Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
File:                     vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json)
Hash identifier:          eyHuKS4oMCMnqAssLnZu84qXGHTQKXU/RAeSuARIlZw=
Subject key identifier:   28:F9:09:89:E5:EC:32:07:8B:3F:CC:E6:76:DC:62:49:DB:E1:B4:4B
Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
Certificate issuer:       /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
Certificate serial:       018F874911B555FE2ED16CD7F26FAAE23C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
Manifest number:          108A
Signing time:             Fri 17 May 2024 16:01:03 +0000
Manifest this update:     Fri 17 May 2024 16:01:03 +0000
Manifest next update:     Sat 18 May 2024 16:01:03 +0000
Files and hashes:         1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: Pczitd6DpX087Rmz5mRE/E6BGhphHCnj8CJKprj8l00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:11:b5:55:fe:2e:d1:6c:d7:f2:6f:aa:e2:3c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
        Validity
            Not Before: May 17 16:01:03 2024 GMT
            Not After : May 18 16:01:03 2024 GMT
        Subject: CN=28f90989e5ec32078b3fcce676dc6249dbe1b44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:0d:ac:36:63:09:ec:3e:a4:8f:dd:e8:82:
                    57:42:ba:64:9c:1f:12:5a:69:50:09:30:bd:3d:3c:
                    c9:df:0e:f8:46:4d:af:44:0a:fe:1e:c6:1c:7c:a2:
                    16:fc:21:3b:d5:50:5b:fa:cf:d0:fa:e7:02:3f:6d:
                    75:f1:4b:39:c6:2d:ee:99:49:2a:70:03:fd:b9:19:
                    66:92:45:b4:9e:98:d0:f7:05:31:f8:e0:e6:fd:0b:
                    2d:db:c3:c4:0a:4b:88:71:54:1b:2c:4b:ff:a7:45:
                    49:3e:e1:6e:c0:a2:d6:ac:c0:a8:de:b7:7d:fe:94:
                    4c:ba:e2:93:ed:24:e1:cf:89:fb:45:cd:e7:07:b6:
                    1d:15:a0:36:0f:69:b0:2f:6a:31:e1:12:e4:e3:82:
                    97:7d:e5:dc:7b:ac:1f:49:24:0b:71:3d:53:22:10:
                    3c:32:4b:42:a8:d0:42:6f:21:4f:7f:70:42:2d:85:
                    e7:4d:92:cf:50:1d:e6:8e:ec:d8:f7:b9:4f:4f:ec:
                    41:a5:a1:2c:ef:a7:a9:b7:9d:6a:95:79:df:cb:91:
                    69:c8:f4:33:c5:4a:e5:50:7b:ea:b6:13:8e:06:1e:
                    6d:2d:4d:38:50:9d:d2:6a:a5:d7:e7:95:4a:6a:b2:
                    8b:3d:bb:d1:c9:4a:21:26:e2:c1:56:c9:9f:8e:05:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:09:89:E5:EC:32:07:8B:3F:CC:E6:76:DC:62:49:DB:E1:B4:4B
            X509v3 Authority Key Identifier:
                keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:77:74:04:47:2e:82:4a:34:f0:82:0f:45:bf:45:44:f8:
         61:80:36:a5:da:cd:07:3f:1e:73:0d:67:9f:df:37:d6:77:06:
         b2:ae:87:8e:c9:3d:14:f7:c8:2b:fe:35:02:14:94:f6:dd:54:
         a7:54:bc:66:73:2e:f7:ed:cf:f6:46:1c:8a:44:8c:47:02:23:
         42:33:f5:8c:a5:50:37:9c:f7:01:07:ac:0a:36:eb:9d:a5:4a:
         03:6b:9d:7a:07:0e:d1:c6:0c:2f:6b:d8:1c:2e:02:7d:a8:0d:
         63:d8:3f:90:ed:44:5d:a3:c5:b8:be:79:5c:87:96:0a:d9:a1:
         6c:a6:47:cd:c3:0d:cf:0a:b6:cb:54:30:e8:cc:4c:2f:3d:62:
         e6:cd:5e:46:ad:5a:9a:e1:bb:9c:b3:bc:56:f1:95:64:0d:ec:
         c1:cb:ba:6a:cd:db:4f:a6:8c:34:f9:3e:8c:44:51:29:76:93:
         13:3f:0c:42:a2:b6:ce:92:7b:f8:7f:2a:50:92:83:be:ee:ce:
         a1:01:11:e8:f0:06:11:4a:4e:3b:4a:08:6e:91:da:03:f4:42:
         93:0e:43:08:bb:a5:9c:ca:ab:a5:e1:9c:f9:dd:ca:8f:55:de:
         e6:49:d1:7a:21:dd:fd:19:82:f5:98:07:0a:99:50:f7:26:40:
         c1:c0:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:38 2024 by rpki-client on console-ams.rpki-client.org