Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          Hw2TRX15Dh8gCv3XA3F3J+zIhVyW2DaowEIHgJjCs90=
Subject key identifier:   5C:80:0F:D7:4E:6D:11:45:77:25:54:F2:2A:F2:62:16:73:71:24:D1
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       01904566A6AF76E2619CB06DC9C30798E833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          0D07
Signing time:             Sun 23 Jun 2024 14:01:13 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:13 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:13 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: PTxR7d7T2gqcMDymzNgZmFvXLG3u+PdzNTGKhDZ46Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:a6:af:76:e2:61:9c:b0:6d:c9:c3:07:98:e8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Jun 23 14:01:13 2024 GMT
            Not After : Jun 24 14:01:13 2024 GMT
        Subject: CN=5c800fd74e6d1145772554f22af26216737124d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:c9:78:fc:0a:59:09:60:7d:41:ef:b7:a4:
                    42:b0:c1:12:96:69:82:b8:99:1d:66:d7:39:87:e9:
                    30:fa:4a:08:0d:97:99:d4:d3:85:e3:a4:1b:2f:36:
                    ec:f6:99:dd:99:8e:55:ac:3b:e5:53:73:e9:12:12:
                    e9:0d:0f:4d:07:9c:82:aa:63:08:35:3e:43:fa:b7:
                    cb:10:a1:26:6d:7b:8d:8c:ef:73:5b:4e:f9:3d:e5:
                    35:29:25:4c:f4:e2:dc:4c:a3:47:db:30:e9:fc:3e:
                    47:22:74:e8:ac:68:eb:32:32:b5:99:85:71:a0:07:
                    9d:e6:2e:aa:f8:62:6a:74:3b:75:4d:5b:c2:b7:27:
                    93:33:ea:8a:fd:f2:8a:c8:08:c9:2c:08:8c:09:8c:
                    77:b6:08:0e:fb:39:df:1c:2e:cb:2c:c8:a6:83:02:
                    20:f2:ec:c0:71:5e:3a:91:61:b7:80:8d:be:15:93:
                    ff:5b:28:0c:0b:0e:e7:43:97:6a:a3:e7:12:df:a4:
                    91:8a:b5:16:a5:db:a3:41:11:36:dc:35:b0:a5:88:
                    13:7e:9f:7e:fc:e9:c3:a1:1a:9b:1d:76:60:e9:8c:
                    10:ea:6f:ea:ef:03:61:ae:db:55:67:4a:0d:a5:b1:
                    a3:3c:55:76:75:c3:da:30:c5:6b:97:a0:f6:79:e4:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:0F:D7:4E:6D:11:45:77:25:54:F2:2A:F2:62:16:73:71:24:D1
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:17:be:5b:d6:67:ec:dd:de:f8:3a:a1:5a:52:32:64:57:
         ee:c8:5c:6c:ee:70:08:65:49:04:2b:df:bb:03:e9:c0:d3:6c:
         72:90:93:8f:b0:54:7f:af:29:73:8d:fa:71:4f:0d:39:13:a6:
         3c:dd:44:07:fe:bd:eb:d2:8f:aa:8e:4b:cb:81:93:4f:9a:7f:
         b1:72:d8:f0:e1:1f:b4:07:97:d2:ad:78:d7:91:08:76:c5:a2:
         e4:5f:35:40:8e:ef:ea:f9:c2:5e:0e:37:0e:3d:9e:c0:30:19:
         90:9c:67:0f:83:04:a5:ab:27:fe:d0:a5:7c:02:0e:80:a6:3c:
         1c:9f:a3:47:65:01:6f:51:96:cd:04:28:a7:76:80:11:2c:f3:
         ca:c2:11:42:1c:e3:f3:df:33:ff:2a:ef:f4:af:ec:79:50:65:
         81:70:29:9c:43:6f:1a:f0:5d:4c:4f:f8:f2:47:a2:e7:4c:89:
         74:37:9d:01:84:8a:80:49:40:91:a1:85:e4:e7:bd:65:1f:66:
         d3:c9:35:a7:c3:ac:89:e6:b1:52:6a:c9:a2:82:3c:f7:da:a5:
         df:7a:bc:dd:57:c7:bf:51:2a:29:8c:3e:a5:f5:5a:d6:27:b3:
         a2:f3:18:1c:e0:cc:ce:e5:59:47:60:46:6b:e6:cb:be:a8:7c:
         92:e5:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:04:00 2024 by rpki-client on console-fra.rpki-client.org