Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
File:                     BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft (raw, json)
Hash identifier:          dd/P//5qlOoMvqWuJCJoD+eUx6xbITtaQdaa9dsZ3WM=
Subject key identifier:   35:64:50:45:72:06:48:8F:B2:41:6D:E5:2C:3B:9B:6B:8C:5E:BD:33
Authority key identifier: BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68
Certificate issuer:       /CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
Certificate serial:       0F94AEACAAEBF8BECCDB1CFA5185C5D90CCE60A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
Manifest number:          0183
Signing time:             Fri 22 Nov 2024 01:11:19 +0000
Manifest this update:     Fri 22 Nov 2024 01:06:19 +0000
Manifest next update:     Sat 23 Nov 2024 03:39:19 +0000
Files and hashes:         1: BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl (hash: BnZnuJTdRkbeqHmiyngtXvvA6KtD/Un6DRR80wWCAYI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:ae:ac:aa:eb:f8:be:cc:db:1c:fa:51:85:c5:d9:0c:ce:60:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc09f1508e1bc11beecb808e5b01e6f5db8d8168
        Validity
            Not Before: Nov 22 01:06:19 2024 GMT
            Not After : Nov 23 03:39:19 2024 GMT
        Subject: CN=356450457206488FB2416DE52C3B9B6B8C5EBD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:ef:ac:6c:f8:98:31:d6:1f:a6:5b:ed:7c:
                    fb:b3:02:21:31:0a:51:8f:50:24:a1:de:a3:df:82:
                    8b:c4:94:1d:b9:a4:de:cf:a8:d5:da:d7:9d:e5:c5:
                    aa:61:75:e1:15:77:d0:a7:79:1a:2e:72:46:ce:d5:
                    40:d6:41:8f:09:fc:44:c1:1a:e9:5a:56:8e:67:08:
                    1c:3f:25:95:21:3c:c2:fa:e3:6b:7d:84:89:ff:65:
                    14:2e:24:e7:ab:4c:ea:91:91:2d:67:80:11:46:b0:
                    1e:56:97:31:c8:76:08:85:cc:41:b3:a6:50:75:a7:
                    b7:f0:53:f9:d6:a0:38:b4:e6:84:e3:4a:19:84:f2:
                    7c:b0:d7:bf:70:e9:13:f9:19:36:6f:d8:2d:ee:eb:
                    53:26:5a:bd:3e:f0:1e:ae:88:1d:92:7e:e9:42:d2:
                    12:d2:7b:3b:65:97:e5:ed:84:f3:22:48:04:a1:e8:
                    27:4a:28:1d:ce:29:92:f1:ca:28:08:8f:37:8d:72:
                    ca:61:d7:b7:68:bb:d0:2e:18:ec:d8:9d:a3:3b:37:
                    62:27:91:9f:ad:70:81:fa:3b:56:91:6a:60:7d:a5:
                    d2:eb:9a:64:20:87:e1:08:75:72:31:7e:eb:3d:f0:
                    26:54:e2:49:5b:46:83:4e:cf:ce:f9:d0:d0:2a:cb:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:64:50:45:72:06:48:8F:B2:41:6D:E5:2C:3B:9B:6B:8C:5E:BD:33
            X509v3 Authority Key Identifier:
                keyid:BC:09:F1:50:8E:1B:C1:1B:EE:CB:80:8E:5B:01:E6:F5:DB:8D:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAnxUI4bwRvuy4COWwHm9duNgWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/0/BC09F1508E1BC11BEECB808E5B01E6F5DB8D8168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:90:b9:e8:8a:59:6f:91:ab:02:9f:06:e7:a4:32:3a:67:e3:
         cc:95:89:7b:b4:64:b5:07:28:81:cc:dd:4e:f1:c4:a4:c9:3b:
         2b:e4:4e:ae:9e:d3:88:8d:48:77:ca:20:de:cb:55:da:47:5a:
         eb:87:24:d0:6b:41:cb:f2:fb:59:78:5b:79:73:44:3d:86:bc:
         67:33:d8:02:8e:ce:bb:59:c7:f0:c9:6e:38:ac:00:2d:3a:be:
         58:6a:85:29:bb:2d:2f:88:0f:6b:60:d6:73:37:be:7b:0b:61:
         b4:15:af:b0:ae:63:4b:b0:50:a0:f4:3e:fc:5a:4d:6f:49:40:
         0e:16:64:8b:9a:e8:28:b0:34:5f:f7:4a:0f:c7:58:6e:3c:83:
         d0:da:26:20:2e:33:b0:50:31:79:53:de:ff:81:18:db:fa:90:
         76:de:2e:79:63:95:8f:b6:41:8f:78:0f:9c:fb:26:d0:00:13:
         b4:32:70:54:73:73:83:b4:42:72:17:df:4e:14:67:6a:a7:cc:
         5c:e3:f6:e5:fa:c0:6d:aa:e0:3a:69:73:b6:e7:ae:8a:f0:de:
         f7:78:9c:0d:6b:52:4a:19:2c:bd:aa:6e:5e:aa:ca:32:39:2f:
         9b:27:a6:bf:65:36:7f:04:81:5f:4a:6a:03:4e:e6:6e:54:0d:
         ce:c4:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:52 2024 by rpki-client on console-fra.rpki-client.org