Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          XZR8WQNXnz03/WEHOA6cVGfDfr8uRX/I6PZFJiBwd/4=
Subject key identifier:   A0:4F:34:97:08:8D:4A:D0:DD:31:99:49:5F:BA:50:8F:BF:9B:EB:86
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       018F4B6BF36B3B2C0AC348045EFFD0BC437B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0660
Signing time:             Mon 06 May 2024 01:01:56 +0000
Manifest this update:     Mon 06 May 2024 01:01:56 +0000
Manifest next update:     Tue 07 May 2024 01:01:56 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: tDTLkf7SKUIPS6uUUzV+PTr7Fnv5beobGn7rKcmleO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:f3:6b:3b:2c:0a:c3:48:04:5e:ff:d0:bc:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: May  6 01:01:56 2024 GMT
            Not After : May  7 01:01:56 2024 GMT
        Subject: CN=a04f3497088d4ad0dd3199495fba508fbf9beb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:d4:1b:2c:b8:d4:b4:62:8e:93:d1:b0:36:
                    27:83:e2:f2:b5:c0:e2:90:8f:8c:45:cc:92:16:73:
                    06:85:61:38:70:aa:56:6a:30:cc:ba:cd:06:2d:6e:
                    db:6f:ac:51:78:c8:36:63:d8:6c:8d:76:fc:84:b1:
                    8d:33:85:43:8b:aa:00:a2:92:d4:d9:df:bc:b3:ba:
                    46:50:06:f3:45:d2:5e:73:14:2c:89:d2:20:0a:1b:
                    df:af:e9:5d:ad:0d:a4:e6:b3:ff:0b:90:de:1e:6d:
                    f7:da:98:f9:86:fe:dd:30:7f:5d:17:a8:ac:35:8d:
                    8b:31:80:b6:56:8d:55:94:6d:52:14:7c:9b:18:2a:
                    9e:9c:01:77:66:90:f6:3a:d1:0d:16:fb:6a:ce:56:
                    03:02:7a:d3:72:35:4e:43:e6:03:af:e7:d7:2e:6c:
                    fd:80:64:15:20:30:6d:38:0b:20:19:6a:e2:5f:bb:
                    0c:dc:b5:e9:c6:6d:50:73:bc:30:07:9f:e1:bc:7b:
                    43:47:86:91:24:95:44:5a:f0:c1:4d:94:0e:e3:f7:
                    ae:9f:46:6e:83:de:48:66:25:ce:39:33:90:dd:a7:
                    ea:03:8e:9c:85:8e:77:5f:3b:4c:eb:aa:29:19:f6:
                    b3:a5:14:97:19:29:02:51:89:f5:5c:59:ed:0d:a0:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4F:34:97:08:8D:4A:D0:DD:31:99:49:5F:BA:50:8F:BF:9B:EB:86
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:7a:8e:ac:b6:00:bc:25:a3:97:01:76:df:b5:5f:c4:6f:
         8b:4b:44:42:ee:d7:43:0b:67:20:c6:61:4c:b2:c3:ee:af:30:
         79:3c:09:81:7b:9a:7f:0c:73:c9:ed:60:88:7e:df:9a:d1:9f:
         e3:3a:8c:c6:e9:88:0a:ff:62:10:94:52:2b:40:5e:2a:c4:9c:
         c3:62:96:43:c7:eb:44:88:25:21:40:c2:db:7a:dc:59:64:43:
         ed:25:97:13:16:a4:8c:cf:49:d2:ea:35:29:2a:ac:b6:2a:fe:
         12:ca:25:be:12:f5:6c:3c:6d:4b:cb:f0:21:4f:40:5c:f5:80:
         96:f3:8d:6c:dc:5c:21:a5:0a:47:cf:7a:24:03:dc:bd:e1:79:
         7b:da:3d:20:18:e2:8c:b2:54:4d:06:ed:89:82:22:6a:6b:3f:
         38:fb:ea:22:87:39:ac:60:d4:f5:49:62:2f:f8:cf:a6:d7:91:
         82:4a:8f:28:05:43:c8:7e:92:68:08:b3:e1:2e:39:02:41:23:
         6d:e7:95:21:8c:70:b8:0c:c5:19:16:1e:67:b2:a5:da:16:b8:
         4b:0c:02:ef:f9:90:de:68:e4:3a:de:5e:07:ca:3f:62:6c:08:
         7a:d6:01:17:5d:e3:e7:67:36:61:65:e8:12:a9:de:ad:b1:ad:
         28:d9:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:28:00 2024 by rpki-client on console-ams.rpki-client.org