Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
File:                     bgE5p90AvHR-C-c-5yiIC4FVAIU.mft (raw, json)
Hash identifier:          qhxhn4IdpvIPGPNXBTq7oPzSJy4427TD6Lb8fjUw3yM=
Subject key identifier:   11:68:2D:43:3F:2C:50:9C:82:E7:7A:73:EF:A5:AE:91:F5:F9:C7:F5
Authority key identifier: 6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85
Certificate issuer:       /CN=6e0139a7dd00bc747e0be73ee728880b81550085
Certificate serial:       0193579BCEA4EF2205FD176DF899092739B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
Manifest number:          0307
Signing time:             Sat 23 Nov 2024 06:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:48 +0000
Files and hashes:         1: bgE5p90AvHR-C-c-5yiIC4FVAIU.crl (hash: TGDEfNA5FhTUiL0R8ztmoh7wtjXcx9XBzqGJ7f7rCEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ce:a4:ef:22:05:fd:17:6d:f8:99:09:27:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0139a7dd00bc747e0be73ee728880b81550085
        Validity
            Not Before: Nov 23 06:00:48 2024 GMT
            Not After : Nov 24 06:00:48 2024 GMT
        Subject: CN=11682d433f2c509c82e77a73efa5ae91f5f9c7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:9a:40:bf:6e:f1:d6:9a:e4:19:55:92:f1:
                    9b:78:3f:7b:ab:1f:6e:6e:ac:58:c5:19:31:b7:e5:
                    bf:46:c0:04:b4:ed:75:5d:1f:16:e5:8c:35:1a:54:
                    51:35:d9:73:f0:ba:0b:e8:e5:bc:df:11:fb:0b:14:
                    07:b1:d9:aa:2b:08:f5:16:87:e3:ac:29:0c:cf:a4:
                    68:e0:5e:01:40:9b:a6:72:f6:b5:09:40:39:bd:1a:
                    02:f3:4a:bb:33:88:91:f0:bc:e9:a0:0e:f7:a3:e4:
                    c1:65:c2:fd:96:ed:fa:40:a4:d0:f4:ce:3e:9d:97:
                    b4:e0:bb:52:f2:84:1d:78:03:f0:9e:9a:84:9e:de:
                    c4:49:b6:89:35:ab:c9:69:4e:f8:42:0c:9b:9a:5a:
                    47:5e:88:6d:9c:8b:46:13:b0:4d:0e:fd:03:42:6c:
                    ea:7a:ed:9b:08:27:23:d4:dd:99:77:be:61:2d:81:
                    ba:38:fd:5e:35:3b:a4:ad:0f:a0:08:f4:9f:68:07:
                    c6:f8:5d:f6:d2:26:74:06:f8:be:93:32:a3:d2:65:
                    00:98:7c:4f:62:df:c8:f0:52:4a:0d:da:bc:c7:4e:
                    96:9b:3f:0a:d6:09:26:83:ef:44:c1:4b:7b:56:cf:
                    a7:11:a7:9d:c0:d2:52:00:5b:15:66:d9:76:5f:14:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:2D:43:3F:2C:50:9C:82:E7:7A:73:EF:A5:AE:91:F5:F9:C7:F5
            X509v3 Authority Key Identifier:
                keyid:6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:af:4b:0e:34:a5:f2:28:f8:9b:c6:02:fb:e9:ca:f5:81:
         19:c4:21:f8:8e:4f:69:ab:8b:11:fa:a0:98:e3:71:f7:3b:14:
         45:35:34:32:a3:3a:84:4f:0b:5b:f6:57:85:1a:78:24:89:12:
         86:0d:90:54:99:5c:7e:15:52:3a:9d:36:5d:f8:7e:e4:7c:63:
         a2:70:8f:47:b3:e6:2b:fc:db:48:5b:e5:1b:06:76:88:dd:a9:
         7c:b2:07:11:79:98:66:03:6f:9f:80:47:ed:c1:fa:bf:29:b8:
         bc:fe:89:17:2c:17:57:fd:ea:d3:45:cd:47:89:53:62:a0:b2:
         57:19:96:42:30:4e:4f:fb:91:87:e5:be:1d:ac:43:15:4b:f0:
         0c:61:2e:8d:be:d6:e6:16:2b:79:1f:ba:bc:39:ab:46:36:ab:
         fe:55:b7:92:86:c4:72:b6:e5:84:64:80:72:42:45:03:e0:2c:
         82:b4:76:57:67:1e:af:63:97:07:73:da:98:56:f6:d2:28:54:
         c3:a1:30:8f:6f:74:b1:93:02:13:b3:48:7d:32:73:f0:20:44:
         62:4d:b5:08:3f:48:67:15:ca:22:63:32:d8:2c:0b:76:31:de:
         7b:94:6a:d9:64:84:96:8f:41:76:5d:d4:ac:b9:a9:99:89:37:
         5f:f5:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:57 2024 by rpki-client on console-fra.rpki-client.org