Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          GmVC8Qcb6lCFn4n1bNFVtlVFknCDYTyXHR+C2r7Bp7U=
Subject key identifier:   9B:70:86:50:4A:71:10:C4:4D:29:AB:69:0B:56:C7:63:A4:2E:D5:DA
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       018F4D5AE02068C93BAA8DE561C9611C70F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 10:02:32 +0000
Manifest this update:     Mon 06 May 2024 10:02:32 +0000
Manifest next update:     Tue 07 May 2024 10:02:32 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: wYh6AdqjnCxsCEohsvhUKQ92jkjtATN0H6g/f1GExYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:e0:20:68:c9:3b:aa:8d:e5:61:c9:61:1c:70:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: May  6 10:02:32 2024 GMT
            Not After : May  7 10:02:32 2024 GMT
        Subject: CN=9b7086504a7110c44d29ab690b56c763a42ed5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:5b:92:1f:fe:d1:14:fc:46:f7:a2:f4:9e:
                    04:67:dc:fd:9b:6b:8c:a7:8a:ad:22:e1:81:9f:d6:
                    99:16:2b:38:76:83:b2:bc:69:97:37:5c:a0:ee:f2:
                    7f:10:5d:58:7b:0e:7b:f8:06:59:f5:25:c5:59:ba:
                    22:0b:be:41:fd:fa:1c:2f:13:45:04:30:13:58:a2:
                    4b:9d:01:21:a7:2e:bf:fd:1b:13:ca:83:ab:db:f5:
                    db:6a:4e:ac:66:9f:c3:d1:0a:b1:31:be:a5:c8:a0:
                    08:b6:ab:99:ba:45:73:82:c8:05:45:c8:fe:f1:5e:
                    a4:88:ae:33:22:9f:a3:12:75:e8:a7:b6:35:b5:e4:
                    ca:1a:48:9d:6b:6e:48:a6:71:a7:a0:e9:64:95:73:
                    a2:44:d1:b3:fe:0a:89:fd:42:d4:1a:b6:34:55:12:
                    84:1b:77:fb:33:eb:ce:a4:03:d4:58:89:a3:a2:87:
                    15:f8:f5:8f:82:f1:1d:52:0d:ce:92:b2:d3:7a:f7:
                    1c:28:7f:52:1a:4a:93:b5:0c:fa:11:dd:01:90:54:
                    bb:cd:d1:3b:ff:85:58:63:3c:6a:cf:5a:44:9b:65:
                    39:37:18:bc:1a:60:37:d7:d0:0d:6c:9f:38:19:6c:
                    12:50:c7:15:37:3b:c2:f4:99:7f:57:52:1a:3b:70:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:86:50:4A:71:10:C4:4D:29:AB:69:0B:56:C7:63:A4:2E:D5:DA
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:18:d7:8a:7a:09:d3:85:63:8f:b9:b5:29:cf:d7:db:1c:
         22:41:5e:56:ad:86:7e:31:43:13:0e:96:06:66:a1:43:96:d3:
         c9:62:e7:4b:f7:fa:d9:4a:4c:27:b9:4a:c1:65:34:9c:8e:fc:
         c0:95:da:e1:00:d8:cc:d4:b0:30:97:7b:6a:c3:fa:7a:87:50:
         94:2f:fc:c9:ec:de:4b:12:9b:a7:fb:39:cd:95:7d:55:37:58:
         11:c2:56:8b:f9:4d:ce:c5:f2:93:75:53:0f:ed:81:4a:60:ca:
         21:29:4b:f7:83:0e:2b:d3:06:89:64:88:92:d7:57:00:ef:72:
         21:53:63:66:78:63:38:00:5b:de:ed:ec:1b:56:81:17:09:3b:
         94:55:f7:fc:d4:dd:a8:66:b3:9b:21:2a:4e:5e:1b:ba:b9:d6:
         7d:f1:82:a0:4d:7c:46:3b:10:98:1b:65:1b:9d:36:06:b1:7a:
         41:df:28:ac:64:15:20:8b:9b:89:a8:7f:79:d2:23:e2:c2:75:
         61:03:f4:f6:c3:56:b6:2c:57:fe:a7:d0:ce:a8:2b:83:11:72:
         51:22:71:4b:fb:7e:28:23:52:6f:20:63:c7:a3:cb:8c:d0:ca:
         f8:89:a6:cf:22:cf:ea:6d:7b:7d:a9:64:ca:63:64:a2:1e:b7:
         b8:39:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:40 2024 by rpki-client on console-fra.rpki-client.org