Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
File:                     BB0F8437DE6BB251821A7A5FB8111376F1709023.mft (raw, json)
Hash identifier:          Wq4YwoWQ8x3qg1G19bDto1ccxGqXGYIruukyUkhaW0g=
Subject key identifier:   CE:38:7D:BE:25:09:87:CC:DA:62:AD:EB:63:24:1F:8B:2B:B7:23:72
Authority key identifier: BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
Certificate issuer:       /CN=bb0f8437de6bb251821a7a5fb8111376f1709023
Certificate serial:       212FC573A26F8678CF7E83F5659C4C8EF6AF437A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
Manifest number:          02D9
Signing time:             Sun 24 Nov 2024 23:22:02 +0000
Manifest this update:     Sun 24 Nov 2024 23:17:02 +0000
Manifest next update:     Tue 26 Nov 2024 01:45:02 +0000
Files and hashes:         1: BB0F8437DE6BB251821A7A5FB8111376F1709023.crl (hash: fWO2NlYRoBy1yzDp7TdK6Ev8lI83pswgGs528ONQtI8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2f:c5:73:a2:6f:86:78:cf:7e:83:f5:65:9c:4c:8e:f6:af:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0f8437de6bb251821a7a5fb8111376f1709023
        Validity
            Not Before: Nov 24 23:17:02 2024 GMT
            Not After : Nov 26 01:45:02 2024 GMT
        Subject: CN=CE387DBE250987CCDA62ADEB63241F8B2BB72372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:c9:c8:51:21:e3:3b:82:63:91:e7:89:2a:
                    58:61:d8:b7:96:1c:3b:1e:1f:e5:9a:e0:61:fa:18:
                    92:8d:51:f1:63:14:4b:3c:d0:06:c1:f0:7c:88:9e:
                    24:a5:f4:d6:85:f3:91:98:bd:7c:5a:53:3d:c2:93:
                    4b:e2:3e:9d:0b:ac:4a:3c:29:45:cd:c1:29:c2:d7:
                    51:a7:c1:10:d0:d5:60:58:4e:32:67:93:0c:c7:25:
                    88:70:1d:73:40:e0:4b:62:6f:77:d9:78:67:5e:6f:
                    c9:b6:f4:89:a0:35:60:c4:f7:0b:4d:c8:e4:11:3e:
                    aa:47:a7:29:fd:45:b6:c7:90:9b:b4:01:d8:31:2d:
                    f4:08:94:49:8a:00:80:15:e8:3d:3b:a3:2e:97:f6:
                    c1:4e:a8:d2:af:1c:c9:16:87:f4:fe:9a:f7:d4:08:
                    7e:5c:a2:8f:cd:a3:ad:23:0e:f6:90:38:0e:77:15:
                    26:f0:08:f9:30:ed:f3:c6:7f:0a:86:08:7a:0e:df:
                    e3:91:e6:0b:64:59:39:95:68:e7:af:88:5f:a3:2c:
                    16:d4:92:6e:c9:bf:b8:d6:23:9f:67:52:f3:2d:78:
                    7d:82:ce:2a:e4:d8:88:40:80:4d:30:43:7e:3a:ce:
                    82:44:72:32:54:42:cd:61:97:27:09:66:63:c8:70:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:7D:BE:25:09:87:CC:DA:62:AD:EB:63:24:1F:8B:2B:B7:23:72
            X509v3 Authority Key Identifier:
                keyid:BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:be:f5:e5:91:6b:a0:4c:0f:d3:be:52:87:06:e5:54:11:03:
         c9:a7:28:32:38:90:38:f4:fe:27:70:3d:fd:f9:3f:23:35:bd:
         dd:d9:af:ff:6e:02:80:f0:08:44:fa:b9:db:a8:b3:93:97:61:
         3a:9c:91:32:cc:90:54:03:39:f0:5c:1a:a0:c4:40:d7:95:d7:
         f0:ca:e1:08:88:0a:8f:ab:1c:f3:40:1b:13:7e:0d:5f:7b:e0:
         52:0d:5b:a8:2f:ba:64:88:ec:05:8a:d5:9c:a5:c9:bf:22:35:
         56:fc:b7:b2:93:99:dc:13:41:4c:b9:71:04:b5:5a:5f:cb:34:
         27:03:2f:34:71:18:99:53:e9:03:db:1f:4a:d6:1e:7d:64:99:
         81:dd:b0:2b:7d:04:bd:b3:5a:0a:0f:8a:17:8d:c2:f6:f9:23:
         55:7d:c0:d5:35:8a:c5:87:99:28:0c:b5:57:28:db:1f:17:e2:
         d8:0f:9e:a1:1e:40:cc:7c:b8:23:e6:cb:d1:0c:3f:3e:e0:49:
         c6:53:65:87:4b:85:cb:c1:f0:5d:cd:9f:c0:04:03:7e:21:f2:
         d5:e2:c1:f9:9e:93:5a:3c:b3:ac:49:4b:8a:21:72:d0:53:38:
         7d:01:e0:09:51:d5:54:f5:f7:fe:49:2b:88:6a:24:ed:93:81:
         fd:74:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:46:56 2024 by rpki-client on console-fra.rpki-client.org