Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File:                     BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier:          0TW7JbmKfYMRjXTh9BXl+Rz4rTxwlBh+GDRblARbiRc=
Subject key identifier:   37:5B:A3:59:B5:DC:F6:2E:54:FD:2D:99:34:99:53:42:E0:C8:BE:C4
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer:       /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial:       018FA665F92C45538FEA273E762A697F5490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number:          0331
Signing time:             Thu 23 May 2024 17:00:51 +0000
Manifest this update:     Thu 23 May 2024 17:00:51 +0000
Manifest next update:     Fri 24 May 2024 17:00:51 +0000
Files and hashes:         1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: 5NDwlQPhvMeXzv5VqbnFIWIxiS6xZVARPHKjxWSEr7Y=)
                          2: qeskszLFf92erEy5IxfNDyxwzdw.roa (hash: xQX/g37jnrSJDbWtODn4//od1rW/zmfuLQ+EFKie/y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 May 2024 13:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a6:65:f9:2c:45:53:8f:ea:27:3e:76:2a:69:7f:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
        Validity
            Not Before: May 23 17:00:51 2024 GMT
            Not After : May 24 17:00:51 2024 GMT
        Subject: CN=375ba359b5dcf62e54fd2d9934995342e0c8bec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:3d:1f:13:8c:95:93:4f:ea:a9:5f:e6:29:
                    e2:0f:f0:7e:f2:e8:a5:cb:35:06:e9:8d:62:be:9c:
                    7b:fb:81:fe:44:f0:21:fa:19:22:6b:09:bb:6d:c8:
                    9a:ca:02:2a:b9:e5:e4:9c:5b:a8:13:64:8e:ad:d8:
                    03:2e:42:74:45:c6:e2:b8:91:0a:38:75:85:55:5b:
                    f7:4a:1a:53:5e:d3:40:be:27:30:5e:ff:a1:49:e5:
                    cd:c5:e7:9c:08:be:cc:09:b0:65:5a:e4:cb:f3:c2:
                    99:c7:b8:ce:8a:07:d2:ba:ae:56:80:56:85:ed:72:
                    1f:06:c9:0d:52:77:26:20:b3:51:ce:4b:9a:6d:07:
                    27:13:9c:42:f3:47:fa:30:48:87:67:bb:5a:e7:86:
                    05:c7:31:9b:2e:86:11:03:78:7f:46:d2:14:73:17:
                    4b:42:7a:45:bd:35:9a:af:d1:d0:0f:f9:15:e7:48:
                    ad:dd:d1:e9:5d:52:e2:cb:bf:2f:b4:0b:5b:91:80:
                    4a:fd:db:06:4b:89:0f:46:80:4d:e9:68:91:60:c8:
                    89:08:9c:9d:8c:24:35:0f:7a:08:fa:03:be:56:be:
                    25:a6:8b:a3:70:eb:8e:d6:45:b9:28:da:2a:49:4f:
                    1f:ba:48:b7:27:f1:56:2f:07:3e:19:cf:e1:0b:7b:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:A3:59:B5:DC:F6:2E:54:FD:2D:99:34:99:53:42:E0:C8:BE:C4
            X509v3 Authority Key Identifier:
                keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:77:82:4d:60:47:de:fc:f4:4a:99:3d:97:4e:82:2f:16:19:
         59:41:58:c6:5b:35:9c:07:b1:92:da:db:13:a1:e5:6a:e7:b3:
         5d:70:e2:93:e0:cb:48:d5:dd:53:26:92:44:84:7b:5f:c0:32:
         a9:24:82:ed:aa:1a:de:8f:d6:5e:63:45:db:35:0c:ac:a5:9f:
         d7:0b:cf:dc:e0:cf:56:04:85:ec:58:9d:49:42:27:ac:27:fb:
         50:a4:2c:4f:18:75:c1:d5:2b:0b:8f:89:5b:d0:58:5e:85:c1:
         2e:41:08:ad:1e:5e:61:ba:c9:54:9f:23:86:6b:14:5b:c9:2e:
         a6:ab:88:59:e6:67:56:b6:c8:f1:45:f2:01:94:d8:cc:d3:5d:
         97:84:40:e4:71:ec:d6:f0:51:f7:c7:c8:ae:1c:8c:0d:9c:e3:
         4a:93:ae:20:3d:ea:e1:45:7b:74:06:29:c0:9e:c0:a0:6e:fb:
         eb:6a:5d:b5:d8:03:db:09:63:45:c4:14:44:9d:0b:f6:d4:60:
         0b:23:30:5e:bc:72:d6:33:a3:7c:5d:51:6f:43:f0:b5:10:2a:
         a6:1c:f0:11:48:c7:2c:a0:28:0d:cf:2e:71:47:48:c6:72:ea:
         3a:f2:f6:ba:e6:39:e3:9e:8b:ee:ce:1b:88:d6:1c:ca:8b:c3:
         fe:fb:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:37:47 2024 by rpki-client on console-ams.rpki-client.org