Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File:                     BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier:          QrhY/7k3vkYkOgWEf+8y/uGfDN0NsGcUYSmqbGhktQE=
Subject key identifier:   B7:4C:57:4B:7C:11:57:5D:44:C2:88:F0:FE:7F:E2:65:AA:F1:53:3E
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer:       /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial:       018F3BF81F72E9C73C12084C31730800F69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 01:01:07 +0000
Manifest this update:     Fri 03 May 2024 01:01:07 +0000
Manifest next update:     Sat 04 May 2024 01:01:07 +0000
Files and hashes:         1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: 6G4wooy0MbdtGRsl0ftfISuKQUn0ETC4cmxcxFnEquc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:1f:72:e9:c7:3c:12:08:4c:31:73:08:00:f6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
        Validity
            Not Before: May  3 01:01:07 2024 GMT
            Not After : May  4 01:01:07 2024 GMT
        Subject: CN=b74c574b7c11575d44c288f0fe7fe265aaf1533e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:0e:8e:02:35:91:38:9b:21:ff:23:b0:69:
                    14:91:98:d2:7a:31:e3:02:4c:a3:4c:4a:50:1c:a7:
                    cf:55:63:ee:10:a6:49:b6:bf:6d:6e:33:08:31:30:
                    ae:76:ce:f6:a2:46:42:e0:80:65:9e:0d:ab:4b:4c:
                    04:15:ee:b0:71:9f:72:90:e8:24:83:af:72:90:6d:
                    1c:42:3b:64:12:ce:00:75:7f:01:ea:75:52:a2:4c:
                    d2:7c:dc:c8:da:a7:ce:60:33:a1:1d:d0:41:3d:16:
                    f5:27:7f:e7:b8:a2:b4:7d:32:c5:31:70:bb:6c:05:
                    70:a3:df:2b:66:a8:1c:63:a1:c7:df:58:43:ae:21:
                    54:a2:80:b1:66:e5:21:69:3d:50:85:12:ba:59:e6:
                    68:f8:52:ff:41:72:b2:8a:7a:32:57:33:a6:e0:90:
                    9a:42:d8:3d:2d:9f:14:6d:12:d6:49:5b:be:e0:fd:
                    f2:1f:25:f4:e6:b0:ee:05:0e:d3:e8:59:a2:ad:33:
                    e1:3c:77:1f:fd:31:b7:3f:e7:e5:9d:2e:d7:e6:28:
                    3c:89:e0:69:e4:52:28:eb:f1:67:ac:c4:e2:24:5e:
                    b6:59:e6:03:e2:a1:77:d1:d7:69:79:41:ba:dd:41:
                    c8:3b:aa:d2:23:cf:b2:6a:63:b0:95:69:d6:06:a6:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4C:57:4B:7C:11:57:5D:44:C2:88:F0:FE:7F:E2:65:AA:F1:53:3E
            X509v3 Authority Key Identifier:
                keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:99:bd:42:e3:e7:b7:f4:fe:d8:74:c5:f9:db:f7:c6:6a:21:
         80:3c:84:d1:85:1b:12:a6:20:da:ba:8f:ff:42:c0:04:da:bd:
         c5:a0:6e:6a:7d:97:6b:ff:9b:7d:2d:b0:40:ea:ba:78:88:1a:
         5f:38:9a:11:7c:b7:2a:67:31:d8:f5:ce:cd:8a:06:0c:d5:9b:
         29:65:b7:fd:bf:cb:59:76:75:38:fb:3c:a0:4d:1b:36:9b:8e:
         53:6e:b9:0e:de:f4:d6:b2:05:62:99:79:77:67:41:71:73:c1:
         9f:bf:4a:11:18:33:ab:68:f5:ef:c9:cc:9d:9a:cb:f3:83:c2:
         c2:9f:d5:d7:c1:56:4e:dc:a1:33:07:37:c2:cb:83:bb:5d:7b:
         e4:ac:d5:a5:54:5c:62:42:6b:c8:70:ad:96:38:2d:27:0c:7d:
         c7:3d:32:76:60:7e:14:e1:ae:73:47:a6:81:04:92:c0:2b:43:
         0b:44:fc:02:16:64:1f:fe:06:f0:83:af:e4:a2:89:81:e9:a5:
         bc:d2:b0:7e:e4:d0:f0:c2:42:2a:cb:b4:b7:4f:e4:30:ef:e8:
         be:bf:d1:c7:d1:b4:7b:d9:61:12:7a:a1:7b:88:19:38:69:7a:
         05:a5:9b:f3:35:9b:14:05:f9:08:28:d6:39:af:68:c0:4a:5e:
         ac:43:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:41:57 2024 by rpki-client on console-ams.rpki-client.org