Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File:                     bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier:          jW5ul3/j9QF3hvOokivBVq2NhyhnwATFQq2FFiTvrVI=
Subject key identifier:   D8:1F:AA:D9:CC:02:B3:96:EC:A1:0C:1F:91:14:CB:68:77:10:DA:D6
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer:       /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial:       018F8748F48C24FBCC58A0821EEE9315AA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number:          025C
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: GBMA-Y7Cxj9sD_7D8A0gnnfSSxI.roa (hash: K/AZmHYm2K+yY2RwT+f2yL8eUPn7mXpnSjchIqjh6Xw=)
                          2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: +6nPR7VBJVNHV1whrpKRB1z/YDfV3UOUnHrvjLWyYxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f4:8c:24:fb:cc:58:a0:82:1e:ee:93:15:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=d81faad9cc02b396eca10c1f9114cb687710dad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:ec:c9:81:a0:64:f1:b9:3e:be:80:0c:88:
                    c8:be:cf:18:0d:a6:31:33:57:55:8b:27:26:e5:4e:
                    39:c6:09:67:19:0d:fd:1d:93:69:77:af:39:3e:99:
                    6b:b7:9e:b4:16:1c:8a:a8:36:3b:b8:94:89:59:3f:
                    a7:09:e5:5d:4d:ae:4b:66:4d:7d:11:2f:3a:c3:21:
                    f7:51:a1:5a:e4:a4:b5:f4:d0:86:e1:77:77:5a:00:
                    7c:03:9f:66:06:9a:5e:9f:ca:a4:f2:03:43:e7:48:
                    e5:6f:ac:dd:39:cc:25:02:5b:61:ec:20:7d:81:22:
                    ba:db:7c:05:3c:f0:f0:4b:8f:22:17:b2:a2:91:11:
                    0b:27:e5:1a:fa:04:2d:39:04:11:06:b6:ed:89:69:
                    73:67:b7:f1:12:dd:c6:97:27:59:ef:11:89:2f:9e:
                    a8:a8:6f:44:d9:2e:54:04:84:0b:bc:ed:9c:50:2f:
                    8a:d7:8f:56:eb:df:60:6a:05:0c:78:90:9a:29:5c:
                    84:11:c7:41:75:cd:29:6f:d4:b0:a8:e3:1b:ee:e0:
                    30:4a:24:7c:1d:e4:a2:45:be:3a:e3:cf:78:0d:a7:
                    fa:2a:ff:53:35:34:34:78:31:d8:e7:1a:5d:41:f9:
                    26:5b:dc:8b:b9:a2:76:b7:7b:05:29:fc:9f:d7:b5:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:AA:D9:CC:02:B3:96:EC:A1:0C:1F:91:14:CB:68:77:10:DA:D6
            X509v3 Authority Key Identifier:
                keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:51:24:bc:17:97:5e:82:9d:5f:ea:86:3c:51:ad:fa:17:
         96:6c:bd:ed:f0:c3:d6:bf:de:b8:cb:02:9c:67:ef:b5:10:5f:
         cc:72:a7:dd:cb:2a:8d:a4:29:ad:90:13:d4:12:8b:47:a3:d2:
         dc:fd:ca:6e:4c:cc:e0:d4:23:ca:ce:85:15:4a:96:f3:1d:d5:
         b6:42:c8:de:56:10:9c:82:5f:13:b9:15:86:91:b3:9c:74:b9:
         75:94:e4:7d:97:eb:6d:c0:2e:30:03:ff:1e:71:58:9c:c8:e1:
         85:a6:ea:e8:1d:2f:77:25:f0:3c:4f:8d:8a:d6:8d:78:33:64:
         82:2d:ac:64:16:6c:42:c2:43:55:4f:e3:88:73:bc:0c:84:12:
         92:ca:29:b9:1c:e1:af:b4:ca:17:00:0f:bd:c9:2a:58:77:d1:
         73:7d:11:09:b1:dc:be:e0:01:c8:4e:a0:f4:df:92:01:df:b9:
         c7:e9:54:e0:90:6a:7e:ce:30:c2:52:54:08:e8:49:ca:f3:75:
         8b:ad:97:1e:86:5e:64:73:3a:fd:1c:44:2b:29:a2:25:02:1a:
         a9:c3:fc:01:8d:81:7e:68:6b:65:95:f2:f4:48:37:f8:c1:7f:
         4b:4c:6d:76:c1:72:11:46:25:83:4e:63:0f:04:d5:6f:a3:40:
         9a:c4:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:28 2024 by rpki-client on console-fra.rpki-client.org