Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          AEimDrK8//+L7mOpB7j9kbcFK5k1JscxKapAalIDR6o=
Subject key identifier:   43:89:AA:F0:98:7C:BA:81:69:A7:13:05:98:ED:FE:B6:26:D4:AE:8C
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       018F28A864E67B1BE43A0BFE7C12B8E58CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          1146
Signing time:             Mon 29 Apr 2024 07:01:15 +0000
Manifest this update:     Mon 29 Apr 2024 07:01:15 +0000
Manifest next update:     Tue 30 Apr 2024 07:01:15 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: sWoMp16qnJ5eEoMdDS4jZ1qZei8zj/0OlnBltMS8lfY=)
                          2: pkB173lf46Vcywp4IZNJSYM0Q94.roa (hash: C4LdIHu2Vr/u9XptkJAavyORWVfOB/KPvuqFlcksPk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:28:a8:64:e6:7b:1b:e4:3a:0b:fe:7c:12:b8:e5:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Apr 29 07:01:15 2024 GMT
            Not After : Apr 30 07:01:15 2024 GMT
        Subject: CN=4389aaf0987cba8169a7130598edfeb626d4ae8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e7:62:eb:da:af:9e:2e:cf:43:7b:0d:20:17:
                    c0:3a:da:2b:7e:21:62:a8:e6:29:18:ee:1a:81:6f:
                    7d:51:82:75:d6:97:cc:a7:87:5a:0e:33:89:84:83:
                    76:65:c1:22:53:d8:f5:70:08:00:01:18:cc:4d:3c:
                    e5:3a:2e:68:e2:be:42:83:2d:2b:6f:f2:c1:b1:20:
                    90:c1:80:bd:b7:58:03:fb:3e:37:41:90:f7:8b:89:
                    cd:dd:79:41:89:ef:9d:b4:b9:bf:c9:a9:30:30:03:
                    1d:78:25:b3:66:db:c6:72:f5:f8:05:f8:38:fb:cb:
                    e8:78:31:a9:e2:fa:82:a0:72:e4:78:91:26:a6:79:
                    13:ea:5d:ba:ca:94:4a:f8:94:bb:c1:c9:6e:b4:2d:
                    dd:b6:65:5b:b7:25:af:6a:ba:5f:54:33:6e:e4:f2:
                    58:5e:1b:a9:b4:4d:bc:5a:35:0d:c9:21:ab:51:59:
                    7d:d0:3c:2a:7c:b0:47:db:51:4d:8c:8e:bf:91:ed:
                    57:56:fb:c3:a9:37:1d:9f:7f:2b:c3:21:2a:e3:96:
                    8e:72:28:03:e0:33:04:6c:d2:db:72:30:5e:6f:6d:
                    7d:8b:42:3f:22:da:43:f3:99:fd:b8:1b:ab:5c:7e:
                    f3:20:cd:37:e8:e4:06:39:bd:33:5b:1c:4c:10:31:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:AA:F0:98:7C:BA:81:69:A7:13:05:98:ED:FE:B6:26:D4:AE:8C
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:58:eb:8b:d5:f6:d0:10:57:1d:03:fd:10:ef:c7:35:e1:84:
         99:f2:65:53:b0:da:73:20:db:a6:94:9f:62:2a:d3:f6:6e:05:
         83:ce:30:a4:f0:8b:8c:ce:b8:73:44:9a:89:e9:f9:6f:01:82:
         ae:70:80:de:d0:e7:30:99:c0:b1:80:aa:ef:0e:2d:5c:57:10:
         cd:f9:e1:d0:4c:dd:95:7c:b6:b4:c5:22:21:a6:93:3b:26:56:
         5e:a4:a1:f3:8b:e0:e4:cd:02:bf:a4:14:d8:16:64:94:dd:44:
         e5:94:3c:a9:70:ff:81:93:21:29:00:26:e7:aa:cb:d0:f1:5e:
         cf:3f:11:b6:c3:79:96:f6:84:6f:fd:1c:80:42:26:16:33:0f:
         cf:cf:0e:fc:ef:a4:2e:3f:f7:de:6b:3b:c5:ed:49:b1:e4:2c:
         9a:08:2c:b3:e5:cf:c8:a2:59:80:ad:81:3c:a4:98:93:28:77:
         47:b4:f5:77:d5:03:b4:a7:6b:4e:4d:a1:4a:d2:ff:d4:9c:a2:
         47:22:6c:78:f2:39:5a:8c:10:6c:50:ad:dc:f5:7f:fe:3e:e8:
         78:d5:61:2f:61:be:5b:d6:c4:0b:06:cb:72:cf:12:fc:6c:70:
         b5:54:d6:fc:88:c6:78:a1:76:55:9e:96:fc:d1:da:da:6b:af:
         86:d4:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:16:00 2024 by rpki-client on console-ams.rpki-client.org