Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File:                     bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier:          wKrzzmUpOAq2eS089K80oapVh3lzkqPylw9H4EjE91Q=
Subject key identifier:   BC:A4:A7:7B:FB:CC:A8:D9:54:86:E7:47:00:B7:9D:F3:0A:51:79:15
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer:       /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial:       018F874A3C24B9ACA5B63F3CF72BDE0B570D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number:          024E
Signing time:             Fri 17 May 2024 16:02:20 +0000
Manifest this update:     Fri 17 May 2024 16:02:20 +0000
Manifest next update:     Sat 18 May 2024 16:02:20 +0000
Files and hashes:         1: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: vv8/bmsPm+vw9eFlyRtw/mpzW95HdxKfciG9sWm1MEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3c:24:b9:ac:a5:b6:3f:3c:f7:2b:de:0b:57:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
        Validity
            Not Before: May 17 16:02:20 2024 GMT
            Not After : May 18 16:02:20 2024 GMT
        Subject: CN=bca4a77bfbcca8d95486e74700b79df30a517915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:da:8c:7a:71:c3:0a:be:c7:58:56:82:08:
                    06:fa:4e:1b:8c:47:d8:88:b0:1d:b5:13:ba:ed:70:
                    ff:53:b3:6d:44:4f:1b:47:d4:dc:cc:e1:d9:e5:a4:
                    0e:6e:2c:d8:59:23:3f:da:3b:e4:21:34:e9:4f:b1:
                    81:5e:77:65:02:26:1e:71:9d:ab:df:98:b5:8a:2f:
                    3d:56:2c:c9:34:99:c9:7f:fa:16:20:f9:90:56:b9:
                    91:4e:a5:3d:1f:0c:9b:93:4e:ef:64:01:dd:ec:16:
                    1c:65:d2:43:23:98:a8:1d:b8:09:96:2c:c9:b7:62:
                    44:6e:b9:eb:ea:13:d2:25:fe:11:03:b6:e1:4e:2b:
                    0b:a9:e4:b9:fd:5e:c1:92:39:f4:9b:bc:1c:df:12:
                    10:ab:e6:fb:fb:6d:53:51:87:15:f3:04:21:a9:51:
                    66:25:30:75:24:1a:7b:31:28:84:43:07:73:25:01:
                    69:48:54:43:0e:8b:7f:ac:b1:30:c0:ea:42:bd:6e:
                    cb:9f:77:a9:ba:c6:41:94:8e:0e:44:00:51:65:c1:
                    eb:8b:dd:4a:1a:1f:66:78:ca:ae:83:0e:ae:d0:3b:
                    1d:6d:f1:11:d3:f1:d4:cb:ff:b1:d6:87:e0:83:ae:
                    3a:ec:74:4d:30:b7:a1:3e:6c:f7:7f:c8:c4:86:3f:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:A7:7B:FB:CC:A8:D9:54:86:E7:47:00:B7:9D:F3:0A:51:79:15
            X509v3 Authority Key Identifier:
                keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:32:0b:b3:a3:6d:5b:68:f4:90:35:b8:30:90:63:84:f5:
         5a:2e:ca:98:77:67:ba:89:09:1b:97:a1:da:5d:1c:95:a7:03:
         de:d9:42:7d:6e:cb:27:f0:ed:7c:db:5a:35:5a:59:92:bf:2a:
         25:33:e4:ba:e6:68:e3:41:23:4e:a5:30:59:5a:62:fa:ee:54:
         54:81:f4:de:d9:40:fa:67:6f:63:1c:88:39:6b:ae:38:de:10:
         98:51:43:b4:e5:06:8e:27:cd:62:cf:64:b0:52:58:32:eb:42:
         ee:6d:b7:0d:82:b9:da:18:f7:99:74:5f:dc:9f:b6:1f:87:8c:
         91:06:47:9e:93:67:81:9a:0e:c3:91:c5:41:d9:b7:5c:1d:37:
         0c:05:18:b5:d2:15:54:fa:19:6d:05:61:97:53:ca:96:42:fd:
         61:a7:26:cd:65:52:28:7d:80:e8:c9:7d:2b:53:b7:3b:88:8b:
         47:09:47:92:f9:f3:5a:16:9e:1e:fc:3b:0b:9c:35:71:86:9f:
         ee:1d:7c:62:31:ea:f1:d5:f5:9b:36:cb:6e:bf:04:ba:c6:89:
         15:95:d4:ae:5e:7e:10:56:57:28:78:17:a1:65:fd:e2:c0:ef:
         ff:a2:b5:95:db:e2:8c:84:19:b3:c3:8c:e3:4a:6c:a6:4e:8e:
         51:07:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:52 2024 by rpki-client on console-ams.rpki-client.org