce:7a:3b:8b:0d:f8:05:3b:32:b4:16:48:c6:2e:e6:
                    35:e4:08:32:02:7c:49:83:2c:b6:b2:65:09:58:98:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:F8:FB:FE:C3:45:BD:A2:4C:1C:54:19:C1:97:93:07:B1:3E:65
            X509v3 Authority Key Identifier:
                keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:27:38:94:fc:58:47:ab:4a:ff:96:75:5a:78:37:07:7e:
         71:9f:9f:85:c5:b9:ec:81:4d:6c:20:3e:8a:27:de:41:42:95:
         d1:df:0f:66:25:ed:dc:54:25:e4:67:d3:5a:e8:dc:06:9b:8f:
         e7:c0:cf:a7:3a:2a:3e:a5:20:e9:4c:58:d4:9e:73:bf:b0:9d:
         5b:33:66:0c:68:92:7b:69:d3:fe:3d:c5:10:d9:70:40:cb:f5:
         79:cd:85:70:38:22:fc:92:81:58:f2:8f:ab:50:cf:49:c8:d2:
         ff:76:21:bd:db:d1:6d:55:be:b4:28:ce:5b:0e:17:f8:70:ae:
         e6:a7:27:ae:e9:0c:f5:1f:7d:ae:c6:43:37:b6:24:c0:15:d2:
         5f:6b:0e:94:8a:55:81:01:36:58:53:bf:a0:1e:c2:65:b4:bc:
         d9:81:52:32:b6:82:bc:7f:85:3e:0a:8c:d2:7a:64:34:f2:ee:
         4e:bd:f7:e8:e1:62:c5:28:6e:01:9f:07:fd:d8:51:b5:16:1a:
         bc:4e:d8:b1:92:68:b7:ac:08:77:d2:0c:82:3a:ea:eb:01:14:
         e3:d3:17:67:b4:71:dc:db:59:b3:31:72:8e:d4:44:43:75:3b:
         5e:0f:ad:3d:60:22:6d:8f:30:65:a9:a6:b1:b8:ac:2d:58:b0:
         22:ac:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:09:21 2024 by rpki-client on console-fra.rpki-client.org