Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          m1YJJa0F+jc4ULkaPrEQ+BvmAaTmtwRtzUipHjKJB/U=
Subject key identifier:   05:D0:73:B9:F3:4C:48:79:22:C5:C8:78:33:21:E5:89:67:D2:03:CA
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       01901E21A4A35B197CB849DA71FC004E8436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          DB
Signing time:             Sat 15 Jun 2024 23:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:39 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: YZwI5JrwfxeQccEMAH0jqe7+MfaSOTq+3bG36ibBeVM=)
                          2: j5pHZJDILAzvxnw217vMUvD8Ubk.roa (hash: 17ZHEbzWuKc4HADtRyJNYCwNXyuaaUxAm031hLHyjpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a4:a3:5b:19:7c:b8:49:da:71:fc:00:4e:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Jun 15 23:00:39 2024 GMT
            Not After : Jun 16 23:00:39 2024 GMT
        Subject: CN=05d073b9f34c487922c5c8783321e58967d203ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:eb:23:7b:25:8a:92:ed:bf:31:2a:88:9b:
                    e2:64:e8:ed:75:b0:25:be:a2:eb:ef:ea:ee:61:90:
                    b7:f8:32:75:3f:86:ee:fd:da:d7:93:86:f5:29:29:
                    cb:09:19:c9:1e:28:f9:ff:b1:ab:d0:02:b8:84:62:
                    f7:1d:19:01:33:16:ee:7d:1d:48:79:11:2b:db:b6:
                    06:63:92:3b:72:1f:95:e2:06:08:af:7c:75:f7:d5:
                    3a:eb:10:04:c3:86:c5:3a:05:f9:e7:69:7c:b3:29:
                    87:c9:cd:be:c4:04:7a:47:1c:40:24:1a:d3:29:74:
                    48:60:f0:99:f0:5d:29:7c:f2:aa:0f:75:62:71:65:
                    a9:aa:a1:bc:83:cb:93:4d:a8:20:ba:43:1a:f4:bd:
                    ae:4c:c5:7f:00:b7:bf:22:65:7c:e7:17:0c:38:53:
                    4b:03:71:68:fb:c3:98:1f:d4:a2:51:9c:e5:67:68:
                    22:29:7d:67:df:0e:97:52:a9:22:4e:9b:0e:b9:1b:
                    82:d2:3d:de:6c:2c:bb:c6:52:c2:a3:28:ea:c0:15:
                    b1:44:99:2f:bb:d3:c5:1b:2c:83:61:91:28:c2:f8:
                    32:b0:60:e3:50:42:86:be:67:47:df:17:27:88:06:
                    99:88:62:14:fe:61:b4:89:98:6b:93:fc:ce:12:b1:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:73:B9:F3:4C:48:79:22:C5:C8:78:33:21:E5:89:67:D2:03:CA
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1a:62:e1:24:a1:b7:10:6c:b9:4e:38:fc:c5:4c:92:4e:fe:
         f9:ae:b3:78:d9:87:d3:51:58:db:45:09:71:c2:a1:1a:9c:53:
         65:9c:e3:a6:9e:1b:32:ca:e3:4e:f3:5e:23:fe:95:07:de:ec:
         f0:76:18:c0:79:bc:ea:a9:88:0d:2e:6e:fc:28:34:57:24:28:
         d5:81:ac:bf:77:c4:c7:55:15:2d:4d:4e:46:f4:a8:f7:63:f4:
         c7:d2:b4:e7:1e:db:70:71:bc:11:39:fb:65:d2:5b:9e:52:d1:
         e4:a3:50:c7:1f:dd:bc:4c:18:5e:c4:e9:77:4a:5d:8a:f5:04:
         ce:70:44:e8:e5:57:7e:d9:f4:bd:73:f9:83:45:16:bc:f2:e5:
         4a:31:e8:41:a4:61:c8:ee:d9:18:fa:c2:4e:fa:c4:a5:76:1e:
         53:05:8e:52:d9:bd:64:00:d8:78:ad:34:eb:76:2a:b4:64:ed:
         73:b2:4b:a5:8f:50:2e:54:8f:ae:7b:75:3b:10:1e:87:f7:40:
         39:52:9c:c7:2d:8d:6a:68:61:10:2d:ac:7c:4c:08:96:3e:91:
         e3:ea:14:60:57:78:74:19:e0:8b:da:92:ab:4d:64:bf:54:d1:
         05:43:40:cc:ff:0f:73:ba:7a:27:83:09:50:45:90:b6:cd:56:
         43:19:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:03:00 2024 by rpki-client on console-ams.rpki-client.org