Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          +QihPb1vxrLcUYX1WMVS+zdPRfgEYeSG+r7DJQFYoOc=
Subject key identifier:   0C:45:B1:70:E1:61:43:D5:B8:BA:62:E5:DE:E1:11:4B:ED:01:AD:EC
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       018FAFD895D1A90F083E2D4DCCFF8EF383CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          039C
Signing time:             Sat 25 May 2024 13:02:37 +0000
Manifest this update:     Sat 25 May 2024 13:02:37 +0000
Manifest next update:     Sun 26 May 2024 13:02:37 +0000
Files and hashes:         1: 0ENZgtloNsItLMv-0ohLJXkH4FU.roa (hash: HRJXJv+RP5Y5gK4WwoYh2rlTOq3f0Vgu33byzehSXjk=)
                          2: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: 43KywWHCkc0IjVfs3f0vOcV4VZEoknYEpFRqid/fshw=)
                          3: aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa (hash: 68lkjcJ9z/QFmgoq7nyO2oC0TgK8YEhUgXa9kTboFhI=)
                          4: h5YdmnvV1AQtSkmCWQI_s8TbR68.roa (hash: Q3KRHEm4NFuGLlfKOJgY1hSGzXdFqc7/yE81XLjJwY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 13:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:d8:95:d1:a9:0f:08:3e:2d:4d:cc:ff:8e:f3:83:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: May 25 13:02:37 2024 GMT
            Not After : May 26 13:02:37 2024 GMT
        Subject: CN=0c45b170e16143d5b8ba62e5dee1114bed01adec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:ea:a1:98:b8:79:7e:a6:27:71:f8:2f:1b:
                    7e:54:87:d8:59:f2:44:e9:7d:05:c4:22:f2:6d:9a:
                    fd:38:5d:31:f2:bc:76:9e:a8:09:fc:09:fd:5e:50:
                    66:98:6d:86:46:37:37:6e:87:55:3a:9d:5b:05:99:
                    db:4d:a0:53:af:08:75:22:46:49:5d:e6:8b:a5:5f:
                    92:72:8d:85:d0:ba:34:d1:b3:86:08:a2:d1:ed:93:
                    d7:e6:fe:7d:10:a9:f5:c4:3a:21:fb:4f:cd:94:c3:
                    12:e0:f8:2b:f4:06:d8:cd:6c:13:7c:48:74:aa:67:
                    f7:4a:cc:bc:40:7a:e5:ed:43:39:3b:9a:18:06:81:
                    61:17:ad:36:0f:0b:f6:c8:24:84:6f:b9:21:44:6d:
                    7a:8a:70:97:59:b0:16:1a:76:53:06:0c:e5:a0:b6:
                    71:58:0b:a3:09:68:cd:20:20:eb:d1:61:fe:ae:3a:
                    10:3e:38:ee:c5:fb:f2:72:3e:e6:0c:4f:10:14:38:
                    c3:85:0a:30:ca:01:ee:63:82:a4:83:58:bd:77:1a:
                    64:e9:f6:28:7f:d3:01:9d:9b:67:e4:d6:c1:84:43:
                    b3:af:b0:a5:97:84:ba:d3:ef:34:7d:84:31:20:57:
                    ed:53:dc:ac:fc:34:43:5a:77:23:2c:24:a5:e0:66:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:45:B1:70:E1:61:43:D5:B8:BA:62:E5:DE:E1:11:4B:ED:01:AD:EC
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c2:11:78:9f:85:1a:dd:e3:e3:41:24:2f:21:cf:43:b8:c8:
         55:fc:cc:08:93:d7:76:95:cf:fd:0d:b2:58:a3:80:47:bf:a3:
         64:39:8b:37:d9:40:ab:0a:32:bd:55:9e:55:87:97:6e:84:6f:
         3d:3a:c1:31:11:4e:af:7f:70:16:c4:16:0e:7c:cf:74:ac:71:
         9c:da:92:f3:da:c0:9c:65:2d:15:3a:ac:27:c9:0f:9a:34:73:
         38:32:0a:aa:5f:aa:5f:93:dd:fa:5a:14:4b:8a:a7:c2:b5:9e:
         96:92:cf:7d:27:74:a1:fc:bc:2e:b6:e5:c3:6a:91:f5:9e:81:
         9b:46:fd:8a:7f:0b:0e:04:9d:4b:39:40:f5:18:a2:9c:22:ef:
         f8:98:ee:49:84:1b:02:cc:51:90:38:72:ed:5d:98:81:ef:66:
         4f:ae:59:a7:ba:af:94:2a:dc:ea:b5:44:45:f4:18:0c:1c:be:
         e4:c3:98:7a:6c:1c:0e:8b:81:73:0b:1b:34:b2:1d:8c:69:da:
         e3:0c:a7:3a:df:bc:3e:88:c6:1b:84:7e:59:11:b9:18:b2:51:
         88:a0:75:45:9b:ba:b9:fe:30:76:d7:36:5d:c2:73:f0:50:bb:
         64:98:58:79:9f:29:8f:20:f0:c6:d7:af:e2:2f:0b:66:58:34:
         44:e4:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:33:30 2024 by rpki-client on console-ams.rpki-client.org