Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.mft
File:                     BUgabj9T_-Ep6cCTlXMDbF3rupY.mft (raw, json)
Hash identifier:          sKQP7+kYhXnaNpsobyrVA4qh8kXu962XgDw0KhFoKDw=
Subject key identifier:   1B:6E:C3:85:1F:AD:6C:AB:75:A9:8F:63:C7:C7:1B:4C:E0:6A:45:35
Authority key identifier: 05:48:1A:6E:3F:53:FF:E1:29:E9:C0:93:95:73:03:6C:5D:EB:BA:96
Certificate issuer:       /CN=05481a6e3f53ffe129e9c0939573036c5debba96
Certificate serial:       018F32BD7F2833D5448CBC21EA3F9EE72692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUgabj9T_-Ep6cCTlXMDbF3rupY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.mft
Manifest number:          07CB
Signing time:             Wed 01 May 2024 06:00:30 +0000
Manifest this update:     Wed 01 May 2024 06:00:30 +0000
Manifest next update:     Thu 02 May 2024 06:00:30 +0000
Files and hashes:         1: BUgabj9T_-Ep6cCTlXMDbF3rupY.crl (hash: QXh4EY4uv2dYV9RNG7WWS1ICCD56B2Jssxnx8sQkXpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUgabj9T_-Ep6cCTlXMDbF3rupY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:bd:7f:28:33:d5:44:8c:bc:21:ea:3f:9e:e7:26:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05481a6e3f53ffe129e9c0939573036c5debba96
        Validity
            Not Before: May  1 06:00:30 2024 GMT
            Not After : May  2 06:00:30 2024 GMT
        Subject: CN=1b6ec3851fad6cab75a98f63c7c71b4ce06a4535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:c3:f5:e4:61:db:60:b9:91:ab:f3:ce:5d:
                    b8:b0:3e:32:f7:18:31:0e:f5:9d:03:b8:f7:8a:aa:
                    c0:b2:59:52:ae:7f:03:de:cb:8d:f5:04:b3:b0:24:
                    2a:c1:ee:70:ab:8e:3b:ab:2a:06:65:08:40:c3:40:
                    0c:49:4d:cf:84:df:4b:19:75:da:ab:4e:46:50:53:
                    a5:37:2a:c1:c6:7b:88:f3:18:e8:57:54:d9:8d:39:
                    6b:09:18:f5:76:e9:0f:75:5a:ef:b8:bf:71:e6:a1:
                    83:92:40:11:ec:eb:c4:cb:54:9f:dd:a0:a2:7e:69:
                    09:4d:0d:d2:86:09:ed:9f:fe:a6:36:9b:47:73:a5:
                    19:6e:fd:b6:e4:38:96:73:a1:9b:bf:90:ae:b1:5c:
                    68:f7:43:80:a9:b7:76:b5:53:d8:59:09:25:85:d0:
                    69:ca:39:78:b9:9f:8a:a6:c4:2b:4f:d1:37:66:2c:
                    3b:fb:35:79:bc:c0:df:28:21:f2:ed:1a:e0:8a:19:
                    5a:69:0b:77:cd:25:43:df:c0:11:e8:90:00:4f:4c:
                    d5:9d:4c:74:e1:cb:0b:ae:fc:da:ca:55:9b:80:c7:
                    d8:b6:0c:9f:61:d2:e5:cf:55:22:54:38:8b:3f:98:
                    fe:81:ec:24:a6:0a:26:f0:21:b0:1e:3a:66:9b:15:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6E:C3:85:1F:AD:6C:AB:75:A9:8F:63:C7:C7:1B:4C:E0:6A:45:35
            X509v3 Authority Key Identifier:
                keyid:05:48:1A:6E:3F:53:FF:E1:29:E9:C0:93:95:73:03:6C:5D:EB:BA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUgabj9T_-Ep6cCTlXMDbF3rupY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b25d0f-07ca-4bfe-b3ac-fe3fd9057037/1/BUgabj9T_-Ep6cCTlXMDbF3rupY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d3:fc:28:72:d8:f1:25:d9:db:79:af:10:a7:2b:b0:3b:9e:
         d0:cc:33:7f:80:e7:4d:8b:7e:b6:96:79:d3:b6:c3:a2:60:13:
         b5:67:bb:f9:83:97:44:3b:08:a6:20:70:09:27:da:b2:9a:85:
         9a:c9:5d:ff:fa:39:5d:44:d1:c8:04:ad:8c:44:50:9a:1e:eb:
         67:98:e4:2a:d4:7d:a5:7a:ff:90:08:07:9a:a6:6f:bc:87:b4:
         d4:c1:3f:9b:ec:39:ad:ee:d0:15:58:d1:46:96:28:3c:86:07:
         c7:b4:11:23:31:13:39:8f:85:1e:01:e4:20:ab:1a:28:2a:85:
         55:7d:93:98:6b:69:6f:3c:09:31:52:d9:e6:4f:5e:07:62:c3:
         80:2e:01:f4:26:49:83:d4:76:a1:81:c1:4c:7f:ee:3b:bb:dd:
         fe:f5:40:2e:97:40:a3:ae:e1:60:24:06:1d:9d:ff:dd:c2:56:
         a1:1c:61:14:03:c1:1d:4c:2e:32:17:39:8c:85:ee:45:c6:61:
         ce:e2:d8:21:43:17:28:32:11:45:4b:1f:bf:7f:cf:f0:ac:8a:
         0b:b9:0f:f6:f2:47:4f:72:a1:d4:8d:b6:90:8c:46:e4:80:b1:
         01:8f:fa:68:ba:5b:5d:bf:ce:27:38:34:1c:74:66:af:61:04:
         64:a2:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 08:36:42 2024 by rpki-client on console-fra.rpki-client.org