Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File:                     bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier:          IZE3H74Jn+qtW2F9YrMugTEJJgKHIhkvU6t5VGU73Yo=
Subject key identifier:   1B:07:B6:49:E5:EC:58:29:FA:7A:1E:0C:27:C1:11:29:2B:B0:15:3C
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer:       /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial:       01901E21BB58DEC822A8A34516AA07885206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number:          0112
Signing time:             Sat 15 Jun 2024 23:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:45 +0000
Files and hashes:         1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: Z/UIDyLLAsW4fo80QuzmqpD65rnjk/NXKb5yhceOf+U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:bb:58:de:c8:22:a8:a3:45:16:aa:07:88:52:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
        Validity
            Not Before: Jun 15 23:00:45 2024 GMT
            Not After : Jun 16 23:00:45 2024 GMT
        Subject: CN=1b07b649e5ec5829fa7a1e0c27c111292bb0153c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:f0:2f:5c:dc:9a:dc:ec:d7:81:4b:ee:88:
                    21:18:71:c7:b5:d5:c6:12:51:f7:02:5e:91:29:4a:
                    1e:69:6a:ff:3a:bc:6e:f9:72:f2:1a:b0:8d:76:84:
                    c6:98:16:61:e2:8e:63:47:bc:47:51:a6:7a:b4:0c:
                    cc:89:67:68:fb:a9:14:f8:98:0f:15:d6:1a:b8:aa:
                    7f:d9:9a:0c:f4:19:cb:87:ec:64:8f:f6:4c:31:6b:
                    db:17:76:20:62:fd:91:2d:04:c6:c5:0d:6a:97:12:
                    12:99:5d:eb:93:91:c5:cc:8d:bd:c5:bf:21:17:2c:
                    f5:1a:55:f2:ef:01:05:04:f9:33:e2:5f:c5:6d:b6:
                    05:93:f8:55:f3:f1:92:22:9f:9e:ed:8a:c6:32:b1:
                    d1:7d:7c:03:f5:52:7c:6f:06:bf:0a:5c:f3:ef:b7:
                    0b:a4:b7:91:15:72:ec:b1:c7:df:92:b0:20:79:a1:
                    8b:a3:75:63:2a:ff:7f:76:41:e4:0f:71:72:bb:3c:
                    0f:17:34:71:10:cd:ed:c3:a2:f0:2a:00:0e:43:15:
                    d5:67:ae:f4:30:5d:73:f9:25:04:54:cf:80:92:3a:
                    28:8e:bc:44:a1:8b:e5:4e:44:c6:67:32:a7:21:10:
                    0d:36:c1:41:d1:96:49:dd:a8:f9:21:b4:95:c3:a1:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:B6:49:E5:EC:58:29:FA:7A:1E:0C:27:C1:11:29:2B:B0:15:3C
            X509v3 Authority Key Identifier:
                keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:34:46:11:b7:39:26:cc:d2:00:04:96:49:0c:c5:dd:46:
         fa:a3:0a:85:70:54:05:4c:b0:92:0a:59:29:a5:09:35:03:98:
         8f:db:be:74:36:44:9d:bb:62:5c:1d:e2:be:cc:cf:9c:12:33:
         02:67:e1:bf:ae:1c:62:d1:9f:bb:35:9a:c6:ed:fa:0d:02:2a:
         3d:66:1c:30:3d:53:94:10:21:3f:e4:c8:3b:95:34:66:16:96:
         e9:0c:9a:3a:80:d7:50:fe:d4:22:05:ec:03:b0:66:45:84:d3:
         51:03:1d:ba:f1:7a:4b:1a:4f:4c:6a:62:dd:cc:60:68:26:cb:
         8f:90:3f:bc:0a:8b:9f:c3:c7:68:e0:dd:d2:98:42:5c:1a:a8:
         55:1a:88:be:d9:f0:fb:a6:8c:f8:38:da:75:fb:fe:34:77:14:
         95:7d:3a:97:9c:bc:c2:b9:24:a0:aa:28:7f:29:e4:8f:55:70:
         60:d7:85:9b:b4:35:0a:c5:24:da:c2:37:69:5b:8c:43:c3:37:
         b5:8d:cd:3c:6f:cf:44:7d:5a:76:72:10:cc:ff:b5:b4:3f:f2:
         b1:dd:62:2e:58:e4:f6:81:f7:71:a5:9c:57:39:7f:29:17:2d:
         cc:ed:71:eb:9a:58:e2:ff:de:5d:70:56:15:dc:a8:fd:ac:2e:
         07:88:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:31 2024 by rpki-client on console-ams.rpki-client.org