Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          Sj4Ib4EPlXbAE9ZiM3RrNqU548YAncz9TdppDQRK4bU=
Subject key identifier:   50:6A:77:6E:6E:C3:D9:E8:83:97:68:B1:61:90:2F:50:F4:14:1C:0C
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       01940646F1FFE06751C4335A9E9C3CDA5225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          06FE
Signing time:             Fri 27 Dec 2024 04:01:40 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:40 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:40 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: Y5tzrztkAGTVzE6iZXO+HvtgX3AR9/FSEJVungH233E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:f1:ff:e0:67:51:c4:33:5a:9e:9c:3c:da:52:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Dec 27 04:01:40 2024 GMT
            Not After : Dec 28 04:01:40 2024 GMT
        Subject: CN=506a776e6ec3d9e8839768b161902f50f4141c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:27:d0:9b:53:c7:c9:b7:0a:a8:de:87:72:f7:
                    41:81:f3:45:2c:30:33:4e:91:6f:38:86:5d:43:8f:
                    e5:b6:2c:c8:07:01:84:19:f9:16:8f:e6:9e:c8:1b:
                    98:a2:8c:a4:24:f7:94:6d:a5:be:4a:f8:69:7a:23:
                    b7:10:df:3c:a0:f6:92:65:22:a5:f5:c2:7f:e5:27:
                    2e:93:68:cf:60:1d:61:12:dd:89:3c:09:22:75:f5:
                    73:e8:0f:88:ae:06:87:29:12:03:b4:a2:58:b0:69:
                    e6:a8:45:3a:84:3f:0a:fa:f5:72:b4:38:08:17:b7:
                    78:9c:b3:e0:aa:6e:e7:ca:08:40:79:a8:6c:33:f1:
                    67:73:e1:bb:82:ce:56:97:63:30:6f:61:05:19:be:
                    af:d0:4b:cf:98:b1:38:44:7c:f7:4e:e6:a4:53:5f:
                    4d:fd:3c:cc:44:6b:b0:01:f2:00:a7:09:1b:e5:d2:
                    2a:11:94:0e:ab:be:53:95:5a:42:ea:c0:ca:28:f3:
                    03:09:6d:4a:42:71:56:71:dc:c0:9e:d5:12:8e:ae:
                    e2:43:e2:db:1d:56:66:be:e1:e4:6f:12:7a:e7:cb:
                    8c:35:2c:18:f0:54:61:82:2d:e8:bf:80:ab:3e:da:
                    30:46:0c:b9:5d:d3:d9:ce:4b:cf:1d:fe:ac:46:4b:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:77:6E:6E:C3:D9:E8:83:97:68:B1:61:90:2F:50:F4:14:1C:0C
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:30:fc:a0:90:9e:c3:f1:99:ee:67:d1:e3:65:01:f2:c4:
         39:87:42:05:a6:88:97:8b:f0:bd:06:00:48:08:a5:aa:f1:a9:
         80:48:20:02:70:db:2d:60:1d:3b:3a:df:71:0d:14:d7:02:fe:
         c6:6b:15:f3:fb:86:38:ac:7f:98:ef:94:26:45:37:35:a2:44:
         ea:55:65:35:92:62:1a:75:d5:45:b5:51:78:98:7c:86:c0:fb:
         73:ed:c4:bc:f5:a5:fe:1d:a7:05:34:fb:9c:cb:f6:4f:f7:85:
         94:c9:56:ac:b3:ea:98:bc:07:1d:df:56:6f:52:7b:a5:d7:12:
         39:3b:54:c9:ac:2d:83:06:17:f3:a3:d3:22:7f:cb:6d:2d:f8:
         fb:8b:19:6b:a6:aa:0a:ad:ec:02:1a:54:a9:38:29:a1:85:5f:
         4f:69:81:f8:f6:13:59:7b:49:d5:e1:16:59:10:aa:3c:a8:2d:
         5a:a3:4d:39:c4:ed:5f:42:ef:a3:ec:52:1b:f9:bd:3c:9d:1b:
         d9:3b:04:4e:a9:8a:f1:b9:ef:f3:ee:21:80:af:70:a0:d6:41:
         1d:c6:c7:25:5c:3c:74:28:4d:66:24:e6:7c:f1:bb:d0:c6:d5:
         b9:7f:ba:7f:75:99:e8:80:a5:2f:58:23:29:1f:47:86:a6:54:
         18:59:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----