Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier:          j8ZwCBcGF1us4cI2tpqM9p6MPuxNYQMQ19ytIS7u7TY=
Subject key identifier:   A0:CA:50:5F:63:14:FB:1D:D0:DD:9C:43:0D:81:61:FC:C9:6A:AD:66
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer:       /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial:       019406EB0ED2A055E97F995D01C37BA22378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number:          0453
Signing time:             Fri 27 Dec 2024 07:00:55 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:55 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:55 +0000
Files and hashes:         1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: Io3FPkrudQTp73ilsf3+twWM/DK/LHcK91WYGZ7U0Eg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:eb:0e:d2:a0:55:e9:7f:99:5d:01:c3:7b:a2:23:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Validity
            Not Before: Dec 27 07:00:55 2024 GMT
            Not After : Dec 28 07:00:55 2024 GMT
        Subject: CN=a0ca505f6314fb1dd0dd9c430d8161fcc96aad66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:aa:17:88:44:cf:a0:2e:eb:28:46:18:75:
                    c9:e9:39:df:7d:dc:a7:26:3b:c9:b4:d1:45:62:15:
                    4c:a1:fd:58:ea:3a:fb:29:bc:40:6d:c8:10:47:56:
                    f2:ee:cf:cc:e4:27:47:77:83:f0:5c:44:74:8f:9d:
                    c8:60:ec:2d:54:00:8e:89:9d:73:24:ce:92:46:2a:
                    b2:05:b3:87:90:1d:1e:27:2c:43:c5:13:bc:13:83:
                    31:c7:37:28:81:95:39:ef:41:f1:e6:e6:45:27:95:
                    bf:aa:e9:a5:2f:a0:cd:c2:aa:06:87:34:71:65:81:
                    50:04:e7:9c:d8:5c:5f:38:88:1c:68:9e:ce:ef:6b:
                    58:68:c6:69:89:7e:09:2b:5b:54:9b:86:dd:3a:89:
                    bf:b0:f1:97:79:82:85:e7:b2:8f:84:f2:cc:52:31:
                    c0:b6:56:67:76:50:46:67:12:f6:dc:71:4f:b5:da:
                    38:24:f0:a7:a1:17:bd:78:73:7c:ac:8a:2d:7d:64:
                    2a:db:99:2e:b1:11:c1:3c:57:31:39:37:39:48:63:
                    d7:c1:08:5d:bb:86:2d:6d:51:d6:c3:24:6e:97:d9:
                    02:ce:80:9a:a4:ea:d7:46:52:09:0f:87:b6:00:69:
                    eb:c5:5c:20:10:c0:f8:47:9f:2f:80:5d:cc:a5:13:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:50:5F:63:14:FB:1D:D0:DD:9C:43:0D:81:61:FC:C9:6A:AD:66
            X509v3 Authority Key Identifier:
                keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:61:67:ce:e0:df:69:0d:df:e6:e5:27:51:da:3e:7e:e7:24:
         a5:22:ea:e0:06:4b:15:f1:24:20:46:e5:6a:88:f2:ce:2b:a1:
         c8:af:fc:69:ac:be:fd:7e:94:12:83:d4:ee:60:cd:a9:f2:51:
         a8:12:22:88:43:da:51:b9:1d:1a:65:35:a3:88:7d:63:12:7c:
         f5:36:27:8a:f7:89:06:76:3b:69:27:49:d9:cc:7a:1f:9d:6e:
         e9:cb:5a:65:9c:7d:b2:ed:13:c4:63:d6:c6:70:49:d1:10:c6:
         aa:0a:66:8e:73:88:7c:8e:d7:38:98:f6:8a:d1:ff:db:ec:b9:
         7f:af:70:21:bd:e7:d3:33:37:c0:f8:e0:f5:a7:b1:aa:d1:db:
         46:1e:b8:d1:20:32:10:d9:cf:d1:9b:38:f1:e7:6c:0c:fa:03:
         61:d4:f7:22:59:f2:22:20:9a:dc:7c:c7:24:46:d0:1e:74:7b:
         9d:35:25:b4:42:38:cf:27:b7:8b:aa:30:da:20:98:4c:6f:5c:
         b4:2c:19:04:8b:62:d0:5a:2a:1e:8b:15:c3:00:ed:1d:ca:62:
         09:21:68:45:25:5b:9c:bf:b8:77:3b:34:27:99:67:d6:45:e8:
         ea:6a:04:6a:d3:d5:37:73:90:2b:60:ef:17:e5:bc:7d:f8:08:
         a0:61:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:23 2024 by rpki-client on console-fra.rpki-client.org