Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
File:                     BH711r0-NZQmnLpEKzqNOhTF33A.mft (raw, json)
Hash identifier:          5MPW7Hj1Oxe2TiBJBgJ+F7itzYBS7iahJJu7O3lTY/A=
Subject key identifier:   8E:DC:CE:1B:CF:83:36:12:AC:60:84:E4:FE:FA:F9:8F:5E:8D:AA:C3
Authority key identifier: 04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
Certificate issuer:       /CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Certificate serial:       0193587941B80D5A559D94020027CB9B6B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
Manifest number:          12C0
Signing time:             Sat 23 Nov 2024 10:02:41 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:41 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:41 +0000
Files and hashes:         1: BH711r0-NZQmnLpEKzqNOhTF33A.crl (hash: sJyhBDete9Wt7NiCQ0sWviO6VjpN9gvV8vhMRvZfGkE=)
                          2: kKj0VKByUCq12myDYmzc4K7-L-Y.roa (hash: zK7IcUbZVuLwbXCzmTAMFe98QoYxSmpSTXDCsVL74PQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:41:b8:0d:5a:55:9d:94:02:00:27:cb:9b:6b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
        Validity
            Not Before: Nov 23 10:02:41 2024 GMT
            Not After : Nov 24 10:02:41 2024 GMT
        Subject: CN=8edcce1bcf833612ac6084e4fefaf98f5e8daac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:fa:49:9d:26:05:06:79:52:1c:c6:cf:d7:
                    c9:b7:4e:b9:93:18:e5:a5:c5:52:90:f1:91:e3:30:
                    cd:37:09:b8:8d:0d:83:15:86:a0:95:3c:8a:6d:aa:
                    11:cb:71:a0:4f:d2:75:f4:d4:d1:47:39:ed:5e:94:
                    4f:d4:48:3f:4c:c7:d9:33:02:65:91:20:6b:de:c6:
                    83:53:f6:7e:08:d9:c3:90:08:b7:82:34:83:b3:02:
                    52:ce:1c:be:cd:a4:62:25:bc:e3:4a:62:71:3e:38:
                    e0:de:8a:46:b2:42:34:06:26:36:b6:42:ac:80:f1:
                    f1:f9:fb:e5:64:8c:96:07:4d:ce:51:6d:35:c2:36:
                    0b:ad:05:18:5f:3d:8a:28:5e:43:2e:15:ad:26:19:
                    77:6e:8c:eb:bd:16:56:50:2e:61:85:a2:05:9c:a3:
                    1f:95:c2:f1:fd:b0:c6:05:9d:6b:9b:9d:e6:47:8c:
                    f6:76:a4:c7:84:32:22:84:0c:c2:a8:42:a3:08:64:
                    96:d5:cf:3b:40:aa:5d:ad:e8:94:93:0c:5e:5a:c8:
                    f1:bb:4d:fb:59:c3:52:bc:d6:74:e3:f6:f7:bb:ce:
                    7e:35:17:81:7c:7f:3f:65:6e:1f:09:3b:49:56:bf:
                    b1:8b:d7:28:99:69:c1:1c:1b:2a:91:6e:7a:62:c6:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DC:CE:1B:CF:83:36:12:AC:60:84:E4:FE:FA:F9:8F:5E:8D:AA:C3
            X509v3 Authority Key Identifier:
                keyid:04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:33:7d:f8:7c:59:c6:87:5a:88:d9:bf:30:c4:89:62:19:
         93:28:f0:75:6c:b6:a6:04:8e:a5:5b:44:0a:13:2a:19:ad:6e:
         f3:b1:8e:04:10:e8:c7:0a:b1:aa:be:c2:37:bd:09:f8:e5:8f:
         19:42:00:6d:8c:2f:97:dd:fd:db:33:87:b7:a9:8f:cf:be:fb:
         11:0f:48:58:65:bf:46:2a:e5:4f:b4:57:f3:ab:3b:b1:44:c3:
         81:ce:ab:b2:d9:9c:db:d4:7d:e1:36:8f:87:93:67:06:a3:35:
         bc:91:17:b6:8a:e3:18:7f:15:fa:fa:82:3d:e5:7e:47:65:d0:
         0f:1c:fb:09:c5:f0:4c:8a:7b:b0:34:f6:55:91:a0:7e:43:19:
         22:f4:4a:35:b5:21:10:b4:ca:44:25:a5:7e:26:0c:eb:8f:bd:
         fd:cf:0d:52:34:b8:a1:20:b7:02:af:0a:2e:60:6d:ef:ef:a6:
         c1:9d:e2:3d:6a:19:88:e5:a5:e0:76:8c:64:62:7b:26:ac:f0:
         49:0d:75:fe:b2:22:aa:04:6e:08:d9:65:97:0d:af:52:0e:78:
         e3:84:af:15:53:fe:da:88:6b:7c:66:90:d5:7f:6f:8a:04:2d:
         65:4e:1d:59:19:4e:c6:65:bd:d2:59:c3:ac:a2:0c:2d:b1:19:
         f2:48:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:00 2024 by rpki-client on console-ams.rpki-client.org