Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File:                     BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier:          hryBohToBg2dJ5oyE1dYXtADmbXj1WhIQ6sgtJH04f8=
Subject key identifier:   A4:9F:FC:0D:4E:ED:42:31:74:FE:79:5D:5A:F1:CB:54:85:FA:D5:5B
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer:       /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial:       018F58F17DED82CBFCE32644F259CDD87499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number:          0628
Signing time:             Wed 08 May 2024 16:02:52 +0000
Manifest this update:     Wed 08 May 2024 16:02:52 +0000
Manifest next update:     Thu 09 May 2024 16:02:52 +0000
Files and hashes:         1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: qMIt2atnkLRglqEfB77YG1vcDLbGVObsUFha25zPo6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f1:7d:ed:82:cb:fc:e3:26:44:f2:59:cd:d8:74:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
        Validity
            Not Before: May  8 16:02:52 2024 GMT
            Not After : May  9 16:02:52 2024 GMT
        Subject: CN=a49ffc0d4eed423174fe795d5af1cb5485fad55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:bf:e0:81:da:16:87:b7:00:91:9b:53:e6:
                    b4:c6:41:ce:1b:ec:07:71:7d:13:d0:54:00:54:53:
                    37:78:75:5a:2c:83:65:15:db:d4:ed:b3:09:c0:86:
                    7b:7a:54:b8:99:b1:40:0e:f9:a9:39:dd:09:57:5c:
                    04:5f:59:09:85:0a:45:a9:f4:48:23:55:99:41:ca:
                    c8:30:85:db:70:92:6f:d8:de:0c:74:dc:89:bc:2f:
                    94:63:41:1b:15:da:47:dc:7d:c0:9b:70:cf:4d:65:
                    71:18:1e:4c:ed:f9:d4:70:73:d9:c9:e8:0c:c5:46:
                    28:bf:f3:44:40:b8:00:ca:e3:ab:1d:70:ca:97:37:
                    17:8d:c5:ad:92:40:56:5f:e2:a5:61:5e:bd:f8:1b:
                    7e:a8:cf:01:3b:a1:60:32:ce:63:c2:9b:e2:14:c5:
                    4d:a6:df:da:4d:8e:d4:f3:8b:17:04:30:1e:20:b9:
                    b1:87:f8:8d:e7:32:c9:04:57:79:4a:c4:a7:35:d1:
                    6f:92:31:6d:54:f9:1d:d0:72:c8:f5:8d:ca:10:44:
                    eb:cf:eb:05:e1:16:ae:31:de:94:12:1a:9c:43:ed:
                    47:e6:8f:01:0e:c5:3c:f7:73:39:bb:4f:42:45:ba:
                    77:06:a6:b3:a9:24:6c:95:0f:95:fa:db:4a:51:45:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:FC:0D:4E:ED:42:31:74:FE:79:5D:5A:F1:CB:54:85:FA:D5:5B
            X509v3 Authority Key Identifier:
                keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:40:98:f8:7a:fd:e6:15:75:3a:bc:ba:c2:e2:92:9c:4e:04:
         5a:3f:95:72:74:39:12:b6:e0:0b:dd:77:69:1c:af:b7:c0:fa:
         5d:ad:c8:9a:53:b2:c6:46:3e:5a:26:de:b2:8f:c3:44:83:f5:
         d7:ec:a0:43:1e:80:04:32:b2:d4:c4:61:92:4c:48:69:44:56:
         7a:4a:27:fe:ac:bb:94:f6:b6:83:1d:14:38:7e:fb:31:87:16:
         58:b4:4d:e2:37:ff:bd:07:88:3e:7a:93:b5:78:b7:7c:8e:46:
         ec:12:88:fa:df:04:78:77:f5:a6:d7:ec:8b:db:52:30:97:56:
         60:a7:8e:a4:e4:24:47:25:15:5c:3e:7c:87:b6:ea:63:3f:d8:
         90:e6:5e:ff:c2:c6:2a:58:81:8a:c1:09:fe:17:9b:6e:d7:de:
         98:a9:74:0f:bf:bf:88:e2:9b:39:22:2e:af:17:3e:17:db:10:
         ce:80:49:47:a7:68:a1:63:13:d7:ce:f3:81:a0:86:60:da:46:
         79:8c:1c:63:4c:3f:6b:c1:85:2e:64:21:4f:9c:f2:70:60:15:
         c4:5d:be:19:8b:c5:ba:c1:36:b8:15:5f:56:2d:34:c1:08:31:
         a8:97:80:6a:0c:21:6d:d5:f5:d0:0e:66:34:8d:37:0d:ce:50:
         76:71:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:00:09 2024 by rpki-client on console-ams.rpki-client.org