Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File:                     B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier:          y5CRkfXxBkqA5HWVNS/bNqa/s+xA2BHbfEHQhN+KWCA=
Subject key identifier:   09:0B:BA:F1:69:CA:C8:EF:B2:66:E9:9E:DD:F4:F7:C2:73:FA:CE:20
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer:       /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial:       018F505A88F1A536C4E78F001B5A8F1392F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number:          0BF0
Signing time:             Tue 07 May 2024 00:01:01 +0000
Manifest this update:     Tue 07 May 2024 00:01:01 +0000
Manifest next update:     Wed 08 May 2024 00:01:01 +0000
Files and hashes:         1: 9WgRkN2ksLVyB-L0_1QZSiXnpQM.roa (hash: NdSJvI428vXYNG7HSZ5y+3y+XrjC5OodbweQKP1JT8w=)
                          2: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: ORG+fdSiJ+hY8O4lijxmHvdvzhdmSQaeVwb0x5z27Gc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5a:88:f1:a5:36:c4:e7:8f:00:1b:5a:8f:13:92:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
        Validity
            Not Before: May  7 00:01:01 2024 GMT
            Not After : May  8 00:01:01 2024 GMT
        Subject: CN=090bbaf169cac8efb266e99eddf4f7c273face20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:c6:9d:6d:ab:6b:f8:51:ab:07:f5:1d:be:
                    bf:af:2a:1a:94:9c:b3:49:d4:47:11:e7:54:35:e2:
                    b5:bd:0f:c6:ae:71:7d:ae:62:7a:03:32:45:57:19:
                    0c:47:54:02:45:5d:e2:8a:63:bc:e8:46:43:d3:ee:
                    fd:0a:6d:04:86:92:09:a1:f1:e0:42:ba:f1:2d:85:
                    7b:b7:0f:2f:80:1b:8e:e2:e5:e4:30:a8:62:00:1c:
                    e4:d0:fd:3c:27:cf:34:e9:5e:63:45:32:53:6d:ea:
                    9c:a0:a0:5f:b2:50:70:4a:f2:c2:72:73:1b:fb:e7:
                    64:0c:0f:22:06:f7:82:43:26:05:ae:51:3a:45:ea:
                    82:df:50:cb:82:c6:9d:0c:2c:90:36:ac:09:a9:1f:
                    87:87:3a:cf:75:fe:01:0e:c2:fc:77:ed:91:d0:cf:
                    ca:b3:0c:37:2b:bf:9b:8f:27:92:96:9c:7e:e4:eb:
                    3a:46:a1:97:7b:8d:71:13:aa:cf:ab:be:3d:7d:26:
                    2a:a9:a6:eb:c3:ee:76:19:7c:cc:01:da:e9:24:d3:
                    89:33:8b:16:9d:37:fb:27:ac:a4:2e:7c:1c:2a:03:
                    09:8b:9e:01:70:47:56:aa:fa:66:e8:5b:64:c4:35:
                    95:35:b6:f7:e7:6f:5b:6a:68:d1:4a:4e:34:ee:15:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0B:BA:F1:69:CA:C8:EF:B2:66:E9:9E:DD:F4:F7:C2:73:FA:CE:20
            X509v3 Authority Key Identifier:
                keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:38:bb:cd:0a:8b:c1:dd:ab:90:87:00:95:aa:dc:25:18:
         70:95:a3:fb:d4:ff:9c:9e:c7:4e:5c:bb:1e:98:e8:6e:06:5e:
         40:fb:a0:95:4d:cb:09:2d:05:32:9a:01:eb:0a:f9:56:1b:8b:
         87:39:bf:65:7b:74:98:b1:71:5c:d9:d4:60:49:eb:1a:c6:84:
         42:8c:5d:ae:d0:f1:e0:7e:bb:1a:24:b5:aa:a9:72:b8:7b:08:
         ba:a6:c0:d4:c7:0a:00:06:c1:4e:21:99:ff:81:f2:a2:cd:ba:
         a8:2e:06:7b:62:86:50:73:20:3d:22:f7:1e:c7:21:19:a7:6c:
         93:dc:d5:6b:3a:de:09:6d:1f:60:fd:2f:84:9a:8a:06:2d:28:
         76:f7:a7:69:29:13:5d:70:08:03:f1:aa:69:7e:07:7a:e1:ba:
         9c:6f:6e:74:65:a6:c1:e3:f1:e1:71:f6:d9:1e:7d:6e:65:a6:
         b8:b5:4c:3a:43:d2:54:66:24:c9:47:41:7d:53:d0:73:bd:37:
         2b:56:40:95:68:b7:18:ec:34:f4:6a:01:f0:4c:9b:34:e4:8e:
         8a:1f:ba:12:40:fd:19:b8:e6:f1:ab:b4:85:1a:b6:b6:72:e9:
         9a:0d:14:f0:b1:8c:17:aa:15:48:25:06:e2:af:aa:b0:ba:68:
         6f:36:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:23:26 2024 by rpki-client on console-ams.rpki-client.org