Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File:                     BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier:          M4EfW+e/RLbxI+g5dmzRwyLOOXQEudJ3eF2QrH54lQs=
Subject key identifier:   F1:5C:F1:11:C3:32:19:59:01:79:12:4D:E0:DB:D1:DC:53:B3:46:F4
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer:       /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial:       0194BABBBC4A1CB81D90F217B2FA18F432C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number:          1295
Signing time:             Fri 31 Jan 2025 05:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:52 +0000
Files and hashes:         1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: sU1YVmN/LkqX1166hH6iF1BisUTpccGtGb2rkRd8fR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:bc:4a:1c:b8:1d:90:f2:17:b2:fa:18:f4:32:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
        Validity
            Not Before: Jan 31 05:00:52 2025 GMT
            Not After : Feb  1 05:00:52 2025 GMT
        Subject: CN=f15cf111c33219590179124de0dbd1dc53b346f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:61:08:44:80:52:96:6d:28:e9:60:65:85:
                    67:51:04:ef:d1:b2:8d:e5:20:fa:5b:58:fe:75:fe:
                    f6:92:d5:29:e8:b9:68:7d:99:03:b4:2f:cb:b3:e5:
                    bd:c2:fc:68:a2:11:4f:92:f7:3f:bf:f7:27:f2:b8:
                    4a:3e:db:4e:10:5b:81:cb:51:1b:f1:45:79:c4:b5:
                    00:5d:04:72:c9:04:55:89:a5:9f:57:71:d0:cf:0d:
                    6e:82:5a:d3:2f:01:1b:6e:5e:47:c3:de:fa:9f:bc:
                    66:6e:84:b1:a1:5a:09:7c:5b:83:4f:00:32:04:b8:
                    f3:61:cd:7f:84:12:dc:01:09:2e:bc:f3:cf:52:79:
                    c1:ac:84:b5:4e:fd:21:36:aa:5d:01:1d:30:bf:90:
                    55:76:21:73:a3:e3:70:f9:5c:98:98:fb:68:03:b4:
                    1a:5c:82:00:1a:37:35:75:7a:3f:50:1d:2e:88:b1:
                    80:1f:d6:ff:14:f1:93:b8:17:bf:23:9b:ec:fd:ef:
                    78:cf:c9:75:d5:e8:28:6e:ed:92:1f:1d:b0:70:25:
                    21:1f:90:a0:06:72:8b:7a:d4:89:d2:31:30:cb:2d:
                    89:01:07:5a:a7:c4:b0:69:ff:f6:73:00:2e:5c:6b:
                    fa:46:90:42:20:61:be:88:78:02:dc:c5:77:63:f1:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:F1:11:C3:32:19:59:01:79:12:4D:E0:DB:D1:DC:53:B3:46:F4
            X509v3 Authority Key Identifier:
                keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:e1:11:f4:0c:07:6f:6e:17:13:89:31:59:f7:62:95:a5:
         55:13:93:e8:fa:9c:a9:07:ac:f0:cb:76:1f:11:90:13:c8:fc:
         09:9b:48:2c:53:20:e4:91:59:fe:80:0d:78:f6:0a:92:b1:c3:
         d8:dd:99:f6:e2:de:e8:44:dc:c4:d1:e8:40:1e:4b:fb:c6:46:
         ca:6f:1f:55:83:e3:eb:92:77:4a:cf:16:5e:45:9e:66:00:c4:
         34:cb:9b:f7:79:4d:c6:2d:c7:42:ac:48:83:53:69:b8:89:06:
         c5:8e:93:06:c4:31:14:ee:21:91:fd:42:ec:e5:93:2f:7e:45:
         2d:98:1f:cb:dc:b1:f8:97:56:6b:a3:92:6d:2b:87:92:97:c8:
         b3:aa:82:a0:13:bb:33:2e:1f:f5:19:fd:90:f7:43:75:fe:86:
         ca:b3:75:02:6a:0f:e0:b8:5f:b9:1c:16:2f:ab:9d:aa:62:a1:
         9e:24:a1:9a:7c:c6:0b:60:a2:42:f5:97:d3:19:59:98:d0:89:
         3c:0c:4a:25:c6:02:62:e6:e7:80:5b:7e:ab:d6:7e:a9:a1:97:
         6e:80:10:7d:dc:ab:24:c0:00:1c:d9:75:4d:91:c9:6e:70:f9:
         19:ae:f9:be:4d:4f:fc:0f:74:5c:63:b9:80:3e:4d:a1:ed:43:
         a2:c1:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:09 2025 by rpki-client on console-fra.rpki-client.org