Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
File:                     bgE5p90AvHR-C-c-5yiIC4FVAIU.mft (raw, json)
Hash identifier:          6itQlj6sxad+u4Oy9LsvBzf7bhVD5lP0oKfZHb2tve0=
Subject key identifier:   5A:EE:AF:AA:79:40:8A:5D:90:17:C0:39:6C:62:88:32:C0:6B:6C:BD
Authority key identifier: 6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85
Certificate issuer:       /CN=6e0139a7dd00bc747e0be73ee728880b81550085
Certificate serial:       0190459D0DE110F7F0A204C445B09710A11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
Manifest number:          0170
Signing time:             Sun 23 Jun 2024 15:00:38 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:38 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:38 +0000
Files and hashes:         1: bgE5p90AvHR-C-c-5yiIC4FVAIU.crl (hash: O5cW6q2JPnH30JgCoAs1tnb2/DkayfjceeLb/N5fhp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:0d:e1:10:f7:f0:a2:04:c4:45:b0:97:10:a1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0139a7dd00bc747e0be73ee728880b81550085
        Validity
            Not Before: Jun 23 15:00:38 2024 GMT
            Not After : Jun 24 15:00:38 2024 GMT
        Subject: CN=5aeeafaa79408a5d9017c0396c628832c06b6cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:8b:bf:e5:e2:b9:c7:ef:36:f6:31:46:2e:
                    13:5d:55:4f:8a:a3:f2:5c:73:03:1b:13:c6:7d:9d:
                    80:56:02:c6:6b:d9:5d:29:06:d6:24:98:9e:a6:26:
                    ec:ee:e2:a2:3c:59:e1:88:91:7a:a0:bd:33:37:de:
                    fd:07:58:48:65:3e:11:83:5e:c1:55:5c:94:83:d7:
                    ba:ee:c8:de:22:07:ef:cc:91:37:0e:b8:6b:15:f2:
                    46:2d:15:8a:b3:c5:95:d6:48:b6:7f:ba:cb:9a:00:
                    1d:db:c4:ec:35:63:aa:35:0e:c8:a4:c7:5b:18:23:
                    ba:5e:20:bf:71:65:3a:d4:74:fd:21:1b:d8:94:08:
                    7f:b7:b1:c1:7e:5c:39:1c:db:6b:53:05:94:b9:13:
                    9f:ae:0c:c7:76:bd:2c:3f:29:1e:e0:7f:95:af:89:
                    d2:99:bf:a9:f2:1f:a5:d4:e4:27:99:89:87:ab:a2:
                    96:9a:7a:cb:3c:23:f2:80:65:e9:77:a0:c0:b2:f5:
                    02:0a:f6:58:8b:fa:14:6b:9b:57:da:44:3f:da:fd:
                    3e:fc:be:44:d8:84:11:87:1f:30:30:30:86:08:40:
                    17:1c:60:00:1c:c1:e9:45:6f:76:b7:b4:15:8b:1a:
                    0d:bf:bf:e2:ac:9b:ad:66:12:98:7c:b4:6b:a5:98:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EE:AF:AA:79:40:8A:5D:90:17:C0:39:6C:62:88:32:C0:6B:6C:BD
            X509v3 Authority Key Identifier:
                keyid:6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:b8:b0:3e:f7:66:f6:14:b4:90:54:6e:05:b5:6d:00:5c:
         4b:cc:58:5d:08:a8:8d:3c:77:bb:ac:8f:a9:59:5a:c7:48:c4:
         e4:a6:57:15:7c:d1:47:f7:89:a9:ac:6b:65:37:49:f3:ac:bf:
         f2:6b:ae:70:f0:04:2f:fe:33:81:ea:4d:ef:a8:c2:f4:37:d7:
         42:f5:58:c2:3e:e4:de:4f:d3:51:57:fb:62:85:e4:b7:36:44:
         19:0d:38:f5:3c:33:a5:d2:b8:21:62:2d:07:25:56:8e:93:46:
         ba:f3:c7:33:af:19:90:94:04:f0:2d:55:89:24:38:90:48:8d:
         81:25:42:1e:b6:b1:a9:7d:c9:7a:6f:a4:a7:e2:33:d2:4d:87:
         a6:45:9f:87:23:f4:3a:f8:70:44:f1:17:0e:ea:e6:93:10:37:
         75:f4:37:99:a1:fe:00:d9:05:65:ba:4a:d8:5e:92:81:71:72:
         78:cb:d3:e0:6c:9b:97:22:67:03:ad:34:8f:5f:7a:0a:6d:d6:
         73:92:e3:48:87:6a:73:04:34:19:51:48:2d:19:cc:8e:c0:b4:
         ce:4b:df:75:2b:51:8e:6b:a1:30:1e:c7:95:62:b7:58:bc:d4:
         8f:2a:3b:94:36:bf:82:18:74:63:7f:81:55:61:2a:e2:fc:60:
         bb:de:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:54 2024 by rpki-client on console-fra.rpki-client.org