Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          ODHsPdDmHJUvBi7qelZSEXAo8814e2J+anp1W6+l3Eg=
Subject key identifier:   26:C6:AD:1E:DD:E4:E1:C0:38:74:4C:3F:81:45:2C:10:BC:74:4E:12
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       0195124797BF14CDFAF197D42AC524E63C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1458
Signing time:             Mon 17 Feb 2025 05:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:36 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: n5EX2RhUVIGzlgAmQ7FmZdiVG1SJQMeP8WJvOcDpmI0=)
                          2: oGJ3VwT7Kor9HUj6Ls93pR91zps.roa (hash: aLxAJ/2BMqLJ72HUFwwNF6sObyfI6ewUQ19ZgSavYnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:97:bf:14:cd:fa:f1:97:d4:2a:c5:24:e6:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: Feb 17 05:00:36 2025 GMT
            Not After : Feb 18 05:00:36 2025 GMT
        Subject: CN=26c6ad1edde4e1c038744c3f81452c10bc744e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:86:a3:df:84:9d:c2:b7:7b:7e:b7:a9:eb:
                    f4:d1:bd:87:a5:cc:c7:11:e6:4e:0b:a6:3f:dd:fa:
                    45:25:8b:b5:d3:35:16:ab:1a:41:e1:07:77:c7:67:
                    59:62:f5:27:d7:9e:2e:12:3d:83:bc:e8:c8:e8:cb:
                    ca:90:43:fd:ec:03:b1:0e:93:a1:fb:04:73:d5:dc:
                    31:7b:fd:9d:75:85:10:f3:24:6c:57:30:0e:90:0c:
                    0f:e7:45:21:de:58:53:f9:a0:2d:4b:9d:e8:a4:37:
                    cf:21:6d:dd:46:3e:20:96:98:18:32:1b:e1:a7:8d:
                    f8:56:07:24:16:40:ef:5b:7c:88:db:c8:d2:8c:d4:
                    c2:12:4e:25:57:66:f7:12:60:bd:34:24:e0:f3:88:
                    1f:04:5f:5c:49:41:f2:bb:42:01:2f:e6:2f:61:65:
                    98:fe:e3:c8:8e:ef:21:20:f7:77:c7:46:11:bb:eb:
                    6f:26:aa:de:de:f3:29:99:80:5a:cb:29:40:ce:ee:
                    42:52:5c:d7:a6:9c:bf:3a:e4:b1:1b:19:01:66:60:
                    1a:de:d4:13:37:91:b4:95:2a:af:1a:45:b0:20:e7:
                    aa:6a:3c:d8:9e:ea:1a:51:67:7d:67:59:d2:4e:be:
                    5c:35:13:e0:e7:ea:40:a0:36:8f:ea:a9:5d:c3:89:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C6:AD:1E:DD:E4:E1:C0:38:74:4C:3F:81:45:2C:10:BC:74:4E:12
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:a0:0d:b5:b1:08:ad:58:52:56:f4:90:d7:65:cf:06:09:
         f4:d2:bb:b0:c0:c2:e9:1a:68:6d:4e:b1:39:4f:df:23:dd:d5:
         79:29:3e:6e:c0:f5:58:db:51:f6:e0:3d:83:f6:01:0a:f4:0b:
         db:5d:c8:f2:88:97:50:27:22:1c:1f:51:c9:c7:37:d7:d8:8e:
         67:a2:98:9a:ad:7b:e3:f6:46:49:ab:8e:d0:b0:52:10:0c:9a:
         a6:e7:c9:3c:c2:81:d4:62:0b:da:60:e9:ff:0d:5e:11:7c:33:
         f2:64:96:e3:1a:f2:b0:f4:01:02:ae:30:68:73:c0:08:dd:b2:
         23:b0:7c:91:96:50:09:ca:9f:12:f3:59:35:a5:3a:45:20:af:
         d9:da:ea:39:51:39:42:39:49:47:9e:78:d6:d5:28:86:00:cc:
         77:eb:0a:6f:80:31:94:c0:5f:a1:ac:b3:70:16:de:70:52:55:
         98:2b:c9:0c:3f:44:bf:cb:a9:7f:d2:37:59:0b:b2:95:3f:37:
         60:0a:7d:e3:54:ef:5f:d1:11:55:39:7f:50:b3:c6:95:90:7f:
         05:84:d5:07:86:4a:62:98:03:69:0f:60:83:fd:13:d4:58:69:
         74:90:98:54:e3:b4:13:fa:6a:f4:f8:f2:f3:9b:6e:9e:85:07:
         a3:1a:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:10 2025 by rpki-client