Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File:                     A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier:          HPktjgso2Ko2t+9Kq3Fen9yLdQwMvb4m5SVCNuxdCCw=
Subject key identifier:   BC:AB:3E:FA:A3:BC:B2:96:03:B4:19:F8:22:3F:B1:F8:EF:17:28:11
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer:       /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial:       018F3AAEAB222FB45C7CACB980B4058175C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number:          0BD8
Signing time:             Thu 02 May 2024 19:01:16 +0000
Manifest this update:     Thu 02 May 2024 19:01:16 +0000
Manifest next update:     Fri 03 May 2024 19:01:16 +0000
Files and hashes:         1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: SmgKRQ1Z7QUyGzXytWR9n62xjDZ3V/VByzGdwxYeZZg=)
                          2: Da5X95W7pkQcTBIOacD9YeenVO8.roa (hash: eB29wDhKAM03UphqqDxmE/9pR7YtUET0iInvSbPvlZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:ab:22:2f:b4:5c:7c:ac:b9:80:b4:05:81:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
        Validity
            Not Before: May  2 19:01:16 2024 GMT
            Not After : May  3 19:01:16 2024 GMT
        Subject: CN=bcab3efaa3bcb29603b419f8223fb1f8ef172811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:54:2d:8c:10:c0:a9:9e:a5:27:66:c2:bb:
                    d8:fd:fe:3c:a8:00:18:c5:fc:69:28:89:20:dc:ae:
                    44:34:f8:44:7d:48:61:cd:2b:84:ae:df:27:11:48:
                    ad:94:c2:b3:44:00:4c:b7:b2:b6:8e:ef:fe:47:21:
                    eb:d0:d2:a8:fa:e1:ef:44:ca:3c:ec:56:96:5a:c3:
                    f6:88:b9:6d:05:55:9e:ef:75:4e:a8:c3:86:1e:29:
                    a6:88:92:2b:37:84:23:9f:fa:d6:73:ab:ed:a6:af:
                    aa:98:13:8a:4f:74:92:7a:33:1d:20:71:e1:a0:3d:
                    fe:0e:9b:89:43:1c:ab:0f:77:30:15:8a:c5:bc:42:
                    38:55:0c:b3:1b:74:89:85:c0:79:e7:b3:6c:f0:e5:
                    e7:ef:29:6a:45:bd:1e:d4:2d:d2:c9:b9:e1:15:e2:
                    6b:77:74:82:9c:27:63:59:f7:c4:e5:4a:5d:c0:b8:
                    fd:ce:b6:34:e7:96:b9:5e:8e:a9:70:f4:c5:85:f3:
                    aa:c6:58:ae:17:b4:89:17:7d:22:7e:5f:00:5b:1b:
                    c8:c3:d7:00:e4:99:09:73:86:88:a2:98:28:03:43:
                    53:42:87:3f:b2:14:bd:5f:65:0a:78:43:ca:82:8d:
                    d7:69:98:6b:28:ae:2f:a3:45:d6:a1:97:71:7e:38:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:3E:FA:A3:BC:B2:96:03:B4:19:F8:22:3F:B1:F8:EF:17:28:11
            X509v3 Authority Key Identifier:
                keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:00:f5:92:ca:1f:84:fa:ef:78:45:79:b3:2a:01:45:41:
         81:8f:e8:06:2c:54:ea:35:18:06:c1:e8:7f:d2:81:de:79:9f:
         15:1e:cb:1f:72:2b:cb:51:e8:45:2e:bc:85:d6:ec:d5:21:15:
         e2:35:9d:de:d5:70:98:b8:04:96:ac:b4:ec:2d:52:29:03:99:
         f0:f8:c4:05:fc:fa:3c:6b:2c:78:7d:2a:a3:72:5a:0c:e0:d4:
         fa:a6:16:15:e6:5b:e0:98:36:f7:d0:72:b5:1d:fb:72:ed:f2:
         6f:ca:ac:a4:5c:cd:ad:e2:22:df:a5:64:0e:51:b4:5a:73:e4:
         0f:c9:28:4d:05:33:31:81:03:5a:a2:fe:1f:5c:cf:bb:fe:ef:
         00:10:89:52:6c:db:0d:bc:e7:f0:9a:9e:ca:a8:cb:c5:1f:7d:
         72:17:02:37:02:f0:ea:d0:cf:a2:9a:b1:37:98:59:cd:00:6b:
         e9:23:35:2f:69:29:2b:5b:dd:2c:df:f1:ff:7b:24:ed:2f:6e:
         a5:02:a1:fe:53:b9:92:0a:bd:ba:a8:6f:1a:d4:74:16:08:30:
         56:2c:8c:3c:38:d5:fe:b1:1b:13:9f:58:b4:1f:af:9a:ec:05:
         b2:93:af:02:5b:91:85:bd:7c:4e:ba:14:ad:c9:53:68:05:25:
         ce:34:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:13:26 2024 by rpki-client on console-fra.rpki-client.org