Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
File:                     Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft (raw, json)
Hash identifier:          yFC7TeCuqRyCbFSHs6IXwxqWOV9W1dHpVMzoNE8BFxU=
Subject key identifier:   44:DB:EC:E7:9C:20:83:03:33:6B:32:1D:D2:E8:0A:46:E0:72:4B:D3
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Certificate issuer:       /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial:       018F3B1C6C0A86C8197AFDCB76244DBCFFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 21:01:09 +0000
Manifest this update:     Thu 02 May 2024 21:01:09 +0000
Manifest next update:     Fri 03 May 2024 21:01:09 +0000
Files and hashes:         1: Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl (hash: WfRZefRpQZLozxRFBYRRwU7M7UsU0AUgEkYRPTCGuu4=)
                          2: j1SxRzXgarySvIEZqTpHQzuaQv8.roa (hash: RzLKvap/1voKz42bKx2GIna/AB8b6yu/cxw670uQj+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:6c:0a:86:c8:19:7a:fd:cb:76:24:4d:bc:ff:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
        Validity
            Not Before: May  2 21:01:09 2024 GMT
            Not After : May  3 21:01:09 2024 GMT
        Subject: CN=44dbece79c208303336b321dd2e80a46e0724bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:4f:46:0f:d4:f3:f7:98:b6:ae:8f:66:74:
                    1b:e5:a7:75:9a:0a:6d:f2:62:6e:03:da:e2:09:fc:
                    8f:9a:81:2a:b7:6a:9f:fb:b5:a0:04:dc:aa:73:33:
                    d6:c5:31:6f:7f:21:eb:af:40:59:a4:93:a3:5d:3f:
                    20:da:10:af:f6:73:af:50:6b:9f:2b:72:cf:59:b5:
                    39:36:7b:57:3b:15:40:67:c8:80:3c:27:7a:ee:8c:
                    10:a7:7e:5f:02:fd:45:39:b0:86:9c:27:e1:87:fc:
                    e4:a5:0a:1d:bb:3f:ed:17:77:48:d6:b0:7e:bd:0f:
                    90:39:55:9c:d7:15:04:15:6e:8d:0b:a4:c6:3f:5e:
                    77:9e:00:49:bf:44:7c:e6:2b:ff:0c:73:ca:a3:63:
                    7a:bc:21:c2:96:59:ff:05:79:44:c2:e9:13:61:ae:
                    db:9f:b2:bb:a1:4f:33:1c:25:18:6f:92:e1:cd:fc:
                    a7:14:32:4b:15:fb:a6:df:7f:63:69:9c:56:83:f0:
                    ab:e8:ec:b7:01:59:f0:ea:60:fe:a8:d7:67:22:06:
                    3f:06:61:7d:33:e2:d1:51:ee:4f:4c:8b:9d:3c:76:
                    39:2a:6b:f4:71:b0:5e:f9:a7:c3:50:45:6f:52:c1:
                    f9:ae:9c:75:31:5b:57:f5:62:06:19:75:b5:ea:45:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:EC:E7:9C:20:83:03:33:6B:32:1D:D2:E8:0A:46:E0:72:4B:D3
            X509v3 Authority Key Identifier:
                keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1b:b7:9a:50:36:8a:45:57:44:c5:53:45:d7:13:22:85:21:
         4f:f7:6c:65:df:33:54:4b:fb:9c:5f:c9:11:ed:fb:95:0d:a8:
         c3:e7:62:93:e1:0d:b7:36:32:ab:86:50:84:0e:60:9e:76:ae:
         48:0a:6b:34:14:99:2c:f4:b2:88:c1:6c:f1:ee:42:fd:c0:49:
         f9:93:e7:b5:75:98:57:a9:11:f8:4a:54:54:c9:7d:ce:ec:c9:
         4e:11:59:97:0f:4d:95:27:35:b1:35:15:0e:d0:52:95:7d:d1:
         43:a0:4b:e0:1c:fb:ac:3b:57:31:5c:38:0b:90:34:bf:90:75:
         3a:ec:90:fe:be:86:0e:5d:f6:2e:ff:a7:4b:34:96:4f:19:cf:
         34:ff:e9:ad:39:e2:c8:0d:27:2c:7b:f9:48:7c:a2:23:3b:a4:
         fd:49:9a:14:f9:ec:cf:f1:28:33:31:80:69:5a:ff:1a:18:5f:
         25:28:ca:a7:0e:84:39:cb:c7:4c:b9:89:f9:e5:9e:e4:a3:59:
         74:47:ae:00:47:c7:46:f7:e2:fa:aa:a9:58:61:03:73:de:9c:
         7d:06:85:1b:15:7c:b1:63:db:e7:73:fc:51:6f:b2:f9:9a:65:
         74:12:b0:07:92:2e:59:98:82:eb:45:d1:ea:51:d5:f9:b5:86:
         41:52:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:21:54 2024 by rpki-client on console-fra.rpki-client.org