Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File:                     2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier:          GQuAaY0aJd6QyWQy6Wf/L14WN08BST6zhkG3c2/i3zg=
Subject key identifier:   57:E1:BE:F9:5A:0D:3F:FA:E2:BC:12:55:3E:51:DB:EA:DB:DA:08:83
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer:       /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial:       018F4D2296D12A9AD2C7FC654262CE0A91D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number:          101F
Signing time:             Mon 06 May 2024 09:01:03 +0000
Manifest this update:     Mon 06 May 2024 09:01:03 +0000
Manifest next update:     Tue 07 May 2024 09:01:03 +0000
Files and hashes:         1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: 70G/LYICwDrdwlQZrFxO6EnaXSFiPoBlmEu9DGcvXCE=)
                          2: 2ioC9qLnmCv_izZDaQMBnP1DeWk.roa (hash: IiQ2i70Zk1GkM6tabpwi5/SwibcbjGsWqgHpstpehjM=)
                          3: ltEcjxtPYj3fDIdTcItwITTs5U0.roa (hash: JsVTUEfnZW0KswuKj7jbyCjdLji2Vh7z72Z2KUhrkdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:22:96:d1:2a:9a:d2:c7:fc:65:42:62:ce:0a:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
        Validity
            Not Before: May  6 09:01:03 2024 GMT
            Not After : May  7 09:01:03 2024 GMT
        Subject: CN=57e1bef95a0d3ffae2bc12553e51dbeadbda0883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:c0:87:ea:a5:f3:3c:b3:d4:6b:2c:c9:16:
                    c6:6c:2b:6d:92:a4:3e:5b:b3:31:0d:03:cf:96:cd:
                    f5:2c:45:8c:d5:35:b2:c7:dc:f1:75:65:3d:f9:44:
                    9b:aa:91:5b:5d:03:a4:a7:29:e4:e1:1f:5c:5f:8b:
                    57:48:fb:a0:fe:d5:67:ed:bc:e2:17:82:78:84:92:
                    3b:3f:7b:b3:99:b0:bf:19:64:9c:c0:71:05:13:dc:
                    6c:50:a9:d8:63:34:60:83:4e:8b:04:c3:a0:48:61:
                    c5:9d:2f:3a:5e:02:7b:13:6b:1f:6e:7c:3b:ce:78:
                    2b:c6:0b:56:c2:5c:a3:5b:7e:43:92:16:41:1d:ca:
                    65:de:84:cd:53:6a:e0:58:d4:9a:7c:b1:80:28:c1:
                    e8:60:38:eb:5a:52:a0:99:fd:5f:92:89:c1:02:41:
                    a1:be:e3:31:44:ef:84:1f:a3:ee:8d:59:20:78:08:
                    3b:91:aa:a9:bb:5e:d9:c7:56:d5:f9:80:d8:ae:20:
                    00:6e:17:a7:a0:00:c5:ac:1a:88:9b:ea:11:78:30:
                    04:37:1e:97:9a:34:cf:6d:8b:89:72:c7:de:00:35:
                    89:96:4f:a0:5f:3d:6b:57:39:93:3c:b6:56:bb:33:
                    7b:51:b0:70:19:aa:1a:74:3b:a1:02:31:7e:2c:48:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E1:BE:F9:5A:0D:3F:FA:E2:BC:12:55:3E:51:DB:EA:DB:DA:08:83
            X509v3 Authority Key Identifier:
                keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:04:bd:55:b6:b5:f6:14:f5:33:6c:5e:3d:c0:b8:32:fb:0a:
         ac:ab:8c:5e:03:04:02:d1:d7:93:21:f9:30:d5:f2:75:a6:d4:
         62:37:30:62:0a:13:d0:b6:37:fe:ba:ea:56:3c:44:e2:48:a6:
         5d:c0:79:ab:b1:ff:d3:c5:47:65:c3:1d:18:ac:3d:4f:ce:38:
         46:53:91:3a:d2:50:27:8e:f2:81:5c:2c:6a:21:8d:d7:74:46:
         b5:a6:c6:6d:0e:02:e9:94:9d:34:06:67:3b:75:37:03:1f:e3:
         a3:d6:b5:c7:85:98:2c:bd:3e:81:7e:bb:44:50:50:54:77:b5:
         1f:8c:06:3b:05:cd:db:fc:9a:30:62:7b:17:f3:50:5d:bc:18:
         3d:9f:65:d3:0d:b5:6b:d8:91:de:dd:25:2b:1a:18:ed:c4:37:
         44:b9:8f:66:df:c0:9b:9c:b7:e0:93:5b:4e:18:03:94:1d:0a:
         9d:34:9b:3f:08:4c:35:47:2c:f6:03:7d:69:dc:df:ea:f2:4d:
         82:1f:e8:1a:fc:13:23:eb:e9:8c:d6:42:1b:2c:64:c5:04:cc:
         e4:d7:e6:83:26:9e:cf:7a:97:2a:49:0a:14:91:ce:69:4f:67:
         6e:5b:c3:18:f4:59:a3:4b:af:13:0b:c6:7d:0f:6c:c9:3f:15:
         bc:ca:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:43:10 2024 by rpki-client on console-fra.rpki-client.org