Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File:                     BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier:          2SaF+rExiKC+ur5rO0udNXZltuZT9gjRBoQ1a0zngNg=
Subject key identifier:   E5:1A:0E:A5:94:3A:36:DE:42:43:E3:6B:8F:30:37:8E:B6:F2:EA:1A
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer:       /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial:       019405A1931A581404835B3E2F1D4F2F0AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number:          8E
Signing time:             Fri 27 Dec 2024 01:01:02 +0000
Manifest this update:     Fri 27 Dec 2024 01:01:02 +0000
Manifest next update:     Sat 28 Dec 2024 01:01:02 +0000
Files and hashes:         1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: oIfB5y/3lOwiuKNR4zwS3XeC4Pyj5G7MHd+j6y6C9BY=)
                          2: L3-FAk-oPFOzcoZ4Ie6SSGRmSsE.roa (hash: 2mlXgKlK+WYv/DjwaTOjuQPO1+kUe/Sdd6N5P1KnBBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:93:1a:58:14:04:83:5b:3e:2f:1d:4f:2f:0a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
        Validity
            Not Before: Dec 27 01:01:02 2024 GMT
            Not After : Dec 28 01:01:02 2024 GMT
        Subject: CN=e51a0ea5943a36de4243e36b8f30378eb6f2ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:00:15:67:01:b1:c2:c2:7d:ad:b4:bf:bb:
                    5b:ca:fc:c0:d2:44:7d:d8:f1:82:f2:92:1a:e0:88:
                    64:b1:f9:00:30:54:ee:2c:a4:78:10:fb:33:55:4e:
                    ea:cb:72:26:9d:bc:19:b2:cf:67:80:3e:c2:e0:dc:
                    3d:0a:2d:6a:fe:5a:c6:2f:6d:16:f3:89:42:c0:43:
                    a8:71:12:a6:02:e6:e0:f1:d0:b3:90:18:46:87:51:
                    0e:45:a7:3d:7d:9d:39:e4:8f:0c:c5:84:89:35:cb:
                    71:c8:eb:a5:ce:77:b3:ec:d8:79:40:cf:f0:32:5f:
                    1e:ff:54:23:17:a8:1d:cd:fd:ea:c3:35:56:5d:f9:
                    91:71:ba:b2:64:91:10:05:ac:79:36:ed:18:66:72:
                    9e:18:97:85:46:80:49:5b:f2:e1:31:4f:b5:62:5a:
                    53:f0:3a:af:55:ae:cb:79:40:ac:cd:39:63:9d:08:
                    f5:48:d4:70:14:fb:76:e0:46:ea:e6:23:18:90:b4:
                    cd:ae:64:4a:1f:62:05:2d:01:3f:b4:9d:3d:2a:c5:
                    bd:99:dd:ea:58:ac:70:47:d2:91:b8:f9:62:c1:16:
                    cd:00:97:6c:9b:24:9e:e8:04:de:1e:3e:40:c7:90:
                    ea:61:7a:13:36:c1:75:4d:9f:bb:c2:c5:dd:5f:50:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:0E:A5:94:3A:36:DE:42:43:E3:6B:8F:30:37:8E:B6:F2:EA:1A
            X509v3 Authority Key Identifier:
                keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:82:21:b1:cb:db:d7:95:21:a6:e4:45:a5:d0:0c:92:ee:
         e0:fb:84:31:51:44:8e:c3:3f:81:bb:83:8c:5f:f3:5d:76:b5:
         f1:9a:02:9a:75:70:1a:6c:90:06:01:5f:1c:22:7f:7a:0f:f8:
         e8:67:ae:14:de:4d:88:03:73:df:28:02:67:63:8b:cc:90:bd:
         3c:20:ea:90:f9:51:0d:90:60:4c:0f:cf:a5:17:30:19:cf:e8:
         67:44:f1:0a:6a:93:bd:f9:dc:63:bb:35:59:83:63:f7:62:bf:
         32:18:f2:ca:0a:1c:36:4e:78:09:80:21:f5:9e:d2:d2:4a:34:
         53:cf:1d:89:d8:26:07:cf:a1:d1:38:76:9c:b3:8d:af:16:a0:
         d9:1f:67:9a:53:be:0d:26:5f:07:77:17:35:de:ba:14:e1:14:
         1c:90:5d:12:c8:4f:4d:68:e8:c0:cb:b1:98:60:39:9a:11:66:
         40:1b:21:55:05:cf:ac:48:c7:79:1a:21:2b:da:8d:8e:d5:47:
         2d:c6:03:a3:b5:f7:72:30:27:8d:5d:17:73:1f:f4:a3:0b:c1:
         7b:66:29:e9:e4:59:2c:04:22:50:97:7e:34:77:5f:3a:1a:50:
         69:56:6c:6e:99:7d:c0:54:a0:46:d6:06:60:78:c5:41:32:66:
         dc:c3:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:17 2024 by rpki-client on console-fra.rpki-client.org