Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File:                     bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier:          3DwX+U1o3bfYz5XYeYrysGSSG+Lwe8L9LBfn9fbIMTM=
Subject key identifier:   2A:EF:9A:51:51:F6:50:79:CC:1B:11:92:B8:A8:BA:0D:7A:A0:10:64
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer:       /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial:       018F882484258C4B7E4F88732608396842F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number:          08D8
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: 5ljdkFrFVLC4y0j3SwPp3J+81769lSzcRj0EoZjrmtc=)
                          2: pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa (hash: DdJYW6paQpQK4cKXQJ5nMcNYXG3usbUjvydBmo9sTkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:84:25:8c:4b:7e:4f:88:73:26:08:39:68:42:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=2aef9a5151f65079cc1b1192b8a8ba0d7aa01064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:59:1c:00:20:b6:47:fd:05:10:83:59:e3:
                    b3:58:93:82:d0:f6:c9:49:0d:41:b4:7c:c8:e2:b4:
                    66:a6:76:a4:68:27:1f:d5:4a:a3:29:46:68:82:66:
                    06:24:89:2f:f6:71:72:f0:c5:15:d8:e8:c0:ee:f9:
                    20:5d:07:33:3a:01:5b:c8:13:c0:2d:19:98:aa:87:
                    8b:6e:89:65:55:fe:c1:0d:92:9b:21:0f:15:c0:6e:
                    b9:ab:dd:2a:f3:7e:71:a6:72:24:ce:cc:6d:69:27:
                    14:5a:6d:23:49:c0:62:84:94:54:b2:38:17:c0:b6:
                    80:cc:a4:7e:97:9d:a5:40:56:8a:91:a2:70:90:42:
                    d9:12:d7:18:64:46:1a:80:4e:2d:02:5e:31:5e:39:
                    b1:87:7c:9d:10:a2:49:7d:43:f0:81:34:53:75:1a:
                    2f:c6:71:f2:09:28:56:57:b2:ca:f9:b5:20:3a:0a:
                    e0:16:63:23:78:87:2f:5b:c0:0e:c4:c0:1b:20:4c:
                    17:04:64:4c:d8:2c:5d:af:95:eb:9f:9f:1f:c3:55:
                    ae:66:88:90:6e:82:9a:1e:60:e1:bd:ec:b5:25:e1:
                    71:89:13:5f:e5:f8:97:f4:5b:16:05:4b:cb:1d:e7:
                    20:d1:7e:a3:7c:e7:64:d5:91:67:a9:d8:7d:f6:e8:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:9A:51:51:F6:50:79:CC:1B:11:92:B8:A8:BA:0D:7A:A0:10:64
            X509v3 Authority Key Identifier:
                keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:ea:6d:45:ef:21:7d:3a:93:c8:a0:fb:23:6b:80:48:d0:
         f4:2e:c9:49:e5:3e:e7:92:9e:76:eb:eb:24:95:88:27:57:99:
         7f:74:a3:78:82:89:88:e7:c9:be:61:e1:e0:c5:38:ab:d5:c0:
         62:e1:9e:27:9f:9e:b3:b4:97:ac:bc:85:de:07:57:50:3f:a5:
         cc:5a:63:a4:b0:c0:76:cb:fa:54:91:29:ce:4d:fe:f7:d6:48:
         b1:ff:1f:39:26:01:fa:48:da:b9:93:5b:63:e0:8c:a8:15:c5:
         a8:cb:0d:9e:1f:78:91:33:06:f8:1a:44:19:49:4b:0e:62:6f:
         55:6b:e4:8d:49:33:11:03:bd:2b:29:d5:fe:71:a4:4a:bd:a5:
         15:92:f1:75:3b:2c:d2:2b:17:3e:43:62:4c:c2:64:02:36:17:
         c4:bd:9e:68:15:20:7f:ab:75:48:49:c4:6f:c6:d6:1c:e8:4c:
         61:bd:27:aa:5f:78:30:d8:10:06:15:db:dd:58:46:8f:f1:e5:
         4e:bd:22:10:9e:c3:63:82:b0:21:1b:84:53:2e:83:8a:fe:37:
         5b:04:b9:75:63:aa:10:2a:f0:0a:29:89:41:7e:e6:e6:0a:4c:
         4e:bd:f2:95:20:a7:45:ea:6d:9c:e8:7b:a7:d8:39:46:88:47:
         39:fa:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:15 2024 by rpki-client on console-ams.rpki-client.org