Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File:                     BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier:          CEHOtLpacG7knw2WMsrR/LRB4ulC7fZ3Pr9z02m/eys=
Subject key identifier:   9E:0C:03:14:96:73:79:24:03:26:F6:B5:F7:0F:AC:7C:8C:EE:C4:21
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer:       /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial:       018F45A119265E4BB8F252186A721CCC6C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 22:02:16 +0000
Manifest this update:     Sat 04 May 2024 22:02:16 +0000
Manifest next update:     Sun 05 May 2024 22:02:16 +0000
Files and hashes:         1: 0rv2ZK9xwV0vj_rJFGXJClNKKsk.roa (hash: LUEGg1Hn+XbTQ0xsPy4XkClfGTj9/cYsY0QUHEYe2tI=)
                          2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: GiSOvk2znQx2hhh8HhTm2ujIf1F5M+Ooqo2/fGyVMhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a1:19:26:5e:4b:b8:f2:52:18:6a:72:1c:cc:6c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
        Validity
            Not Before: May  4 22:02:16 2024 GMT
            Not After : May  5 22:02:16 2024 GMT
        Subject: CN=9e0c0314967379240326f6b5f70fac7c8ceec421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:34:dd:c0:c6:21:f4:08:d5:79:9a:bd:3f:
                    c1:08:5c:d5:7c:37:f3:e1:e0:bb:b2:ae:55:b1:a6:
                    a6:92:b5:de:1c:d8:3a:d2:e1:f4:62:2a:93:d4:a6:
                    0d:c6:11:18:fd:b0:a5:c0:e1:21:41:85:1c:f5:8a:
                    cf:dd:e9:f8:77:4b:1a:a4:76:e1:13:a9:8e:fd:f8:
                    2d:7d:2b:bc:38:4e:e1:e1:d0:10:0c:d2:fa:56:21:
                    36:fa:79:7f:71:9f:9d:45:1d:cd:5f:48:ba:7f:2f:
                    1b:86:34:7b:35:6e:bb:ba:f8:ec:55:93:0d:26:20:
                    89:00:0a:a6:e4:4e:c9:c8:1a:17:34:90:d6:fc:f7:
                    4a:a6:05:d0:4a:fa:8c:85:ec:bd:f4:46:d2:2a:4d:
                    c0:d5:0a:f7:b8:0a:db:68:72:a5:15:da:8a:8a:b9:
                    c8:1c:2b:55:b8:f4:95:68:7f:ac:fa:aa:58:4c:78:
                    63:83:75:d4:df:ac:4f:82:bb:bd:6d:54:77:6f:78:
                    e9:79:a1:a3:c1:20:ce:bb:93:fb:2e:66:ae:ec:b6:
                    c7:38:28:1d:9f:45:b4:96:07:64:af:45:9f:2f:0d:
                    c5:ed:83:9d:1e:05:3c:f7:2a:bd:a2:62:2a:7d:7a:
                    1a:7a:b7:ec:fe:4b:0c:f2:bb:66:47:73:d7:0e:64:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:03:14:96:73:79:24:03:26:F6:B5:F7:0F:AC:7C:8C:EE:C4:21
            X509v3 Authority Key Identifier:
                keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:06:fb:bd:85:40:b3:18:cc:eb:1a:f5:4b:83:43:30:7c:
         c1:df:f1:2e:b4:95:3f:e5:1b:5d:66:f2:2f:0f:f9:dc:dd:f2:
         78:6a:b0:13:9c:da:a9:1a:e7:9e:fe:cd:2b:e1:9e:75:2c:c3:
         24:6c:7c:d5:1c:ae:88:12:79:5e:09:b6:a8:ad:1b:9e:75:92:
         e0:3b:10:df:6b:84:51:3c:fc:bb:dd:5f:5c:83:65:5e:f8:05:
         7a:3e:a0:27:13:b9:8c:a4:b4:b4:80:f8:49:ca:8d:be:ed:c6:
         5f:4f:40:4d:e3:81:74:de:0d:eb:b2:ba:e3:28:19:83:7e:2a:
         5b:b3:5e:b4:8d:71:9d:8f:12:99:b0:92:50:33:2f:df:56:4d:
         30:b6:6e:46:7c:7b:df:ee:31:9a:d8:2a:4d:9c:8b:f7:c1:62:
         ad:e4:7f:76:2e:35:22:a4:56:f7:7b:cc:d2:0a:4c:94:0a:6d:
         91:a3:93:94:70:ca:f4:e4:03:00:fe:16:35:28:bc:88:b0:ba:
         2e:6c:a7:d1:07:09:94:29:d4:15:41:c3:de:7a:6c:e1:36:c1:
         62:0d:b0:81:a5:45:d1:d9:c3:c1:a1:31:96:a0:c6:cb:26:c1:
         d5:57:bf:35:72:70:7a:74:f5:f2:02:79:1e:86:1b:43:f8:89:
         18:ab:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:16:33 2024 by rpki-client on console-fra.rpki-client.org