Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File:                     BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier:          mBUhilzFqro1JYnqW6kJr6XJG5h9YPEciXAgQWqLdBo=
Subject key identifier:   6F:7E:D3:0A:F6:7B:93:9C:BC:7F:83:7B:FA:83:2F:6D:7B:55:27:54
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer:       /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial:       018F5136B91FCD064038DAEF423ECE1FF9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number:          049C
Signing time:             Tue 07 May 2024 04:01:31 +0000
Manifest this update:     Tue 07 May 2024 04:01:31 +0000
Manifest next update:     Wed 08 May 2024 04:01:31 +0000
Files and hashes:         1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: cihZH19q+5TVhrK+YNeZjQKejGE4SeW6oix3mEtZ6m8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:b9:1f:cd:06:40:38:da:ef:42:3e:ce:1f:f9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
        Validity
            Not Before: May  7 04:01:31 2024 GMT
            Not After : May  8 04:01:31 2024 GMT
        Subject: CN=6f7ed30af67b939cbc7f837bfa832f6d7b552754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:d7:04:18:da:c7:3c:ff:68:fd:ad:37:1a:
                    da:2c:0d:34:37:75:22:1d:33:7d:3d:3f:f6:31:c8:
                    a7:51:41:a1:20:dc:73:78:d2:40:13:15:63:44:53:
                    c3:07:d2:01:4a:3f:1a:8c:84:c4:d1:12:9c:f0:b9:
                    f7:a4:1d:9e:5b:e5:e8:5f:0d:a0:e7:87:30:83:4d:
                    75:6c:9a:61:53:c2:16:32:f4:04:87:0e:51:20:da:
                    d8:6e:bc:7f:16:24:e4:0a:49:2d:b7:0e:1a:90:dc:
                    bc:28:33:97:0f:92:94:89:f3:80:ac:ab:b6:09:16:
                    30:71:70:5a:a6:5e:15:bd:13:f8:84:20:8e:d7:e5:
                    25:b2:1f:3b:b5:27:23:2e:a7:41:e7:ea:c4:3b:9b:
                    bb:f1:66:8e:6e:9a:ed:54:9b:82:20:16:be:94:1e:
                    7d:bc:5a:14:84:d3:6d:e1:cf:88:62:31:38:85:64:
                    9c:85:c5:8c:9b:87:67:b0:a5:7a:5b:70:f0:5b:14:
                    32:10:56:59:6f:fc:9d:1b:ef:23:99:d5:68:18:f4:
                    a9:52:30:f3:3e:e6:85:50:5d:71:d7:57:d2:50:03:
                    f7:5b:fc:c1:96:4c:64:7e:b5:5e:cb:a5:70:7b:db:
                    82:8d:5a:c9:8d:65:21:2a:3f:ed:0d:4a:7e:cc:d1:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7E:D3:0A:F6:7B:93:9C:BC:7F:83:7B:FA:83:2F:6D:7B:55:27:54
            X509v3 Authority Key Identifier:
                keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:e9:2b:d2:84:0e:6e:e0:3c:2f:0a:68:8e:0e:1f:4d:ff:
         96:f2:d1:5a:6c:05:02:05:67:78:16:90:4a:c2:0d:e0:c3:d0:
         5e:5c:24:ea:90:de:37:7e:ff:2a:17:89:72:96:d1:7d:38:18:
         4f:4d:fd:31:49:84:64:0b:44:40:6c:19:af:fa:b9:ef:87:72:
         bf:89:cb:da:6e:cd:25:d0:6c:94:eb:21:e5:fe:b0:dd:99:06:
         25:d8:84:26:67:a6:90:98:73:cd:57:70:27:12:08:ed:d1:0d:
         22:b0:a2:d5:4c:c3:5e:9b:33:e3:13:18:3a:8d:87:92:4d:4c:
         ad:6c:31:2b:af:bf:81:9f:10:b2:e2:00:b9:f0:60:e2:e1:ee:
         ac:f1:88:03:89:02:d7:5f:a0:ce:cc:3d:49:4d:b9:3b:ec:86:
         3f:a9:17:d7:35:f7:d2:99:b6:16:bc:a4:c6:f6:19:7a:be:5d:
         0f:70:a4:2b:01:53:22:4c:99:3e:d1:2f:22:21:c1:4b:4d:9c:
         a7:0e:db:ab:5a:0f:00:5f:09:15:35:27:fc:7a:74:9a:1e:04:
         c1:cb:48:94:92:9c:16:78:57:a5:59:ee:98:3d:00:d9:ee:82:
         25:4e:6a:e0:e3:68:4f:e2:e7:08:f4:68:33:b0:b3:65:58:cc:
         9d:8a:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:51:26 2024 by rpki-client on console-fra.rpki-client.org