Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft
File:                     bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft (raw, json)
Hash identifier:          Cw8HOjVjoSWjTC4au571YQjOl+ESlT6DI8SsOWncr2g=
Subject key identifier:   B5:59:C4:0D:18:66:05:93:E2:91:50:67:4F:5D:D9:2F:C4:94:65:03
Authority key identifier: 6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2
Certificate issuer:       /CN=6e1a5543a72b515787f29e84f8f1ab4fd2f1bbf2
Certificate serial:       019235807DC2887A6A8CC2344C8527692736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft
Manifest number:          12DB
Signing time:             Fri 27 Sep 2024 22:01:06 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:06 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:06 +0000
Files and hashes:         1: bhpVQ6crUVeH8p6E-PGrT9Lxu_I.crl (hash: 28vkSOmY6zn+SboiRnlTEogitjJttMRphxmn5QgBC3Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:7d:c2:88:7a:6a:8c:c2:34:4c:85:27:69:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1a5543a72b515787f29e84f8f1ab4fd2f1bbf2
        Validity
            Not Before: Sep 27 22:01:06 2024 GMT
            Not After : Sep 28 22:01:06 2024 GMT
        Subject: CN=b559c40d18660593e29150674f5dd92fc4946503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:80:cf:16:c8:3a:4b:de:4c:9d:60:7f:19:
                    39:e9:7e:7b:da:41:c8:7f:56:64:d2:9f:80:2a:d4:
                    91:11:89:13:df:d7:21:da:82:4f:1a:18:34:5d:81:
                    c4:7b:ee:3c:53:5c:b6:5b:51:58:34:62:cf:58:df:
                    b8:08:e5:d7:e1:e0:52:cb:db:85:bb:48:b3:d6:b4:
                    58:a7:24:3f:e7:fc:60:6d:bd:13:dd:de:d2:89:2f:
                    64:9a:dc:20:20:3a:f2:7d:51:0b:0d:a5:0e:ce:65:
                    0f:b8:cb:b2:ae:ae:c5:9a:a7:da:00:01:f7:d1:21:
                    f6:4b:b1:34:cb:cc:9e:37:d4:ab:97:d6:57:7e:22:
                    2d:cb:d3:95:ae:81:42:c4:4b:d6:ff:34:1b:6e:a9:
                    c3:3c:04:83:65:94:cd:5c:17:b5:f0:64:02:c0:3e:
                    aa:ce:96:4c:e7:11:5a:99:2f:44:b2:cc:40:12:26:
                    7f:d1:99:6b:f4:cf:5b:63:c9:c7:64:ee:fe:ec:99:
                    06:5c:d7:e3:74:17:12:c1:89:8e:78:c3:6e:e1:c3:
                    2d:de:65:c2:d9:13:4f:a5:46:6f:84:4a:01:47:0e:
                    7a:6a:95:d7:a5:6a:bf:ba:bd:3e:2f:49:b2:f3:a0:
                    2b:bb:cd:99:ba:9c:d8:2b:04:24:d7:a9:f4:65:23:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:59:C4:0D:18:66:05:93:E2:91:50:67:4F:5D:D9:2F:C4:94:65:03
            X509v3 Authority Key Identifier:
                keyid:6E:1A:55:43:A7:2B:51:57:87:F2:9E:84:F8:F1:AB:4F:D2:F1:BB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/df4dd6-b423-4292-9634-accf261e5c19/1/bhpVQ6crUVeH8p6E-PGrT9Lxu_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:71:55:aa:a2:65:f0:76:09:57:f9:0f:09:25:78:46:42:62:
         b7:2f:69:68:88:2a:86:f0:79:9b:4f:82:63:5c:41:ae:9c:98:
         2b:a4:8b:76:19:07:fe:59:5d:c4:f5:89:1f:c7:f0:c9:3b:9a:
         b8:bb:61:bb:2e:c9:c6:00:b3:2e:4e:c3:b5:d2:6b:85:76:9f:
         85:22:2c:85:eb:df:a1:39:8d:ab:9c:51:16:81:01:84:f0:c8:
         80:10:73:79:08:87:c6:68:b3:35:85:34:11:15:7c:c4:aa:f8:
         f5:ca:1d:16:ea:1f:97:90:3f:cd:4b:fa:1d:b7:6f:b8:e8:ba:
         9e:ff:54:88:fb:45:53:01:7e:2e:f0:de:04:f6:cf:e3:94:59:
         b4:35:71:0b:b1:e4:eb:be:6c:20:f0:5c:b9:92:ea:71:f2:36:
         e8:43:95:df:ca:96:3d:41:6f:14:96:ef:77:d6:5e:99:2e:58:
         d7:ae:10:f8:b0:e7:91:dc:4a:19:b0:a7:c4:60:66:dc:d8:af:
         b7:20:d7:3f:ce:c3:eb:79:5a:8e:63:60:d8:38:7b:c5:f3:0c:
         97:54:89:76:7d:f8:32:b2:f6:ab:e7:3a:3d:76:21:c2:51:c6:
         2b:7d:21:e0:a7:4b:29:47:85:bc:31:17:92:87:fa:d4:d1:4f:
         f8:ea:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:36:25 2024 by rpki-client on console-fra.rpki-client.org