Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File:                     BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier:          h4gjFp9G3jzImsJ2fVJVa0ruY9Y72dK74r/7/yuS5p4=
Subject key identifier:   F5:A4:D3:62:7B:8F:9C:1E:D5:AF:BF:AE:3F:65:6B:1C:96:E4:FD:E3
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer:       /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial:       01901BFF2B5377439836429D11EED08A6E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number:          05B1
Signing time:             Sat 15 Jun 2024 13:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:45 +0000
Files and hashes:         1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: CfNyXvGWAcOBcfQ/rfuEvSF7Tc4qFnT9WDL9YImCt4Q=)
                          2: D4XV9LHf6d9EoFJRi_eT_r1mRXw.roa (hash: AltbsQPx6QDuPFn/A/7bnYU+bZh4jBxePJCzRorcxIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:2b:53:77:43:98:36:42:9d:11:ee:d0:8a:6e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
        Validity
            Not Before: Jun 15 13:03:45 2024 GMT
            Not After : Jun 16 13:03:45 2024 GMT
        Subject: CN=f5a4d3627b8f9c1ed5afbfae3f656b1c96e4fde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:c9:a0:49:f0:74:bb:b4:65:f7:92:18:3e:
                    7d:cf:86:8f:dc:f4:50:2e:44:d9:0c:56:d9:15:8c:
                    ac:95:61:0d:0b:25:5b:18:d6:1e:1d:99:86:29:e7:
                    46:e2:43:f8:ae:c6:d8:4e:b4:7d:9f:93:82:b9:28:
                    99:1e:0b:a3:f1:68:6f:97:0e:0f:6a:75:ac:8c:87:
                    be:b7:2c:b9:a0:1e:ff:d2:82:49:a6:5c:47:81:ff:
                    2e:c5:3b:95:d4:09:ec:ff:da:73:b0:0b:9f:fe:b3:
                    84:8f:83:51:ee:cb:cb:2c:89:91:09:b0:54:e1:af:
                    80:85:34:44:b9:31:3d:40:e8:95:08:b9:ec:53:4c:
                    7a:7e:e1:2e:b1:bc:5e:9f:c6:61:21:16:02:d5:9a:
                    6e:06:3d:52:67:bc:c8:33:2a:b6:f7:74:dd:b9:34:
                    cc:23:5f:83:62:f6:11:2d:f7:8e:fd:61:56:79:79:
                    69:b3:0b:69:fc:91:99:dd:60:88:18:d2:3c:3e:97:
                    ae:5e:96:8c:81:8f:e0:12:5d:35:b5:de:40:2f:fb:
                    d3:a5:95:cd:6f:e8:30:f3:c9:cd:bd:d7:a5:0e:56:
                    08:31:36:21:06:ab:d2:6e:cd:67:73:d0:70:f9:f2:
                    88:72:3f:3e:71:0b:13:b9:1a:de:70:d7:eb:25:10:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:D3:62:7B:8F:9C:1E:D5:AF:BF:AE:3F:65:6B:1C:96:E4:FD:E3
            X509v3 Authority Key Identifier:
                keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:56:42:16:0a:6e:5e:5f:ed:63:b1:96:4c:27:e2:20:4c:
         38:40:18:9a:1c:42:92:3b:b5:fe:ad:d5:80:a2:cf:c1:9e:a4:
         a6:74:c7:e7:55:1c:9c:7b:f7:f6:5f:39:8f:23:60:55:16:9d:
         bb:93:6b:52:05:c5:a7:2c:c2:a3:7a:f9:43:c1:68:2a:83:cf:
         ea:8f:ef:e2:6e:79:da:20:32:d0:d1:56:02:6d:40:ab:9f:d1:
         a0:f8:6d:0f:46:1d:ed:c6:5c:b7:6d:8a:7e:77:2c:af:01:d6:
         bb:3d:0c:42:9b:13:3e:06:b8:5e:93:86:d3:3e:05:4a:bf:08:
         92:a1:9b:35:07:b8:06:b8:b3:97:36:f9:19:9f:84:cd:67:14:
         7e:39:73:78:2b:b1:9f:1f:47:78:2f:66:a8:d0:f8:0c:70:ad:
         d3:a9:f7:c6:31:08:94:43:9f:b1:af:82:30:8d:fb:43:42:ee:
         52:40:72:d0:81:0c:c9:83:4b:5d:49:1b:de:46:e9:7e:80:e5:
         7f:e3:f8:8b:fc:ec:2f:6d:59:c1:99:47:b2:92:42:59:4e:2a:
         52:39:16:15:35:9c:0f:c9:fe:43:40:36:c3:c0:8f:22:91:bc:
         ac:d1:59:9d:72:38:98:13:20:ef:52:d1:2d:b2:3e:dd:dc:c6:
         38:d2:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:09:08 2024 by rpki-client on console-ams.rpki-client.org