Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          ch8b1y8CAZ0odaQMMeLTCYgXJugs4YaCBjFsCkfWKTw=
Subject key identifier:   70:60:06:AF:15:B6:69:3F:AA:B2:8F:1C:30:A8:9D:55:A0:1C:93:66
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       018F532742F8C45CFF7ABD416C22941FB443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          1159
Signing time:             Tue 07 May 2024 13:03:52 +0000
Manifest this update:     Tue 07 May 2024 13:03:52 +0000
Manifest next update:     Wed 08 May 2024 13:03:52 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: gTXzjQODi2bue7pSaFBGUzPnFQNQlYagHi8lWQLTXTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:42:f8:c4:5c:ff:7a:bd:41:6c:22:94:1f:b4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: May  7 13:03:52 2024 GMT
            Not After : May  8 13:03:52 2024 GMT
        Subject: CN=706006af15b6693faab28f1c30a89d55a01c9366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:22:94:1e:9f:72:ba:1b:37:c5:5e:67:de:
                    61:5e:ce:44:80:ed:4c:be:c1:f5:41:79:c4:62:6a:
                    91:e5:ce:8a:ba:bf:47:a9:23:c9:1c:cf:57:7b:58:
                    aa:90:c4:da:87:ca:a0:d3:df:e9:d6:84:1e:af:88:
                    22:21:9f:6c:65:79:e9:05:4d:ea:2e:ff:8f:0f:61:
                    c0:95:27:d1:fc:64:73:84:88:5e:df:0b:c7:26:7b:
                    85:74:4b:f9:50:0a:1a:6c:fe:fa:94:85:4e:c9:6e:
                    09:80:3b:2f:cc:b1:14:5b:9a:0c:ff:d6:17:99:54:
                    b7:11:80:ac:e3:ec:7b:b4:7d:43:4e:15:2d:6a:18:
                    33:95:98:c2:e8:8b:aa:4a:18:a9:87:39:01:14:e5:
                    d2:49:14:99:10:b5:14:e8:81:9b:6f:72:32:b7:4a:
                    21:12:9b:5e:07:82:66:bf:d1:02:7d:94:04:fb:3d:
                    fa:dc:28:e9:8b:e5:77:9b:ed:39:69:60:49:cb:d1:
                    22:a6:85:2d:fb:db:75:94:ef:4d:fe:7e:b9:14:ef:
                    0d:14:23:1d:29:39:a1:33:20:ef:8c:6e:7a:60:1a:
                    a5:fa:0b:35:bc:9e:7a:a3:5c:f0:e0:63:0a:a1:58:
                    20:35:2f:5e:85:5d:03:c9:a7:ff:73:41:77:b6:54:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:06:AF:15:B6:69:3F:AA:B2:8F:1C:30:A8:9D:55:A0:1C:93:66
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:af:07:53:ca:65:e5:79:01:06:e6:f1:35:37:76:60:b0:
         b4:e6:69:2b:dd:12:0d:66:7c:2f:b9:1c:60:05:17:2b:60:68:
         26:35:6d:11:f9:ba:31:68:db:78:be:e2:41:f7:51:8e:5a:98:
         3a:24:8d:42:74:b3:f6:18:3a:b2:24:f2:2a:83:9d:b6:d5:60:
         fc:b1:0e:e7:51:c8:63:b7:fc:71:01:6a:58:57:a9:f4:df:29:
         61:e3:d8:12:d8:d3:0f:20:7a:46:89:71:1e:6b:0f:c0:45:ee:
         36:70:35:d9:41:2e:cc:46:40:42:8b:9d:00:3b:d5:03:0d:b0:
         78:e2:81:13:cf:73:74:d5:30:c1:72:77:c1:61:5b:8c:cf:c1:
         70:7c:22:d2:4a:1e:87:96:6a:c0:c3:ad:51:1e:48:e2:e1:34:
         a0:ff:f2:13:18:de:78:5b:f4:cc:1c:d8:af:d8:49:2f:52:54:
         de:dd:b7:b3:e0:3c:7d:5e:f7:50:b9:9c:9a:35:a1:51:71:6d:
         d9:0e:b0:eb:65:0d:2b:ff:ba:fc:a7:53:5b:52:12:9e:d7:2c:
         5d:78:fc:02:81:3c:74:40:6f:02:a1:45:1b:d0:17:28:82:38:
         42:17:2b:b7:c3:fe:5d:78:fb:92:ee:5d:16:0b:34:c4:bc:4b:
         4c:9e:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:23:50 2024 by rpki-client on console-ams.rpki-client.org