Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          O66VYgi8jGhi8HFCYMw2sYeykt0qV9ckmjKnKITL3TI=
Subject key identifier:   E5:9B:C2:A7:84:90:88:62:EF:85:21:63:BE:35:9A:E1:8D:21:C2:2F
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       01901DEC8A4F681735CE8C6712FAD2E84DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          105B
Signing time:             Sat 15 Jun 2024 22:02:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:39 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: fjIMMnC1FGDhDOfQwxeZLmhkZX4quFKvbrSbhHV0zPI=)
                          2: QP7YE6rhGNkXqdMC_9ivO3mUegk.roa (hash: SRdQsAt44OpOt6JNcqyzpDVM/8rOMP9eZQtFMYo2nKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:8a:4f:68:17:35:ce:8c:67:12:fa:d2:e8:4d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Jun 15 22:02:39 2024 GMT
            Not After : Jun 16 22:02:39 2024 GMT
        Subject: CN=e59bc2a784908862ef852163be359ae18d21c22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:68:d1:a0:9e:33:b2:f5:10:88:60:fa:f3:
                    63:30:c0:69:e0:c5:af:bb:45:97:98:2a:19:1d:34:
                    22:5e:46:c7:b5:44:2b:88:dc:33:9f:23:ca:bd:db:
                    77:c3:36:22:dd:25:7e:22:58:cc:40:c7:29:a0:a2:
                    6b:5b:18:9e:c3:4e:df:a3:55:2a:a8:35:c3:c3:f5:
                    8a:51:97:30:87:a9:c2:e1:40:28:01:8c:95:ec:50:
                    c9:2c:10:43:b0:92:b8:15:43:16:b7:e8:89:7c:7a:
                    94:4f:a2:88:54:ab:1f:a4:c7:bd:c2:5d:06:97:18:
                    58:c3:e6:93:67:cc:d9:77:15:2a:8b:48:b6:b2:7f:
                    c0:86:7b:75:51:cd:35:a9:b0:0c:6f:8e:52:0d:c3:
                    e2:66:c8:16:e2:e3:d4:8c:34:ad:8c:73:bf:b3:8c:
                    e1:85:64:97:09:d6:84:46:42:d4:74:f8:20:eb:a2:
                    99:f5:64:fa:ef:b7:1a:4f:68:98:f4:0f:79:d0:d8:
                    5e:57:1b:c6:3c:d1:44:cd:ec:9a:93:dd:9f:27:33:
                    ea:b9:f3:9f:dc:bc:88:2c:70:df:16:a2:fe:4c:2f:
                    c4:a1:14:8b:36:4e:0c:82:44:61:f7:02:e8:8c:53:
                    91:4c:0e:04:9f:88:71:bc:4e:13:45:5c:53:a2:e6:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:C2:A7:84:90:88:62:EF:85:21:63:BE:35:9A:E1:8D:21:C2:2F
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:93:b7:26:05:93:6d:74:3f:5d:30:f4:49:7a:66:cc:30:
         ab:ad:2a:70:f6:9d:e9:99:cb:6a:45:4b:c4:68:e0:02:ca:88:
         29:39:7c:d7:b5:aa:af:37:1d:c5:97:50:4d:b2:29:30:47:45:
         05:51:6c:44:01:43:70:07:6c:aa:b4:52:49:8c:45:6e:7a:3f:
         82:58:06:b7:10:87:30:9a:6d:e3:03:7c:3f:32:00:06:ae:e0:
         d4:de:c5:d4:c3:69:41:fa:39:61:0d:40:eb:ed:e5:20:43:0d:
         3f:20:f9:09:42:b0:29:16:ca:b3:a7:21:89:44:a0:4c:3b:68:
         dd:fb:d4:b3:0e:99:4e:68:c3:c9:2a:00:af:91:b9:34:f2:54:
         69:37:55:db:65:58:66:32:8b:56:23:4a:00:9c:77:43:5e:64:
         6b:46:46:32:0a:88:8c:d5:1b:67:58:2d:31:f8:15:73:da:0f:
         c7:44:1c:9c:ba:59:7f:37:c4:63:37:b2:b0:1b:c3:23:43:55:
         0d:17:d2:de:14:f4:fa:c7:fd:e6:b0:af:07:bf:5d:07:97:44:
         01:8c:75:3e:02:02:c3:24:dd:48:3f:dc:9c:98:03:45:55:76:
         f7:e2:b8:59:53:ba:2d:f1:e3:62:a1:50:e6:d3:48:f4:88:bb:
         40:e1:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:01:07 2024 by rpki-client on console-ams.rpki-client.org