Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          5SBXc1RrY+1YjGTJ0LYzXFD1jy/JdqmsM+Z7MkNHxxk=
Subject key identifier:   ED:00:CE:5B:C6:F5:B1:31:96:A6:D5:3B:ED:26:15:49:07:38:C0:0C
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       018F2381D0EDCD304E54ADF6050CFB8B9AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          069D
Signing time:             Sun 28 Apr 2024 07:01:01 +0000
Manifest this update:     Sun 28 Apr 2024 07:01:01 +0000
Manifest next update:     Mon 29 Apr 2024 07:01:01 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: 6RP54qhC/IS6eVEJkZkDVOnuXCcfVpa1ub6267zOWPk=)
                          2: vJgUDRT0VJUzHUHFN97iiU3TDkA.roa (hash: vTKHHBju4vil66F96TciXhxcZaHfO/s7BZAkwR4IJUQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:81:d0:ed:cd:30:4e:54:ad:f6:05:0c:fb:8b:9a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Apr 28 07:01:01 2024 GMT
            Not After : Apr 29 07:01:01 2024 GMT
        Subject: CN=ed00ce5bc6f5b13196a6d53bed2615490738c00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:96:0d:a8:e8:a5:37:40:7c:20:55:ec:ff:
                    4f:34:a3:a7:21:7b:c7:08:82:2c:f5:ab:ca:d1:11:
                    12:df:69:51:a1:d3:5d:df:e3:6e:36:2e:0a:7e:21:
                    a0:ba:d0:3b:7e:29:0b:81:f0:86:cf:7c:13:6c:ac:
                    6d:1d:9a:93:ac:3c:57:ca:f9:9a:91:c7:f3:d5:d9:
                    f7:32:cf:3e:ed:b7:4c:8b:fd:52:fc:ef:87:99:62:
                    7c:49:6b:c6:1e:b1:ef:a0:1c:f5:2b:24:9a:9f:5c:
                    1c:62:e3:f3:f0:31:f5:c2:1d:61:c6:62:74:c7:cc:
                    1e:c3:e9:68:f9:9c:dd:69:54:c8:11:97:93:23:83:
                    16:18:ea:8c:23:24:a1:5f:23:18:06:a4:76:4b:1b:
                    96:fc:5a:d0:df:9d:c2:ad:73:9f:13:ae:0f:df:ee:
                    de:b4:01:7c:ec:4a:23:c7:fc:e4:f1:0e:61:c7:c6:
                    6c:06:2e:9b:4d:65:e5:e3:b5:a3:16:77:fa:30:9b:
                    20:c5:c2:e7:f0:47:80:1d:97:c2:af:10:12:62:f1:
                    b1:32:d9:0e:54:a0:0e:90:ff:7f:11:23:53:0e:71:
                    d8:5f:63:04:62:e0:d2:c5:5f:26:bb:e5:f5:27:b2:
                    23:62:92:6d:6d:a8:4a:80:b4:c0:f8:eb:3f:31:5b:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:00:CE:5B:C6:F5:B1:31:96:A6:D5:3B:ED:26:15:49:07:38:C0:0C
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:94:5c:a3:67:38:46:bf:75:05:13:c5:8b:29:11:9e:9a:
         fe:42:4c:52:15:66:6b:dc:4f:86:34:3f:e6:dd:54:8f:c7:a6:
         fc:70:84:c3:41:e5:1c:fe:96:8b:39:9c:0a:60:0d:85:86:af:
         47:8e:72:bf:5d:a6:ae:11:e8:11:d2:93:9d:82:6c:15:13:bb:
         43:53:26:8f:98:8b:66:72:cf:58:07:1e:64:03:52:fd:76:c3:
         0c:7e:1e:54:f3:33:1a:63:0b:0e:ba:78:1a:75:4c:32:dd:91:
         a4:5b:ab:c3:7e:a6:6b:8e:67:db:57:4e:36:f9:ff:16:77:7c:
         f0:75:ac:55:38:17:0d:06:8f:6f:90:9d:e5:e8:98:6e:c3:75:
         23:13:4d:3f:34:17:63:94:e9:f4:17:8f:e7:fc:93:69:98:8d:
         df:ba:17:b8:ae:14:02:df:0d:80:e1:18:d6:c7:33:8a:31:f5:
         ed:c9:ac:2c:2e:00:00:6e:22:29:86:57:f5:b8:fa:4f:a9:b7:
         3e:37:a7:10:3c:72:9e:62:2c:fb:a6:da:e0:73:3d:bd:f4:ec:
         49:62:0e:14:42:1c:4f:3b:39:91:41:33:9b:e9:8a:d0:07:bc:
         ca:bb:67:01:e5:81:c5:4f:d5:ce:3b:6b:7a:7c:2a:25:13:07:
         11:96:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:38:17 2024 by rpki-client on console-ams.rpki-client.org