Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          MoBRngElwh0bAijpH6uYpkZtBJMNnt1N4G1W2mdkx+k=
Subject key identifier:   C4:F8:5A:D1:04:7B:10:00:FE:4A:56:AD:98:5E:55:A0:09:5D:ED:C3
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       01901BFE993D48C5D1FD1C50746BE1F6E078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          10E2
Signing time:             Sat 15 Jun 2024 13:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:08 +0000
Files and hashes:         1: 92zfXVDQLL89EBP2K-ZMNz0UYkI.roa (hash: t8EQ7ZC9Vx0VZOQspRjOK6c62PQjVYqNqGtwxXCj0g0=)
                          2: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: zzGCKxtIe1ihtWKldy0WVFAmfV16AbswVzKZUjTTUOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:99:3d:48:c5:d1:fd:1c:50:74:6b:e1:f6:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Jun 15 13:03:08 2024 GMT
            Not After : Jun 16 13:03:08 2024 GMT
        Subject: CN=c4f85ad1047b1000fe4a56ad985e55a0095dedc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:b0:d4:e0:7b:eb:5a:f6:80:59:b5:7c:38:
                    d4:bf:ca:b4:b0:66:b0:8a:83:9b:ac:1f:8c:d3:c6:
                    56:ca:b2:4d:2d:58:39:2b:c5:ac:ce:c1:0d:86:8b:
                    aa:6c:5a:85:92:0c:af:1e:a8:63:35:70:0f:f9:66:
                    67:70:1d:c8:63:93:5b:95:bf:8c:39:dc:27:44:33:
                    df:1a:98:0b:89:e0:04:fa:91:4d:49:0c:ad:f5:1e:
                    e3:e8:3e:74:66:1d:67:9f:09:a0:a1:c9:e1:a3:98:
                    f7:4c:5f:24:a8:36:8c:c2:c1:9e:95:96:31:9b:94:
                    6a:99:6c:45:2c:ef:08:02:e7:95:57:3e:b7:f7:b2:
                    d0:fd:7b:aa:8c:d1:1e:07:d3:5d:16:1b:e5:6d:db:
                    96:2a:f0:24:76:6c:f5:23:e2:ba:25:f6:72:38:fd:
                    56:a0:7e:97:af:0b:83:07:7a:38:60:d4:01:7c:cd:
                    dd:f9:44:4c:7c:1c:52:98:28:38:6c:be:51:9a:30:
                    c1:22:0a:1b:91:b0:d1:cb:b3:80:31:38:53:ea:47:
                    eb:02:41:77:f1:a4:2c:fc:04:31:66:40:d7:a4:b6:
                    48:88:53:43:b8:4c:d8:d9:58:bd:16:1e:ce:e5:19:
                    2c:ce:43:89:6f:ca:8a:a2:8a:6d:7b:26:76:ed:a4:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F8:5A:D1:04:7B:10:00:FE:4A:56:AD:98:5E:55:A0:09:5D:ED:C3
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:79:e1:bb:e4:4b:25:a3:2b:bf:b0:8c:94:fc:38:cb:b6:
         1d:f9:c5:71:ae:9e:6b:33:ed:22:9a:41:82:89:f5:ff:e9:88:
         38:4e:a2:99:86:97:3b:bb:78:ac:d6:6e:86:36:b6:01:2b:4c:
         d1:16:12:45:df:d3:25:6c:cf:ac:69:d6:06:b5:ce:fd:d3:39:
         57:27:f6:d0:6a:21:2d:5d:bd:fa:68:08:aa:9a:3b:f4:f2:9a:
         48:39:69:41:87:6a:0e:91:62:ba:b4:fc:83:d1:74:3d:aa:8b:
         8f:ed:66:f6:56:17:17:4a:98:68:04:55:76:61:e1:18:f1:69:
         da:08:12:63:3a:75:cc:63:d5:e9:76:30:a0:64:e2:0c:c2:83:
         4f:20:85:4a:90:27:4e:8a:b1:19:6e:2d:51:a8:4e:49:b7:e0:
         23:a1:e4:59:da:f4:4d:1a:8b:2f:54:8d:f2:e2:74:8b:fc:0f:
         14:08:f4:f8:0c:3a:f9:d2:6f:8a:98:6a:76:ab:c0:f9:b9:c1:
         df:9f:48:34:b7:a3:c8:d7:f5:30:84:7e:78:ec:77:98:a5:4e:
         88:30:ce:34:7d:ff:30:43:be:4b:70:dc:36:39:d8:ce:28:f6:
         11:e2:02:7f:b0:4d:4b:3a:e9:37:c6:7b:44:7f:69:03:9e:6d:
         60:8c:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:42:02 2024 by rpki-client on console-fra.rpki-client.org