Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File:                     BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier:          yWwziqs0mk/A0M8k2BZ8xPHI4TtgbUMYZylxIEhRQlg=
Subject key identifier:   12:B7:AD:46:C1:95:24:1B:53:96:3F:C3:A5:21:23:C1:AE:64:B0:EA
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer:       /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial:       018F3708E9A475161C4AFDF30D5C39D3036A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number:          0FBA
Signing time:             Thu 02 May 2024 02:01:21 +0000
Manifest this update:     Thu 02 May 2024 02:01:21 +0000
Manifest next update:     Fri 03 May 2024 02:01:21 +0000
Files and hashes:         1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: wygmz48qtkm/icQFa9d+9VtLxNIFCNyiCEO/SeBlI40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:08:e9:a4:75:16:1c:4a:fd:f3:0d:5c:39:d3:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
        Validity
            Not Before: May  2 02:01:21 2024 GMT
            Not After : May  3 02:01:21 2024 GMT
        Subject: CN=12b7ad46c195241b53963fc3a52123c1ae64b0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:9c:0e:9b:97:aa:6e:74:4a:a1:f6:2f:43:
                    f1:d2:5b:46:d9:7d:86:55:70:dd:e1:12:68:5a:7c:
                    06:44:69:1c:e8:5e:5b:3a:bd:9d:49:fb:3a:77:da:
                    1b:60:17:82:17:bc:fb:8b:61:7d:24:dd:3d:6d:78:
                    bd:b7:98:e5:d5:d1:d7:05:3a:70:8f:ef:f3:76:39:
                    cc:05:79:de:25:05:9a:a9:fe:35:f1:ae:a7:f7:11:
                    08:06:42:b9:5b:92:2a:64:5b:84:ff:b7:5c:e3:e6:
                    f9:06:6e:57:0c:d3:c4:a7:da:d2:49:54:4f:30:a1:
                    b0:64:07:dc:a6:10:4a:88:bd:21:45:fd:9b:07:20:
                    b6:2c:15:df:58:a1:d1:3e:d7:82:e8:63:ed:92:ab:
                    da:ce:d1:f0:d4:51:07:76:df:2a:04:c8:1a:32:3f:
                    30:83:05:9f:d4:89:bb:3f:3b:63:5b:0c:e4:b8:39:
                    54:59:7e:bf:01:7f:16:8b:85:de:b7:8c:81:0b:52:
                    e3:9d:70:5f:e7:a2:4d:05:2f:b9:11:32:20:48:2c:
                    4e:81:e3:93:92:ab:25:a8:69:29:cc:5c:2b:df:1d:
                    93:cd:3e:7e:d1:67:60:51:bb:3c:92:91:40:ac:3c:
                    00:11:37:70:6a:8a:27:1c:cb:a4:8d:a9:91:12:d9:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B7:AD:46:C1:95:24:1B:53:96:3F:C3:A5:21:23:C1:AE:64:B0:EA
            X509v3 Authority Key Identifier:
                keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:3c:a7:2a:78:17:4b:ad:94:7b:8f:70:62:be:97:bf:15:
         a7:29:95:e7:95:4d:d7:4b:e5:0d:8e:b8:47:75:1d:18:81:ce:
         30:b4:4d:4f:ee:0c:88:0b:71:d9:e3:a9:6e:c0:8b:19:c5:0d:
         0a:8a:76:f7:b6:34:6e:1a:ba:8c:1c:e3:54:a2:59:45:4a:7a:
         28:93:75:e4:3c:12:62:68:f0:25:cf:a2:a1:39:95:ed:86:c9:
         06:bb:a4:1f:c3:91:88:0f:66:8e:c6:d4:02:14:86:56:64:a3:
         36:65:08:f9:cb:5c:5e:d0:05:9d:9a:5e:20:80:63:45:b1:6d:
         c5:81:fd:32:17:50:27:1b:ee:93:4b:8b:45:96:fc:1b:60:ba:
         b8:f4:d9:7d:71:b3:47:74:9d:b2:4e:4f:f6:a5:2d:df:03:eb:
         f4:54:df:f6:b5:c6:45:06:ee:48:19:9b:22:9b:17:ec:74:d0:
         ed:ac:7d:6d:e4:07:28:f8:7b:04:36:4f:09:de:b6:fb:4b:cc:
         12:e9:f4:bd:05:23:3e:22:03:4a:c6:0a:2a:92:fa:a6:ca:da:
         16:34:3f:84:18:c0:38:2c:7b:0b:b0:df:5b:3d:b8:52:4a:cb:
         20:cd:d9:4a:4b:da:a9:64:8b:3b:68:8b:ee:19:10:c5:ae:52:
         35:9e:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:23:26 2024 by rpki-client on console-ams.rpki-client.org