Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File:                     Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier:          VlMHsz0uYE7eU5FHxqWFSZCHF1kID+BOR7DN2wh0tuI=
Subject key identifier:   1D:8F:83:3B:27:3E:2B:62:8D:D3:47:0B:9A:53:46:81:22:E4:89:D3
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer:       /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial:       01901BFF4E55831404F2D1D049530C6331DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number:          0D1E
Signing time:             Sat 15 Jun 2024 13:03:54 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:54 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:54 +0000
Files and hashes:         1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: agi9TBjjyo+7Gun2OPaG8L2nvZ+fsS8gGtdRY08j6LU=)
                          2: F3kS18l0pn9yKvNkimcdfBzr8YM.roa (hash: pjnAfW+nKlc8/RHyE/M0iHn43U5wz9lVFbNc68D15fI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:4e:55:83:14:04:f2:d1:d0:49:53:0c:63:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
        Validity
            Not Before: Jun 15 13:03:54 2024 GMT
            Not After : Jun 16 13:03:54 2024 GMT
        Subject: CN=1d8f833b273e2b628dd3470b9a53468122e489d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:7e:82:9d:65:54:0b:89:25:bf:5a:54:ca:
                    77:06:cb:c2:d5:07:c7:fe:1a:24:bb:7e:5f:c9:05:
                    21:81:5b:ff:70:09:34:e5:48:20:1f:34:ea:9e:16:
                    f8:33:78:3a:b7:b5:c8:49:44:98:d5:2c:cc:4d:1e:
                    47:2e:ab:d4:41:6c:8a:f7:0d:5a:d8:35:19:7b:54:
                    be:a1:b2:73:f2:fc:c2:b7:87:7e:5e:b4:ec:3f:68:
                    16:a2:0b:f9:e6:15:77:02:a0:f3:c5:ca:44:92:b0:
                    16:be:f1:f0:7e:4e:dd:8c:c5:eb:82:6e:58:18:7c:
                    ed:45:77:c6:95:af:0e:3a:62:30:9e:fd:9c:6f:40:
                    94:6b:0b:01:51:2a:32:01:cd:84:66:06:88:e2:5c:
                    61:33:3a:e8:cc:3f:91:8a:17:6b:96:0a:7b:b1:51:
                    75:fb:2b:fa:ab:9a:13:3c:3e:6b:3e:3c:82:9d:8c:
                    f2:22:ab:fa:83:58:94:f8:0d:b9:c2:35:6d:29:ad:
                    7f:2d:ea:00:25:02:70:69:b7:0d:94:9d:75:9a:52:
                    4e:b1:23:96:26:dc:6e:20:35:fe:6a:a6:2e:c4:e6:
                    20:2c:94:28:2d:e9:1f:23:43:59:f7:cf:ba:81:9c:
                    b9:66:67:af:6a:5b:f5:b7:52:be:b5:dc:5d:78:5a:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8F:83:3B:27:3E:2B:62:8D:D3:47:0B:9A:53:46:81:22:E4:89:D3
            X509v3 Authority Key Identifier:
                keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:59:99:19:93:2a:61:44:29:8e:99:12:06:c0:45:a2:bb:
         b7:63:b5:7b:70:ce:94:3a:f7:ee:e4:6e:09:2d:82:dc:fe:15:
         5e:8f:50:c1:36:67:c7:76:b0:61:6b:8c:31:8b:b1:9a:10:51:
         d4:ef:99:a1:4e:d2:49:2d:3f:60:05:6c:74:f0:df:fc:40:6e:
         e2:72:6d:7e:82:78:2c:5b:5a:7a:96:ae:a4:3f:51:8d:aa:8c:
         84:5d:48:0a:57:1d:35:cb:a7:c5:03:0a:a9:1e:cf:0e:a9:2b:
         1a:ae:89:d1:3f:a1:f9:fa:64:06:84:e1:65:8b:47:5a:96:87:
         f5:dd:bb:e1:c6:ed:07:bf:fc:be:88:45:96:f7:4f:ce:9e:77:
         d3:bf:e4:3e:f3:20:d4:2b:26:1e:f9:00:58:c2:60:74:f1:16:
         8f:93:42:69:f4:f6:12:29:4a:d1:13:11:6e:7e:b9:44:cc:66:
         b1:c3:24:01:5a:e3:fc:4b:8b:b1:3d:0f:5e:a1:e9:25:97:77:
         d9:f7:1a:7a:6d:95:f9:fa:49:4e:22:93:01:1f:24:52:b1:16:
         a0:50:1d:12:08:8f:f6:a5:e0:e8:32:b9:59:10:85:f0:e0:3e:
         5f:37:78:fc:d9:9b:39:b5:10:c0:ff:e6:18:0f:4e:4a:c3:5a:
         aa:30:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:39:14 2024 by rpki-client on console-fra.rpki-client.org