Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
File:                     Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft (raw, json)
Hash identifier:          rcwRtZP31Cxkko8K6RzGMnNvdLlpK5eQy5eEFTTvKEc=
Subject key identifier:   7A:DC:37:DA:48:A4:1C:E6:2D:AA:66:01:2A:7B:82:14:02:6E:77:D1
Authority key identifier: 06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3
Certificate issuer:       /CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
Certificate serial:       01958C611FDC12EAF4453882D70E4DFEF6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
Manifest number:          1492
Signing time:             Wed 12 Mar 2025 22:02:10 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:10 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:10 +0000
Files and hashes:         1: Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl (hash: gbCmJ+4PsxP7cP/6IDRIiv2saTXRL/OlNdQ72R8q7mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:1f:dc:12:ea:f4:45:38:82:d7:0e:4d:fe:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ef9b5f2ef1043c2df317f86c8b9297221f8dc3
        Validity
            Not Before: Mar 12 22:02:10 2025 GMT
            Not After : Mar 13 22:02:10 2025 GMT
        Subject: CN=7adc37da48a41ce62daa66012a7b8214026e77d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:88:f2:29:12:93:b5:6d:11:58:4b:8e:b7:
                    90:f3:51:aa:4f:40:b5:9b:26:38:f2:c1:1b:bc:cb:
                    b3:df:44:b8:bd:98:04:11:93:0b:f3:46:95:be:b5:
                    e9:02:e0:87:19:35:cd:e5:65:cd:b9:a4:02:0a:ef:
                    97:5d:63:b3:7d:74:f6:1d:48:91:57:6f:77:5c:3c:
                    66:b9:13:2e:f0:32:15:13:7c:c1:de:95:18:6d:2d:
                    41:f4:56:25:f0:f8:f6:0c:06:35:a2:ca:c7:58:fe:
                    8a:93:eb:7c:39:ab:23:9f:59:6f:62:45:a4:e2:27:
                    9d:f7:fb:22:8c:eb:03:d2:4e:21:82:b0:41:6a:5c:
                    bd:6e:32:a0:2b:18:40:8e:9c:51:f5:75:f8:36:4c:
                    65:c3:33:99:91:34:f6:44:73:e6:a9:e8:ef:83:ef:
                    c2:90:7c:d8:64:70:1b:c5:fd:c8:bb:bf:34:37:37:
                    f2:f9:6a:57:e7:b2:5e:c2:99:1b:37:48:e3:e3:e8:
                    f4:ea:8e:2f:52:33:f0:0c:c3:38:55:d3:40:9c:54:
                    e7:3b:8f:61:9b:e4:72:26:a6:8e:22:29:b5:fa:84:
                    85:90:c4:ec:72:9c:db:48:1f:42:f3:49:99:34:5f:
                    9b:74:fd:1d:77:8b:97:bd:3a:ec:04:9b:23:9a:72:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DC:37:DA:48:A4:1C:E6:2D:AA:66:01:2A:7B:82:14:02:6E:77:D1
            X509v3 Authority Key Identifier:
                keyid:06:EF:9B:5F:2E:F1:04:3C:2D:F3:17:F8:6C:8B:92:97:22:1F:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8b2e4c-423e-4a2d-9a88-91beb9b8908c/1/Bu-bXy7xBDwt8xf4bIuSlyIfjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:df:0e:83:81:90:30:65:fa:4e:fb:ae:4e:8d:a4:43:e0:e1:
         2a:8c:7d:7f:1f:4d:10:aa:bb:4b:65:90:b4:f5:66:09:ce:32:
         60:7b:b1:d8:03:21:28:25:60:c7:b7:7a:af:c4:08:58:00:ab:
         42:d3:e5:4c:24:0a:c1:a2:a2:0b:bd:90:4c:99:7c:18:89:03:
         c6:4d:77:f6:a0:1d:b0:38:b2:55:b3:a2:52:05:dd:c5:f2:47:
         ff:fd:f4:ad:94:5a:3d:88:2e:dc:da:1d:1d:57:17:44:e5:8a:
         ef:4d:dc:c6:8b:65:47:a0:3f:74:ec:08:ce:dc:3d:00:09:8c:
         3c:0c:2f:ee:f4:39:9f:ef:f5:48:b2:76:12:6b:ac:ad:2b:d3:
         2e:db:a5:f1:16:7c:2c:32:46:fa:54:a2:6e:cb:45:04:6d:15:
         a9:1d:2e:94:14:3f:b3:d8:6f:45:8a:f5:63:04:48:e0:4d:30:
         9f:79:fd:fc:b9:3f:a8:13:a4:4c:7d:7d:ad:4b:ee:f7:6e:af:
         61:c6:5c:bb:9b:55:83:a6:b0:f8:82:41:cd:0c:6d:ff:68:85:
         1d:6c:b7:d2:03:b7:83:09:46:15:5a:ab:da:f8:28:28:92:ee:
         7f:fd:4b:2d:19:cb:77:50:e7:27:4d:c1:14:c5:18:7d:db:6e:
         94:1f:17:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYR/cEur0RTiC1w5N/vb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZWY5YjVmMmVmMTA0M2MyZGYzMTdmODZjOGI5Mjk3MjIx
ZjhkYzMwHhcNMjUwMzEyMjIwMjEwWhcNMjUwMzEzMjIwMjEwWjAzMTEwLwYDVQQD
Eyg3YWRjMzdkYTQ4YTQxY2U2MmRhYTY2MDEyYTdiODIxNDAyNmU3N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1daI8ikSk7VtEVhLjreQ81GqT0C1
myY48sEbvMuz30S4vZgEEZML80aVvrXpAuCHGTXN5WXNuaQCCu+XXWOzfXT2HUiR
V293XDxmuRMu8DIVE3zB3pUYbS1B9FYl8Pj2DAY1osrHWP6Kk+t8Oasjn1lvYkWk
4ied9/sijOsD0k4hgrBBaly9bjKgKxhAjpxR9XX4NkxlwzOZkTT2RHPmqejvg+/C
kHzYZHAbxf3Iu780Nzfy+WpX57JewpkbN0jj4+j06o4vUjPwDMM4VdNAnFTnO49h
m+RyJqaOIim1+oSFkMTscpzbSB9C80mZNF+bdP0dd4uXvTrsBJsjmnKAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrcN9pIpBzmLapmASp7ghQCbnfRMB8GA1UdIwQY
MBaAFAbvm18u8QQ8LfMX+GyLkpciH43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgt
OTFiZWI5Yjg5MDhjLzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84YjJlNGMtNDIzZS00YTJkLTlhODgtOTFiZWI5Yjg5MDhj
LzEvQnUtYlh5N3hCRHd0OHhmNGJJdVNseUlmamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt8Og4GQ
MGX6TvuuTo2kQ+DhKox9fx9NEKq7S2WQtPVmCc4yYHux2AMhKCVgx7d6r8QIWACr
QtPlTCQKwaKiC72QTJl8GIkDxk139qAdsDiyVbOiUgXdxfJH//30rZRaPYgu3Nod
HVcXROWK703cxotlR6A/dOwIztw9AAmMPAwv7vQ5n+/1SLJ2EmusrSvTLtul8RZ8
LDJG+lSibstFBG0VqR0ulBQ/s9hvRYr1YwRI4E0wn3n9/Lk/qBOkTH19rUvu926v
YcZcu5tVg6aw+IJBzQxt/2iFHWy30gO3gwlGFVqr2vgoKJLuf/1LLRnLd1DnJ03B
FMUYfdtulB8XzA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:23 2025 by rpki-client