Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File:                     BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier:          Kad+0uu52y4PkIDaBrLcwmFKuUgpQSxXM25bypWfg4o=
Subject key identifier:   CC:2D:DB:6F:6F:61:B6:81:7B:62:FB:58:60:4A:35:59:E8:E8:D7:65
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer:       /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial:       01901DEC13F49FEDF7FAB6A92A24C79CC241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number:          0BFA
Signing time:             Sat 15 Jun 2024 22:02:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:09 +0000
Files and hashes:         1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: qI0RCduG0px9570mPDaF/t8yeFJPo/RskmEv9U6h5eU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:13:f4:9f:ed:f7:fa:b6:a9:2a:24:c7:9c:c2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
        Validity
            Not Before: Jun 15 22:02:09 2024 GMT
            Not After : Jun 16 22:02:09 2024 GMT
        Subject: CN=cc2ddb6f6f61b6817b62fb58604a3559e8e8d765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:f7:56:c2:72:bc:d4:89:c4:92:54:36:11:
                    55:14:a2:d4:f5:52:eb:29:51:58:b6:16:31:fd:c4:
                    50:fd:6e:8e:8e:a9:98:db:69:63:66:de:8a:a1:7a:
                    ea:ba:cf:c3:85:a9:5a:13:33:37:ab:24:ae:00:9d:
                    c4:88:f6:07:4f:63:17:e3:96:e4:a7:a9:51:89:cd:
                    05:12:5b:83:38:79:d2:b2:93:b7:78:94:d3:49:74:
                    40:b6:fa:ee:6b:1b:3b:09:8b:3f:a8:09:a0:e7:5a:
                    f1:4c:2a:f5:52:85:a1:3b:25:16:36:77:27:6d:2a:
                    9f:1a:d3:ab:46:c6:53:44:7f:d9:8e:25:14:37:e0:
                    d7:3f:a9:e4:32:98:4c:de:fa:fe:37:98:e1:5d:a8:
                    a7:09:85:fe:69:49:df:1f:90:46:73:d8:15:82:dc:
                    33:b0:ec:8b:68:98:22:72:19:66:11:56:35:bc:67:
                    d1:5a:af:f6:5c:58:6a:e3:12:59:b2:37:d4:81:0f:
                    3d:ca:7a:57:92:c3:32:39:40:55:4f:14:c9:5c:b2:
                    33:ab:7e:75:e3:21:51:5b:1e:a6:59:06:ab:10:04:
                    9c:1e:7a:2c:3e:bc:c9:cc:64:fc:bd:13:e1:ea:69:
                    5b:67:6b:4c:66:a3:45:9f:93:bb:29:e6:d1:01:20:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:DB:6F:6F:61:B6:81:7B:62:FB:58:60:4A:35:59:E8:E8:D7:65
            X509v3 Authority Key Identifier:
                keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fa:88:72:e8:ff:ff:1a:fc:bd:f3:eb:00:82:1c:bb:6e:6a:
         2e:82:8d:a6:a8:d1:02:93:61:52:4a:15:d8:6e:ec:7a:df:b9:
         1e:fe:a1:8f:fb:14:2a:6d:da:49:51:85:18:43:b6:6f:82:bd:
         e2:fc:b9:97:43:6c:15:fd:3e:21:22:be:bc:2a:77:0c:c6:40:
         93:1e:c4:ab:9c:5c:3e:12:40:e2:0a:27:ea:91:f5:8c:44:ef:
         bc:bb:14:e7:39:37:19:b8:8c:dc:62:4a:4f:aa:26:45:32:df:
         ca:56:a0:9a:bb:59:fb:a3:d0:2f:2a:df:f0:18:47:53:c6:54:
         1e:5f:7c:96:27:b4:08:19:d0:16:8a:16:38:b5:a5:e6:88:5b:
         17:a8:83:e0:30:68:59:bb:34:33:b3:26:d4:e5:8a:18:28:9a:
         79:38:c6:4c:db:0d:08:1e:7b:9a:cf:9e:14:cc:00:77:18:08:
         1a:03:91:e9:24:1f:48:3f:e3:93:a5:13:8f:9b:65:97:68:42:
         6d:99:1c:e5:55:70:7c:cf:b2:73:d2:71:76:69:4a:5b:74:31:
         49:7c:4d:e1:e5:c0:f6:7a:44:8f:23:80:d9:2f:01:35:6d:d3:
         e1:71:14:e8:22:f2:d9:56:70:c9:46:f1:59:53:48:c4:fc:e8:
         5e:43:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----