Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier:          c48buA7ALYKtmYnJIlC3C2xOK25wbJ5SPy9qblT7cvQ=
Subject key identifier:   71:AB:DE:CF:7A:94:4D:44:48:AC:32:E0:E3:7F:F3:12:C6:18:17:4C
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer:       /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial:       018F43B28AE0C6BC0F8E897BC6E1E5C1DF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 13:02:05 +0000
Manifest this update:     Sat 04 May 2024 13:02:05 +0000
Manifest next update:     Sun 05 May 2024 13:02:05 +0000
Files and hashes:         1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: uJBQRs1blKmiOEtzG1URaYzKNvqOb7jrDLlolSe52bE=)
                          2: yVy8PRoCoGyW11kzMb8kx_a0dCM.roa (hash: LZJ/tIC2WD/+hNFGgcAgJsCetGsnr8VyFOd/SPHSHZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:8a:e0:c6:bc:0f:8e:89:7b:c6:e1:e5:c1:df:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Validity
            Not Before: May  4 13:02:05 2024 GMT
            Not After : May  5 13:02:05 2024 GMT
        Subject: CN=71abdecf7a944d4448ac32e0e37ff312c618174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:7f:5b:8d:bf:18:37:ec:23:a7:75:c7:30:
                    46:db:f6:b5:81:e9:7e:1f:e5:f6:21:a0:70:6e:08:
                    64:aa:4f:e6:58:38:dd:e7:57:3a:ad:53:83:40:bc:
                    25:5f:38:32:d3:05:6e:62:66:cd:50:c3:46:8f:2a:
                    10:39:fa:a4:ec:26:cb:02:69:01:c9:c7:1c:48:10:
                    6e:21:d2:ba:78:36:eb:a9:85:21:79:d4:3a:44:d2:
                    40:30:1c:1f:40:3d:8b:1e:d4:77:dd:d0:6a:a6:8a:
                    52:4a:57:c5:0c:dd:24:b9:41:ef:71:4b:28:1f:7e:
                    3c:f4:fb:33:cd:8e:d7:1f:5e:e1:72:f7:da:8c:ed:
                    c9:9c:6c:38:99:43:15:31:b5:3c:ce:bf:e3:e6:bb:
                    d0:9a:12:bc:61:99:ef:38:62:b4:d8:5d:ee:40:56:
                    71:86:ff:cf:76:9e:c3:e8:a0:66:45:5d:70:4d:57:
                    51:01:0f:d0:c1:a5:83:42:c3:42:91:b3:93:9a:fc:
                    56:16:31:4e:80:00:5e:43:34:6f:e3:72:06:bc:e5:
                    eb:1d:f0:20:4d:2d:87:b8:33:35:88:02:61:75:a7:
                    1f:17:55:ee:97:e7:af:80:3f:4b:00:39:b8:5f:2c:
                    c8:31:12:e6:4d:8a:cc:29:ac:d3:28:6b:78:40:59:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:DE:CF:7A:94:4D:44:48:AC:32:E0:E3:7F:F3:12:C6:18:17:4C
            X509v3 Authority Key Identifier:
                keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:c6:ea:30:0b:a0:ed:cd:3d:cf:80:7c:d0:0e:7d:02:cd:
         4b:ca:27:6d:ca:19:6f:89:e9:15:e4:aa:fb:7e:78:20:fd:ce:
         ce:28:b3:83:50:c4:2b:28:14:23:7b:8a:9b:b3:79:21:c7:af:
         47:57:5b:52:1d:08:fa:75:af:d2:11:01:69:17:ac:7b:81:c9:
         ed:f5:64:d6:e8:11:6b:86:ea:9a:8f:6c:e6:67:91:ba:7d:d6:
         ec:a9:34:95:c4:7f:a6:90:ec:f0:06:a4:36:b0:7d:77:bb:b1:
         8b:82:9b:64:f9:c6:d5:d2:46:40:42:88:ba:b0:9d:4b:aa:2b:
         6b:bf:eb:fd:c3:e4:68:59:31:29:7d:be:bd:96:25:4a:61:78:
         46:11:6a:2f:7a:93:9c:73:25:f0:17:52:08:ed:91:2f:c6:62:
         86:02:78:3c:37:41:75:ed:8b:f5:16:ce:ca:ed:60:5d:29:99:
         27:a8:69:27:e4:02:1b:c8:92:60:ef:03:12:de:5c:41:b1:3c:
         08:05:22:b0:ff:3b:27:04:17:10:99:70:c3:0c:32:56:81:9c:
         df:f8:96:02:1f:1f:99:43:94:eb:27:fa:3e:87:d7:79:99:2d:
         61:44:8f:72:60:9c:0e:11:09:00:99:46:41:f2:dc:d4:91:04:
         ae:f9:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:49:59 2024 by rpki-client on console-ams.rpki-client.org