Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File:                     BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier:          ga2UhSOPH3u7uLGe4Grd8eLXQKQNaCS62h0bxHg0Zxo=
Subject key identifier:   2A:34:78:BE:26:A5:5D:AB:86:76:AD:75:44:B2:BF:79:8C:9D:21:E7
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer:       /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial:       018F5211FAF6ADDCB0F9CFA2BBC4A4272956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number:          0F94
Signing time:             Tue 07 May 2024 08:01:01 +0000
Manifest this update:     Tue 07 May 2024 08:01:01 +0000
Manifest next update:     Wed 08 May 2024 08:01:01 +0000
Files and hashes:         1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: 0qDwxv2RMr/VtpeRAzv4TQxxaHKDopG6IhErXO1etM4=)
                          2: JN-PgRWx3Nr_Av2B0U8ZhejGm3c.roa (hash: GDHYA46KHFddID/WN0k830C4UX+Cvpnza5sk72ZgWWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:11:fa:f6:ad:dc:b0:f9:cf:a2:bb:c4:a4:27:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
        Validity
            Not Before: May  7 08:01:01 2024 GMT
            Not After : May  8 08:01:01 2024 GMT
        Subject: CN=2a3478be26a55dab8676ad7544b2bf798c9d21e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:a5:db:58:70:f9:9d:fa:3b:9a:33:10:71:
                    ba:e4:2c:54:d1:b1:3d:a3:96:de:94:ed:0c:55:8a:
                    bf:f4:fc:61:1c:9c:fc:8b:b6:bb:4a:74:b5:24:a3:
                    31:e3:68:24:67:5b:a3:d4:5c:a5:10:e9:e9:cb:aa:
                    2d:8a:4f:63:ba:02:ac:1a:db:78:b7:85:6a:09:79:
                    8e:98:da:10:ed:19:4d:f7:f3:ca:06:ef:cc:7c:e2:
                    bc:56:b6:43:82:b6:a7:dd:25:a2:4f:02:7c:66:dc:
                    b6:6c:f2:47:bf:62:02:bb:63:b7:d4:b2:00:ce:a1:
                    b3:fc:65:64:b4:d6:de:25:18:e5:13:83:21:e1:1e:
                    32:c9:9b:56:0a:20:58:61:c4:f6:58:42:0b:04:8a:
                    e7:6e:92:fb:e7:0a:77:4a:8d:99:de:ee:8c:6a:c0:
                    e0:3d:fa:6e:17:da:95:07:d2:9f:98:6b:64:a0:1c:
                    fc:76:4b:54:f7:48:c0:6a:11:82:59:e6:e1:2b:6b:
                    b5:8c:ef:39:0d:f3:5d:a3:c8:0f:df:35:3d:9a:b8:
                    3e:44:6a:e3:77:67:96:14:cd:f4:e3:bb:a0:d3:84:
                    2e:b8:25:7a:20:58:a7:0b:39:19:d7:48:60:c6:be:
                    92:6b:9f:84:62:bd:ec:8e:a7:de:9d:b5:80:38:80:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:34:78:BE:26:A5:5D:AB:86:76:AD:75:44:B2:BF:79:8C:9D:21:E7
            X509v3 Authority Key Identifier:
                keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:81:78:fd:82:a9:62:ce:76:5a:57:67:64:fc:5b:47:16:
         34:98:e1:2c:5d:39:f5:25:88:9b:0b:51:ec:dc:0d:1a:39:df:
         3e:a8:62:1f:83:97:fa:c4:0c:6d:30:b8:62:c2:15:a3:0b:b8:
         65:79:50:fd:0b:54:8b:23:83:60:4e:49:bf:60:b5:d2:70:6b:
         4d:ee:d4:eb:72:bb:00:8b:7b:f5:2e:55:0f:8e:bd:9f:00:19:
         bb:ca:5e:5e:c4:cb:cb:f9:da:a1:84:fd:66:ed:16:bc:a8:3a:
         87:3a:c2:92:30:76:8c:4f:05:73:51:3c:d0:d3:6a:56:01:27:
         c1:b0:55:d7:89:aa:74:5c:3a:6a:47:1b:43:a6:5e:75:14:72:
         25:16:d6:f1:72:21:b7:ba:c8:9f:65:d3:d4:22:6c:1d:47:ec:
         db:06:32:ba:3a:5f:77:cc:90:8d:c3:f9:b7:b5:18:cf:6b:5d:
         87:46:93:66:d9:1b:26:22:de:77:69:5f:0d:0a:40:ee:40:66:
         8a:c3:ae:12:0e:b2:c8:2e:6a:d2:8c:cd:40:6e:b4:54:d1:af:
         35:79:d0:fb:89:a8:29:54:c4:a6:6e:ff:3a:a0:73:ce:07:f9:
         ac:ab:bd:b3:54:91:f3:be:71:1d:3f:6e:bd:94:54:82:fa:a7:
         4c:6e:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:57:18 2024 by rpki-client on console-fra.rpki-client.org