Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.mft
File:                     BdfV5GitrLHQVqoDLQO1BLyVYnA.mft (raw, json)
Hash identifier:          HAtO/0akqAWbhRVz+NR7m+F0j5CtrkVd+Eldo7L+alc=
Subject key identifier:   C3:43:E8:79:87:66:AF:B0:D2:69:65:EF:D0:4B:3A:FB:68:95:7F:EE
Authority key identifier: 05:D7:D5:E4:68:AD:AC:B1:D0:56:AA:03:2D:03:B5:04:BC:95:62:70
Certificate issuer:       /CN=05d7d5e468adacb1d056aa032d03b504bc956270
Certificate serial:       019040AEDB26665DB3269FFAEEAD4B33A5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdfV5GitrLHQVqoDLQO1BLyVYnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.mft
Manifest number:          0B0F
Signing time:             Sat 22 Jun 2024 16:01:59 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:59 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:59 +0000
Files and hashes:         1: BdfV5GitrLHQVqoDLQO1BLyVYnA.crl (hash: iY1IvBLb5t18RoDns187EQoMES2TL9Wwk5lUnSZt/+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdfV5GitrLHQVqoDLQO1BLyVYnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:db:26:66:5d:b3:26:9f:fa:ee:ad:4b:33:a5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d7d5e468adacb1d056aa032d03b504bc956270
        Validity
            Not Before: Jun 22 16:01:59 2024 GMT
            Not After : Jun 23 16:01:59 2024 GMT
        Subject: CN=c343e8798766afb0d26965efd04b3afb68957fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:a2:d6:cf:f0:90:3a:eb:2c:16:10:ae:ed:
                    fa:71:56:58:7e:9a:a3:0a:85:a6:f3:0e:e5:5c:fc:
                    5a:dc:5a:58:14:85:4c:2c:24:01:47:ab:8f:9f:47:
                    1a:56:8d:a0:c2:35:41:a4:72:e7:38:59:e0:78:8c:
                    26:07:f5:86:b3:d3:29:29:9b:fb:a7:8e:95:ca:a8:
                    47:e0:81:cf:bf:9b:b2:fb:71:e6:59:15:cb:b2:51:
                    dc:4f:7f:f2:2b:d9:7f:b2:a9:a7:7c:04:c7:5a:bf:
                    53:86:5f:df:d3:e3:2c:20:50:8f:e5:cf:28:f2:3f:
                    34:63:75:89:e7:ac:d6:e9:45:2b:fd:7e:ef:a6:cb:
                    b8:4b:6d:af:95:9f:80:b5:6f:c9:71:18:ae:cd:c5:
                    78:ba:21:8e:17:8f:85:c0:81:a5:38:5a:53:ef:3f:
                    c0:48:56:86:63:22:69:96:7a:ab:df:50:3f:29:04:
                    37:93:32:98:a9:4d:df:23:ff:62:a9:83:cf:95:f5:
                    4e:40:5b:5d:16:d3:d7:9c:97:71:5b:5c:46:18:24:
                    9e:c1:de:cf:03:be:e8:85:dc:d8:de:3d:19:ca:b5:
                    09:58:79:6e:0c:75:e2:26:52:d5:10:42:e6:ff:46:
                    3f:a0:4e:1f:31:55:3d:3c:4f:33:60:fa:42:b2:e0:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:E8:79:87:66:AF:B0:D2:69:65:EF:D0:4B:3A:FB:68:95:7F:EE
            X509v3 Authority Key Identifier:
                keyid:05:D7:D5:E4:68:AD:AC:B1:D0:56:AA:03:2D:03:B5:04:BC:95:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdfV5GitrLHQVqoDLQO1BLyVYnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d67e96-b790-42ee-bf5c-17c19a5b6bda/1/BdfV5GitrLHQVqoDLQO1BLyVYnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:34:f0:07:bb:11:e7:6d:a2:bf:f9:a3:fb:b4:d3:99:9f:e6:
         0d:36:00:9a:05:f3:7b:ca:d8:5d:ab:88:83:00:9d:f2:a2:a1:
         7d:23:5e:33:99:82:0a:e8:60:86:32:d8:f0:fc:4e:4c:85:6a:
         8c:ce:3b:e2:3a:84:0f:d1:06:33:74:c3:e6:4c:cf:1b:01:c5:
         0d:4b:00:f0:f1:77:56:01:d6:d4:29:13:00:fa:43:75:44:67:
         df:a3:56:44:d5:b9:23:69:d2:21:26:75:c0:aa:e6:1e:eb:16:
         f8:fd:b9:9f:f8:91:91:42:05:81:50:5f:ac:21:29:1a:5a:52:
         f8:4b:f4:6e:07:38:5f:81:fb:e4:9c:a9:c3:43:a1:6e:3d:6f:
         08:72:b9:46:36:c8:59:99:cc:f9:46:6c:cd:68:19:6d:4b:ce:
         52:ef:9d:38:2e:59:c9:e9:37:6d:c6:21:03:10:e4:0b:be:ed:
         9c:35:cf:5e:c4:0d:94:b2:02:ac:d5:f7:0b:e2:34:4e:d9:93:
         63:1c:9c:34:22:01:19:d5:60:c4:fb:bd:fc:c6:26:40:a0:5f:
         e5:f0:54:f1:d8:43:55:33:a5:8f:6d:25:73:08:9b:01:c6:bb:
         5d:ba:7a:a4:ab:21:ec:20:6d:d5:03:11:d5:e5:c2:3c:67:5d:
         77:ea:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:52:58 2024 by rpki-client on console-fra.rpki-client.org