Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File:                     BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier:          wBljibNL0LqiECLbLqRdRSk6+8wma5BUu9LnLSkYDMY=
Subject key identifier:   5B:61:5C:7F:21:47:CC:65:D5:3C:1E:4E:F8:2E:81:DD:A5:C4:88:EA
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer:       /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial:       01901DEB34E139DF798898B6DE4D1CEB6379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:01:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:12 +0000
Files and hashes:         1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: GAs0IRU+f20deHAlGhGAJffoVvAtsdA+agiE6hqjiKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:34:e1:39:df:79:88:98:b6:de:4d:1c:eb:63:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
        Validity
            Not Before: Jun 15 22:01:12 2024 GMT
            Not After : Jun 16 22:01:12 2024 GMT
        Subject: CN=5b615c7f2147cc65d53c1e4ef82e81dda5c488ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:49:b9:73:97:60:ab:a3:36:2a:83:f8:60:
                    37:c0:7b:ca:d1:fb:e8:8c:e6:8d:0a:89:6c:5b:f1:
                    9b:2b:a3:8d:71:6a:15:17:77:2c:d1:50:3c:ee:ec:
                    16:e1:a5:02:f1:a8:61:ef:d5:29:f2:67:ec:31:d2:
                    a7:52:f3:3c:07:70:b3:b8:e8:cb:c6:11:b0:3a:46:
                    b9:65:f6:2b:2f:60:0f:53:1e:77:e6:52:8b:3b:0b:
                    da:10:90:e9:3d:73:7c:17:5f:fc:b2:97:b9:fe:7e:
                    38:d4:df:0c:26:e5:63:5b:41:85:5d:53:6e:3b:0d:
                    9b:cb:50:b1:51:00:e4:ac:5f:09:1f:33:a7:7a:15:
                    35:6d:a1:1a:64:54:48:21:d5:96:08:14:73:c3:d8:
                    fe:cd:23:59:3d:cd:d2:f0:38:49:6c:75:59:77:49:
                    0a:86:9b:4f:d6:4e:6d:f0:c1:eb:ea:53:46:5a:32:
                    fe:ce:e1:6b:f7:60:38:f6:9e:0a:1d:6a:db:72:4b:
                    fe:00:ae:fb:1a:ce:2e:17:66:9b:fc:cd:6d:ef:5f:
                    62:9a:87:56:97:44:19:5a:ce:8f:c7:e7:d4:e1:87:
                    d4:d5:99:e9:40:76:d3:59:8f:e7:b3:e8:07:8f:6d:
                    2c:58:97:cf:a7:8d:66:99:2b:cd:54:07:22:c0:40:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:5C:7F:21:47:CC:65:D5:3C:1E:4E:F8:2E:81:DD:A5:C4:88:EA
            X509v3 Authority Key Identifier:
                keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:fe:a2:c3:a5:f9:e0:15:c3:4e:78:f5:ee:ee:48:7c:1b:
         29:41:4e:2f:9a:23:43:59:c6:98:b0:95:51:32:96:3e:69:c7:
         3f:73:23:13:7d:f8:76:7a:d5:04:7d:26:31:5b:c6:85:21:31:
         94:8b:0d:17:13:1c:30:66:4f:f8:d0:c9:99:60:d2:c6:57:da:
         24:0b:9e:0b:d9:67:6c:c5:6c:ce:15:79:51:a4:e6:15:7a:3d:
         3f:58:4e:34:1a:cd:e6:00:82:9b:5b:7a:99:7e:af:34:36:9e:
         09:9c:91:fa:3d:a4:d9:b4:7e:42:04:62:58:df:05:1d:57:bc:
         14:bb:a8:99:00:03:33:e8:b6:d3:19:7f:c2:b1:c5:c3:7b:3b:
         a6:f3:65:92:df:50:15:70:c8:f0:45:07:2f:cf:83:c2:92:2f:
         17:c3:79:03:81:46:8a:fc:9c:16:50:05:0e:db:e3:6b:3b:80:
         28:b2:f2:6f:92:29:82:25:37:b0:02:99:30:a6:b0:76:d8:78:
         da:9a:a5:68:24:5d:99:7b:cc:4a:32:70:6d:e7:30:1a:08:c2:
         2d:e3:36:9b:51:8e:69:81:63:13:73:8d:63:2d:04:11:d5:62:
         7a:fc:2c:16:a9:09:37:34:f6:2c:0c:4b:c9:9d:01:07:d4:82:
         26:0e:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:28 2024 by rpki-client on console-fra.rpki-client.org