Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File:                     BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier:          OGQU8dMwft/wnI5eGfJ69YFZnUlJo56lrsx9V8b6FKU=
Subject key identifier:   8A:FC:82:FF:EC:62:84:27:DA:78:D1:7C:BC:5D:33:75:81:06:26:15
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer:       /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial:       17910CDB9453A84DCF4213E233935BD6070622F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number:          A4
Signing time:             Sat 15 Jun 2024 22:39:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:34:47 +0000
Manifest next update:     Sun 16 Jun 2024 23:09:47 +0000
Files and hashes:         1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: F6+BHm2iwSt1tCuQNYcw0ZDnN7Q6VFls1yta2xDRxxQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:91:0c:db:94:53:a8:4d:cf:42:13:e2:33:93:5b:d6:07:06:22:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
        Validity
            Not Before: Jun 15 22:34:47 2024 GMT
            Not After : Jun 16 23:09:47 2024 GMT
        Subject: CN=8AFC82FFEC628427DA78D17CBC5D337581062615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:18:73:af:10:50:28:5b:f1:70:5e:6c:d2:
                    23:36:5f:71:54:9c:62:e3:97:71:3c:a5:3d:db:5f:
                    42:37:8b:cc:22:48:b5:63:1a:34:37:1d:54:ff:c4:
                    45:1e:d0:e8:f3:d9:fb:7f:f5:46:79:a6:23:46:55:
                    73:2d:ec:e6:96:92:94:66:c6:11:09:f4:4c:ba:ae:
                    35:bf:50:25:b9:e4:8d:5a:ab:85:ee:48:80:93:c6:
                    22:73:21:9d:55:24:32:68:45:22:e1:16:4c:ee:af:
                    66:c8:72:f3:62:ab:b4:10:e9:e3:d7:56:da:0a:43:
                    c1:e8:9f:3f:3f:00:a0:57:cf:35:82:19:3a:c5:83:
                    32:23:5d:34:94:ba:28:61:b4:61:2b:9f:af:fb:2c:
                    2b:29:d0:da:dd:55:85:65:86:22:e4:09:c6:23:c7:
                    f0:9c:f1:3b:35:1f:0c:6b:2e:0d:32:20:bd:e9:a0:
                    eb:85:a0:06:c7:5f:cb:bd:65:44:54:66:c0:3d:67:
                    65:50:6b:61:0d:b3:4c:be:f1:32:49:14:9a:8b:79:
                    9f:4e:80:82:b7:4b:f2:c2:ac:85:f4:1f:ac:4f:c2:
                    aa:85:43:67:97:81:68:e6:f9:09:c7:00:7f:f3:d4:
                    ac:ed:7d:08:3a:b9:a4:31:75:16:3f:d8:7e:16:ea:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FC:82:FF:EC:62:84:27:DA:78:D1:7C:BC:5D:33:75:81:06:26:15
            X509v3 Authority Key Identifier:
                keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:e8:e8:fd:66:68:da:0f:31:9f:d6:1f:04:20:c7:b6:a3:
         ee:21:7f:f7:9a:f6:bb:7d:b5:1b:ba:80:98:16:a7:22:24:8b:
         3a:c5:b9:87:74:60:1d:a0:a1:d9:fc:88:3b:82:72:8d:d9:03:
         15:09:04:50:7b:21:09:b3:9d:de:6e:f3:39:e4:83:15:4d:bf:
         05:e4:fa:59:1b:e0:01:9f:b4:04:31:88:10:c4:d0:0d:fa:00:
         93:9e:99:fb:db:46:89:a7:91:62:26:4e:a3:09:1f:e6:5e:05:
         61:f0:88:56:25:7f:e5:c1:01:1f:35:e0:62:2a:ad:c0:4c:93:
         b8:be:fa:b4:8a:fa:ef:e2:89:92:b2:40:ac:d9:ba:90:cc:7c:
         06:6c:6c:6e:56:0b:3b:c5:7e:a4:78:db:9b:6f:de:5d:e8:4e:
         ed:d5:ca:27:36:2f:ad:e2:af:d6:26:a3:71:94:27:66:37:62:
         6a:76:8c:c0:a7:c5:8e:4a:46:dc:76:62:98:93:e5:c3:2a:8f:
         05:52:2a:9b:f2:09:84:c0:68:fc:51:b9:69:16:e5:37:32:43:
         52:b8:44:e4:e5:24:9e:96:c2:76:b5:c4:4d:8d:5d:9b:25:07:
         2e:aa:e9:7b:47:ef:b8:05:85:92:c5:00:a5:fd:ae:0b:6f:78:
         86:e2:12:63
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 15 23:41:28 2024 by rpki-client on console-fra.rpki-client.org