Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File:                     BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier:          IEfFQGCYe+YpIVm5NqjLyNue5yusQbHkv1X3UjkAvys=
Subject key identifier:   F2:3E:CD:F2:42:A6:A5:34:B9:0D:13:FF:30:B5:32:F5:25:BA:75:44
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer:       /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial:       018F4E35E07C075EFC5244B1EBF812F68749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number:          1157
Signing time:             Mon 06 May 2024 14:01:44 +0000
Manifest this update:     Mon 06 May 2024 14:01:44 +0000
Manifest next update:     Tue 07 May 2024 14:01:44 +0000
Files and hashes:         1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: JTZu0hBVz/BIuCMakjyD41L4kTZNZVjxuBgwmUz7gbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:e0:7c:07:5e:fc:52:44:b1:eb:f8:12:f6:87:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
        Validity
            Not Before: May  6 14:01:44 2024 GMT
            Not After : May  7 14:01:44 2024 GMT
        Subject: CN=f23ecdf242a6a534b90d13ff30b532f525ba7544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:59:05:ac:dc:87:92:10:41:52:60:eb:78:
                    db:2b:fa:83:31:27:2e:14:4a:12:b5:5e:6b:d2:80:
                    ab:c6:78:6a:bd:ae:a4:0e:92:5f:7c:c1:63:04:45:
                    57:07:d1:fd:7b:2a:fb:67:03:25:34:05:f0:87:db:
                    3d:d3:b9:0a:60:93:5b:03:be:6e:50:27:ee:a4:f7:
                    fa:17:58:8e:7b:cb:48:6e:dd:48:66:78:3b:a9:89:
                    9a:79:b3:ee:31:d1:15:b5:42:fc:96:78:77:ed:2c:
                    34:02:b9:d3:e0:34:5d:62:7e:42:b0:73:a3:00:f5:
                    f9:38:91:91:af:a5:32:e9:3f:55:36:57:76:8d:8b:
                    39:4b:22:a5:d7:97:dc:99:42:cc:29:b3:35:e0:a5:
                    a2:d6:43:c7:11:c7:37:92:d8:1c:a4:59:4a:4f:08:
                    be:5a:ad:f1:19:5c:25:5f:f9:2e:06:64:34:f3:72:
                    3f:18:3e:0e:04:8c:c3:ed:2e:72:84:e5:71:46:ac:
                    04:d7:44:bb:39:c3:e8:7f:a9:29:a2:31:1f:65:9d:
                    8e:7a:d5:d1:4f:d0:5e:81:83:1c:7b:6b:83:6f:68:
                    6e:12:1a:5d:1b:aa:94:8e:06:41:12:7c:ba:56:ce:
                    e7:0e:84:7c:30:4b:67:a9:8c:1a:fb:53:aa:8a:17:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3E:CD:F2:42:A6:A5:34:B9:0D:13:FF:30:B5:32:F5:25:BA:75:44
            X509v3 Authority Key Identifier:
                keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:cd:ac:05:12:cb:86:1b:c6:40:44:20:fb:66:36:11:92:
         c7:10:56:f5:58:88:7a:0e:ab:be:fb:64:4d:59:a9:aa:50:2e:
         3b:53:2d:8d:a1:93:74:38:c5:60:77:95:e3:74:68:a5:73:ff:
         40:9b:d9:65:89:b1:87:12:5e:92:db:f2:ac:24:09:64:60:da:
         d5:8d:0e:a6:9e:55:81:6a:a8:b2:22:6d:db:05:02:21:bd:07:
         00:fd:45:65:e4:91:3e:a4:48:a4:89:a6:21:0b:28:db:c6:9c:
         0d:f5:fb:b5:f9:c8:b3:fe:ca:d2:54:6a:de:7f:59:eb:16:dc:
         a7:f7:fd:e8:99:d4:f5:15:8d:0d:c7:94:47:dc:67:55:50:2e:
         d2:17:0c:25:78:42:aa:e5:ea:fa:5d:b1:60:cf:58:ec:51:25:
         b5:16:49:47:91:2e:30:21:08:69:a7:04:24:c9:57:c4:46:9c:
         fd:07:3a:84:63:44:c1:32:c3:df:86:9f:c2:86:26:35:04:0c:
         60:f3:d9:f9:b6:c4:98:92:09:bb:01:06:f1:6d:1e:f4:c8:be:
         93:25:11:65:29:0c:28:b8:2f:ac:31:f5:63:e9:6f:ff:86:42:
         d1:4a:cf:9a:7a:c0:1b:47:c4:67:13:4c:18:3b:6b:6c:e7:eb:
         b5:c7:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:07:39 2024 by rpki-client on console-ams.rpki-client.org