Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File:                     BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier:          k7u7l4WGwpOE86PRStXGdLV++G8H9V3O7MR0C98Zh3k=
Subject key identifier:   AA:41:CD:DF:D6:05:29:53:B4:21:A2:8E:81:3E:F2:43:9D:12:D6:3C
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer:       /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial:       018F497EBACDF524FF25C4718F2402576FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number:          0758
Signing time:             Sun 05 May 2024 16:03:13 +0000
Manifest this update:     Sun 05 May 2024 16:03:13 +0000
Manifest next update:     Mon 06 May 2024 16:03:13 +0000
Files and hashes:         1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 90EFP7yTYpuXig5MrjRCqKDjryGPMhIPxt6wNZftrMc=)
                          2: WvW-4d7HrlkC8llP_HQMaTVqahQ.roa (hash: ixTrIKMOfPQY3cmMHtjph1379QCRmxEz+fHoOXR6Mp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:ba:cd:f5:24:ff:25:c4:71:8f:24:02:57:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
        Validity
            Not Before: May  5 16:03:13 2024 GMT
            Not After : May  6 16:03:13 2024 GMT
        Subject: CN=aa41cddfd6052953b421a28e813ef2439d12d63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:1f:0d:ed:32:c4:9f:8b:37:d6:b1:2a:7f:
                    01:24:05:18:6e:b0:2d:9c:47:df:28:cf:74:b0:b6:
                    6c:25:99:d9:00:28:55:37:1b:e4:2b:15:4b:66:16:
                    de:e8:e8:93:0b:fa:4d:53:1e:d4:13:e8:b8:2f:23:
                    97:8c:04:4b:2e:02:5b:ad:7c:23:b4:5b:90:69:18:
                    47:5e:c4:b6:01:ad:7d:c0:51:9f:04:87:4b:d2:59:
                    fb:11:f2:43:5b:36:e5:be:38:5a:a4:77:91:7a:2e:
                    bf:cd:ad:b4:af:be:f5:04:78:92:8c:39:be:21:6b:
                    03:6d:06:f4:41:81:06:4d:3a:3e:21:2e:a4:69:0c:
                    c6:34:43:c1:89:10:5a:f7:c0:1e:9e:ce:67:34:9c:
                    cc:ce:ca:da:c0:5f:be:dd:8d:18:22:41:04:9b:0a:
                    28:81:a6:41:a1:02:00:5b:a3:1d:65:3e:0b:96:ae:
                    b4:2f:04:f7:d6:fa:2e:12:84:9b:1b:ca:8d:c6:f0:
                    0b:36:6d:44:b8:22:df:40:4c:32:42:a2:a2:cc:b1:
                    14:7f:64:7d:88:a0:3b:ed:95:b8:1d:ab:d2:44:8f:
                    21:98:60:82:76:be:e9:81:c6:41:40:a2:c4:b7:f0:
                    73:d4:8d:e4:25:c4:52:79:b2:d7:8c:c4:55:cd:e5:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:CD:DF:D6:05:29:53:B4:21:A2:8E:81:3E:F2:43:9D:12:D6:3C
            X509v3 Authority Key Identifier:
                keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:cf:5e:ac:d0:c6:8d:62:88:ae:ae:1d:30:a2:33:d7:f4:
         09:30:f7:0f:a2:7e:a6:ba:cf:ac:f4:5b:fa:94:41:86:a5:2a:
         b9:f6:0f:c2:62:70:25:eb:24:c6:b9:8d:b4:13:98:61:1c:77:
         ca:f0:76:a8:0f:10:ad:cc:ca:30:3f:47:6d:35:88:f2:b6:b3:
         84:76:46:6f:40:65:84:f2:49:13:18:dc:fa:67:07:c8:26:c7:
         4b:f5:39:d7:08:f0:33:bb:f6:23:f6:5e:17:bf:51:73:3e:76:
         11:d2:24:26:a8:b0:15:63:8f:53:49:44:8c:8c:d5:0d:fa:73:
         1f:95:bd:61:cd:4e:67:c1:58:35:0a:6a:43:0d:38:14:78:b9:
         b6:e5:6b:b6:61:f9:69:79:39:1a:14:f8:b6:fe:d5:22:3c:7d:
         41:fb:5b:15:38:0f:ce:5a:80:fe:24:e4:fd:03:b7:bf:f1:91:
         83:e8:91:a1:3c:74:9f:c4:e6:27:be:5c:e5:0d:f2:45:92:6e:
         b8:02:fe:15:b9:57:4a:15:61:bd:58:7f:e4:47:78:d3:00:b1:
         32:72:21:7a:80:d7:a7:ef:8b:01:80:90:58:cc:64:e6:35:1c:
         9d:9b:00:2a:1b:b4:87:57:6b:e8:50:62:ba:e7:5a:fe:00:1e:
         81:31:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:50:01 2024 by rpki-client on console-ams.rpki-client.org