Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File:                     CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier:          TE6NRci0o4S5BsYfsIfASZY2848p0wEZY0wh8VBhVtM=
Subject key identifier:   B2:81:03:61:8C:BD:01:F3:A6:CC:7D:82:38:6F:F1:A4:92:C9:AF:2A
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer:       /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial:       018F3BFB09F56C127511376444D040CD0EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 01:04:18 +0000
Manifest this update:     Fri 03 May 2024 01:04:18 +0000
Manifest next update:     Sat 04 May 2024 01:04:18 +0000
Files and hashes:         1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: t3fJYTtHkeATDVQIfEUMEyZc3E7pHBydYVniZ2qBIBM=)
                          2: iMMH1Fgw9EttOFfxgbHxGk2m0Bg.roa (hash: mY2YPs4rCSz69TeCgeSjqpo/A4eB0i+BtIFSmaMNwyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fb:09:f5:6c:12:75:11:37:64:44:d0:40:cd:0e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
        Validity
            Not Before: May  3 01:04:18 2024 GMT
            Not After : May  4 01:04:18 2024 GMT
        Subject: CN=b28103618cbd01f3a6cc7d82386ff1a492c9af2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:d4:d0:eb:82:9f:3b:52:bb:3f:47:be:eb:
                    d9:48:79:3c:d5:ec:6a:bc:a9:0e:b7:3e:67:47:23:
                    cd:c8:7c:8b:66:6c:68:66:0a:fc:07:35:74:74:4d:
                    e1:f0:0d:86:ac:b1:c0:eb:42:9b:c1:99:90:f5:d8:
                    26:0e:a7:84:1e:85:e2:35:a2:59:21:be:aa:f0:78:
                    58:bb:35:86:aa:93:63:db:9e:ec:40:35:f7:88:2f:
                    c1:f7:dc:7d:19:51:f8:a6:c6:6f:d0:f2:d9:3a:21:
                    6f:4d:a5:84:48:64:1e:e1:6a:3e:69:d1:13:ae:2f:
                    2a:d9:6f:ea:c8:5a:0f:d6:5c:18:b0:78:f2:da:83:
                    22:4b:9d:0b:54:89:3e:a2:6c:60:56:a4:6f:f6:09:
                    7d:fc:ed:83:23:6a:da:f4:3b:9e:6b:3f:0d:1a:9f:
                    d4:2e:8a:83:0a:6f:2b:9a:ec:54:b1:94:99:32:57:
                    a9:d9:63:34:f1:e4:f4:37:33:b2:fd:a7:36:38:21:
                    39:c6:4b:14:3d:15:cf:94:dd:21:4d:db:c1:27:fd:
                    26:75:e2:98:af:4b:a1:ca:c6:ea:9a:e7:83:ef:55:
                    f1:2c:cb:69:0c:a7:a8:4b:4e:95:a6:d0:6a:e9:7d:
                    58:dc:b9:29:5f:58:b6:ff:50:7d:3c:a1:58:e7:16:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:03:61:8C:BD:01:F3:A6:CC:7D:82:38:6F:F1:A4:92:C9:AF:2A
            X509v3 Authority Key Identifier:
                keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:c3:7f:4d:dd:9f:81:3f:2a:b2:aa:1b:7d:0d:dc:32:be:
         ee:e5:69:3f:cc:58:6d:19:fd:1f:97:d1:a7:44:55:7b:57:9e:
         15:b9:cd:4d:a4:fa:63:02:47:26:cc:87:61:3c:8d:0f:2b:09:
         4e:56:78:0d:e4:a7:84:ad:5a:c3:0e:d6:02:6e:5c:59:fe:a1:
         d6:cc:f4:df:59:13:b3:a1:5b:fa:ca:39:62:0f:50:27:8a:45:
         b9:b3:4e:b3:41:b8:21:5d:55:66:72:1c:61:d9:03:f6:f7:59:
         ae:3e:d3:4f:c0:79:45:a7:06:71:f5:87:77:16:18:fa:4f:25:
         9c:c0:d2:1e:c1:0d:ac:cd:b5:5c:54:e2:c6:c3:95:29:7b:3f:
         c0:71:e0:db:08:0b:52:5e:b5:ec:42:63:f4:a2:5f:af:a8:95:
         60:a9:65:4a:f4:42:7f:30:a0:de:28:8c:ca:77:ec:36:ef:6b:
         2f:c7:b5:21:e2:f4:fe:0e:1c:26:f3:a2:d0:8e:47:74:f1:55:
         8d:2d:a4:5c:3e:22:57:04:f1:3a:66:df:c2:90:c9:a7:ad:21:
         f6:4f:34:b4:92:51:27:92:2f:d0:29:f5:0f:7b:d7:96:7e:01:
         e7:03:bd:27:5a:23:3d:55:7c:94:aa:7d:a2:6c:94:01:f0:0d:
         5a:c5:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:49:59 2024 by rpki-client on console-fra.rpki-client.org