Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File:                     BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier:          MfhEVL/Q/+0nMAU39ydf28ViBRIvEAtFTIaX9ZZ6NFI=
Subject key identifier:   0F:54:BB:8E:EC:B2:67:A7:0A:4A:C9:B9:86:7B:AB:4D:D7:A6:C9:07
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer:       /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial:       018FB4FD6D0A448E2F2B6CE6D5C3757A4D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number:          1193
Signing time:             Sun 26 May 2024 13:00:58 +0000
Manifest this update:     Sun 26 May 2024 13:00:58 +0000
Manifest next update:     Mon 27 May 2024 13:00:58 +0000
Files and hashes:         1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: TPnsPhCMnyZBtY+Z7szQS02/Pdb7MloZjYNBVsMIJEs=)
                          2: O0FaQjCRQ0JIK5OOQar3mtWT8MA.roa (hash: 54YmmN1D7Hg2VdkdbKMfGbX1y+vNrZ2lhYDbBxjjQUU=)
                          3: d1c7HRULH9tIAdlg7Fr5bJm3e1o.roa (hash: 2sCDeNMVLXYxUjd0imZUQRokYPDSfRJL/mUHPU4jHFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:fd:6d:0a:44:8e:2f:2b:6c:e6:d5:c3:75:7a:4d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
        Validity
            Not Before: May 26 13:00:58 2024 GMT
            Not After : May 27 13:00:58 2024 GMT
        Subject: CN=0f54bb8eecb267a70a4ac9b9867bab4dd7a6c907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:6f:16:13:0d:c7:62:56:ea:17:5e:73:0a:
                    e2:f4:9d:ce:72:11:52:cb:bc:ea:46:0b:f2:ea:36:
                    56:fa:27:f0:6b:6d:f3:c2:ea:30:8d:50:ef:f0:b4:
                    9b:b3:92:3c:29:69:3c:97:3f:b2:5d:86:6d:e7:dc:
                    54:d8:84:68:16:48:12:d7:08:a9:59:19:84:9b:89:
                    ae:7e:3e:c2:35:f0:ab:fc:75:69:86:a9:26:d9:34:
                    32:0c:95:21:3c:e7:cf:33:39:42:bb:eb:e2:18:8f:
                    ea:51:ff:bc:2f:c4:4f:90:8a:40:7f:20:7d:06:0f:
                    6e:b4:e3:9c:e8:b5:91:bf:09:4f:94:31:62:48:03:
                    ff:57:1f:e0:9f:94:95:6a:2f:02:04:e0:4e:8a:38:
                    24:92:5c:4f:03:2f:c8:4a:65:4f:f4:8f:8d:2d:92:
                    82:0c:cc:db:e6:2b:86:da:79:c3:0d:cf:aa:86:af:
                    2a:a7:ea:73:7b:d1:f8:0f:90:93:ab:e9:87:97:78:
                    8c:e4:7a:53:d1:ec:72:15:a1:0f:a0:1c:00:4a:f5:
                    18:52:08:8b:d8:87:ec:81:c5:e0:44:bf:67:09:3f:
                    9d:84:a8:1e:ff:95:67:9a:6c:6a:91:ef:78:4c:8e:
                    2c:69:db:12:9e:11:8e:e2:88:8e:a8:d4:17:f6:f0:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:BB:8E:EC:B2:67:A7:0A:4A:C9:B9:86:7B:AB:4D:D7:A6:C9:07
            X509v3 Authority Key Identifier:
                keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:e3:65:94:b6:b7:4d:ac:a8:26:d1:ae:4c:7f:a7:4b:19:
         0d:80:ee:4f:a8:58:0c:9e:57:d7:80:e1:e9:83:ea:c4:83:99:
         6e:90:c5:fb:42:c3:de:68:7b:76:f3:f0:0f:7a:db:71:dd:7c:
         65:18:bc:94:33:5e:84:30:48:27:0d:01:99:8c:b1:85:69:a8:
         b9:87:a2:0b:3f:d5:5f:25:27:2b:cb:6d:1e:22:bb:7f:70:f3:
         db:4a:44:9e:a3:b1:c1:8b:87:ed:d4:48:e1:ef:9f:6d:78:b7:
         b3:96:27:b2:72:05:3b:59:46:39:cc:cc:ce:c4:cd:bf:8a:05:
         df:38:77:b3:04:c0:6f:f5:80:65:05:bc:8f:ef:e2:85:31:ec:
         ac:cf:ed:03:54:ae:fa:31:ab:15:99:b4:ab:97:85:49:47:df:
         00:92:1b:8f:ba:47:e2:45:6f:82:3e:80:75:88:71:e7:e9:af:
         38:9c:fe:5b:c9:10:25:76:05:82:6d:4c:f3:29:7f:0b:f2:90:
         ea:18:d2:84:72:18:01:66:ee:3d:b7:88:ea:47:23:30:91:45:
         4e:0d:d1:f0:04:3b:2b:02:24:7f:b2:35:0e:04:2b:01:eb:80:
         8c:e1:57:23:75:f6:c6:35:76:25:70:07:2a:66:af:0e:87:52:
         6d:74:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:28:30 2024 by rpki-client on console-fra.rpki-client.org