Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          TIR9qpSKjYoeT+2TisleemUJees7dYPAvl9nOUHScww=
Subject key identifier:   40:93:77:4D:19:9F:6F:97:3D:67:73:48:8C:71:1D:9B:D5:9C:C0:41
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       0190489E33949E1F2ED7C6DD91E4CA36BEFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          F1
Signing time:             Mon 24 Jun 2024 05:00:45 +0000
Manifest this update:     Mon 24 Jun 2024 05:00:45 +0000
Manifest next update:     Tue 25 Jun 2024 05:00:45 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: ifSlmMEVj0FTXfKcotLhRpgoYYM+YMIWhchNekXYiSg=)
                          2: j5pHZJDILAzvxnw217vMUvD8Ubk.roa (hash: 17ZHEbzWuKc4HADtRyJNYCwNXyuaaUxAm031hLHyjpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:9e:33:94:9e:1f:2e:d7:c6:dd:91:e4:ca:36:be:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Jun 24 05:00:45 2024 GMT
            Not After : Jun 25 05:00:45 2024 GMT
        Subject: CN=4093774d199f6f973d6773488c711d9bd59cc041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:21:01:07:60:3a:94:d7:e9:d5:0e:49:4a:
                    3a:3b:73:b8:c5:c2:15:7a:31:ef:83:06:43:9c:01:
                    c9:79:bf:3d:88:d8:87:15:29:03:0b:f5:da:56:20:
                    27:05:87:31:e0:91:ed:a9:bf:e7:38:36:b7:e7:b1:
                    99:f0:81:77:3b:ac:f8:79:0a:99:eb:c9:04:8f:40:
                    ad:b6:f7:29:8b:3b:48:04:f8:7f:05:f8:3e:3b:d0:
                    8f:14:88:8f:2f:7a:eb:c0:31:69:2f:37:d3:a4:53:
                    70:f9:a5:fc:64:28:46:33:31:64:67:c5:57:9e:39:
                    f7:b7:30:78:90:ba:2d:2f:5c:d8:37:b7:41:9d:14:
                    69:7c:29:a4:dc:32:37:91:95:b5:b6:57:5b:85:4e:
                    5a:14:c9:69:e7:94:5f:06:56:b5:44:a8:47:57:cf:
                    3e:8c:e6:68:4f:bb:f2:85:51:15:cb:d6:93:ec:66:
                    cd:b0:4c:8b:df:54:42:c1:a5:d4:f4:1e:f0:73:2e:
                    ab:71:5f:b5:b4:43:f6:d4:75:a5:25:ba:a3:f3:b4:
                    7f:3e:3c:a2:c1:d9:e9:62:e5:f6:60:8a:36:22:e0:
                    f1:7f:5b:10:03:6d:d1:6f:dc:68:a3:17:b8:40:7f:
                    4c:ee:02:ad:0d:b4:77:c4:78:2b:3f:31:4e:40:71:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:93:77:4D:19:9F:6F:97:3D:67:73:48:8C:71:1D:9B:D5:9C:C0:41
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d5:2f:0f:7e:c5:df:e0:ce:93:e3:1e:b0:3d:e6:53:dd:ff:
         32:b9:03:d8:57:11:1c:37:0f:f4:fd:4c:26:72:da:af:7b:97:
         18:8e:1b:56:fc:1b:45:a0:84:84:fe:5c:e7:e1:7f:05:28:b5:
         3f:d2:d8:f2:ae:cb:2b:19:fa:09:15:cd:80:68:21:de:33:32:
         6b:7f:be:e3:ed:97:d5:93:48:dd:7f:0a:b0:2f:b0:97:21:87:
         05:ce:d3:20:5b:98:a6:ba:37:13:65:42:ee:76:e0:90:97:d1:
         1f:13:6b:05:ad:b4:94:d8:ac:8e:93:9d:17:36:03:c2:8b:78:
         38:bd:76:67:bf:81:b1:9a:b0:ed:fc:24:eb:da:f2:fe:2c:1d:
         59:43:dc:9c:dc:bd:7e:da:b3:4b:2a:4e:f9:12:c8:66:53:4c:
         ec:d7:d3:d0:db:f5:9c:31:7e:9f:a5:1b:cb:9c:31:54:4f:c9:
         e7:50:f1:8d:77:7b:1a:56:b2:29:d0:41:cb:a4:91:83:78:3a:
         80:4a:ae:dc:9c:8b:24:16:f2:07:9b:f7:34:80:b0:cf:f0:7b:
         86:84:e2:70:98:f8:54:b5:b2:cf:2e:af:f2:da:93:5a:49:37:
         1c:eb:3f:33:42:42:f4:c0:53:8e:a2:a5:1b:c0:e5:35:35:67:
         15:36:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:23:36 2024 by rpki-client on console-fra.rpki-client.org