Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File:                     BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier:          cEf37zVM2xlYiBlvFLGFSlpMS1zWF+Spd1R7iyV4Rzg=
Subject key identifier:   2B:AC:87:A9:CF:DC:6A:A8:39:EA:09:66:C4:FB:DD:B9:8E:4C:2D:B6
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer:       /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial:       01901E593346AC0FE6710B03911CDF48A86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number:          0411
Signing time:             Sun 16 Jun 2024 00:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:20 +0000
Files and hashes:         1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: gI6IgUd9sVfmFq69iQdcNsoCy1t9XS9WgxlRatO9JRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:33:46:ac:0f:e6:71:0b:03:91:1c:df:48:a8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
        Validity
            Not Before: Jun 16 00:01:20 2024 GMT
            Not After : Jun 17 00:01:20 2024 GMT
        Subject: CN=2bac87a9cfdc6aa839ea0966c4fbddb98e4c2db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:ed:79:a8:41:7a:f0:f5:4b:89:c5:eb:60:
                    c8:ee:b4:51:05:77:63:a1:c6:2b:cb:f6:28:65:51:
                    45:c7:81:86:9e:e3:7c:84:95:07:4a:4b:69:a4:06:
                    5e:aa:81:34:26:63:43:5f:0b:4d:b4:c4:cc:fc:3d:
                    c5:8e:17:05:35:84:6a:03:45:6f:82:b5:7b:f4:1c:
                    97:5b:84:0f:f4:56:ad:93:00:0d:f6:01:ee:18:4c:
                    0b:06:1a:e2:43:0d:2c:75:3d:bc:85:0a:e0:d0:be:
                    f2:af:75:8e:16:e8:f1:f8:64:95:93:e7:46:40:ab:
                    f9:80:ea:70:95:43:1e:5d:a6:08:b2:bf:77:ba:75:
                    48:ab:86:33:54:01:87:d5:b7:be:9f:4b:a5:c8:29:
                    63:c2:aa:91:d4:e8:c2:69:09:ae:c4:7e:fc:45:6a:
                    2b:c6:46:c9:0f:63:7a:11:7f:66:7a:5e:2f:e0:90:
                    f3:5d:ae:c3:d8:04:b8:ff:b6:32:de:0d:9f:08:34:
                    27:a4:9f:65:bc:52:58:2c:21:12:4e:23:bb:cb:f7:
                    69:c1:93:71:ff:da:60:f2:a3:8f:e6:7a:c2:67:d6:
                    5e:07:b1:49:9d:45:12:6f:54:7f:6b:05:f9:e9:4a:
                    16:11:49:9e:2b:2c:40:fb:4e:34:09:f6:0b:bf:f9:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:87:A9:CF:DC:6A:A8:39:EA:09:66:C4:FB:DD:B9:8E:4C:2D:B6
            X509v3 Authority Key Identifier:
                keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:09:eb:b5:6d:ed:52:88:05:5a:ad:af:ad:da:d9:57:6e:44:
         17:6b:ba:21:10:a5:b6:7e:fe:65:51:a6:81:36:94:05:c6:d7:
         12:7d:b4:b6:d9:b7:8f:9e:5e:91:38:27:75:70:87:b7:42:b0:
         36:63:d1:d4:53:26:81:73:50:45:48:82:a3:9b:6e:da:f5:72:
         0f:c0:8d:a8:bb:18:2e:3b:3f:33:88:5c:ca:77:7b:d6:f1:8e:
         a1:20:a5:83:ef:60:4e:13:b0:cb:e4:3a:1b:dc:cb:ed:71:56:
         d0:34:cc:40:68:5f:d7:ab:f9:bb:69:53:82:4f:5f:ff:1c:42:
         d1:7e:8f:8f:5c:0a:bb:8c:5c:23:bc:dd:c9:ab:9f:fb:e2:b8:
         b6:a7:44:e6:7b:ed:34:14:19:aa:bd:e6:1d:4d:bb:af:cc:64:
         44:55:15:ee:db:a0:49:6f:cc:82:58:58:52:e1:a6:aa:b6:99:
         69:8a:62:4f:d5:a1:a0:b7:e0:21:16:e8:c5:6f:8b:76:61:e6:
         e8:37:8d:a2:f1:fa:85:fc:dd:d2:90:2d:75:9a:ba:de:6c:56:
         3c:57:65:eb:75:35:63:fa:30:39:83:b4:ae:c4:18:9e:b7:1b:
         d8:d5:62:ca:8e:c3:90:ad:3d:b7:87:d0:3b:7b:cd:17:44:3e:
         89:a0:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:05 2024 by rpki-client on console-fra.rpki-client.org