Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
File:                     BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft (raw, json)
Hash identifier:          cWxqrCOzjn+YPuavirG+jmHfgb1ehQKXORemGqy28Ls=
Subject key identifier:   26:7A:FD:BA:FA:2E:9E:EB:5C:0A:31:1F:C2:8F:7D:71:5D:3A:09:DD
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Certificate issuer:       /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial:       018F4D90712766843B827EC1261F10192267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
Manifest number:          05DE
Signing time:             Mon 06 May 2024 11:01:02 +0000
Manifest this update:     Mon 06 May 2024 11:01:02 +0000
Manifest next update:     Tue 07 May 2024 11:01:02 +0000
Files and hashes:         1: BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl (hash: qcR9IjtIyD2SF0ce9CNiIGsvno8Y5fywmyYng+EawtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:90:71:27:66:84:3b:82:7e:c1:26:1f:10:19:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
        Validity
            Not Before: May  6 11:01:02 2024 GMT
            Not After : May  7 11:01:02 2024 GMT
        Subject: CN=267afdbafa2e9eeb5c0a311fc28f7d715d3a09dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:35:88:5e:13:03:17:49:8d:74:92:42:0b:
                    d2:0a:e0:90:d6:74:6f:6b:78:b1:8b:b3:ea:ad:cc:
                    72:56:40:b1:82:50:c1:e0:8b:37:a3:db:76:25:a3:
                    aa:76:90:a3:a1:60:63:e8:83:87:04:4b:61:84:d7:
                    c2:c0:da:cc:a4:db:2d:6a:6c:57:2b:fb:99:ae:a0:
                    73:57:bd:8d:1b:b8:81:18:c6:b4:1e:3a:b2:3d:42:
                    fe:1b:aa:0e:25:95:e8:96:f7:37:69:e1:a5:b7:a9:
                    95:24:b8:2d:20:dd:b5:8a:d5:11:6e:2c:1a:3e:35:
                    d3:5f:f8:74:fa:a2:9f:28:6a:f8:b9:3d:6f:83:a6:
                    f7:ee:85:50:2b:ee:7a:52:aa:e1:ec:d0:20:7c:59:
                    83:b8:88:81:33:cd:44:f8:49:a0:94:62:2a:98:ef:
                    51:0d:67:b7:bf:6a:5f:f1:b2:6d:52:fb:48:33:f1:
                    78:4d:e3:fd:bb:86:82:49:1b:34:cc:d5:7c:14:f8:
                    8c:a6:22:e3:91:12:8b:11:18:1a:7c:0f:1a:59:fe:
                    0f:ba:aa:28:3c:63:91:cc:22:cc:aa:48:0f:f6:f4:
                    a5:28:14:5b:de:6e:bf:ac:84:14:9c:01:e5:eb:ce:
                    47:2a:2a:5c:db:2e:92:7c:d0:62:59:50:c1:8b:14:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:FD:BA:FA:2E:9E:EB:5C:0A:31:1F:C2:8F:7D:71:5D:3A:09:DD
            X509v3 Authority Key Identifier:
                keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:08:9d:37:49:6b:82:86:ff:a4:d8:f1:3e:df:bc:cf:9c:
         dc:00:89:02:0c:bf:47:4a:54:88:8d:67:83:ac:65:f0:20:e6:
         e8:eb:bd:4a:e2:05:36:f5:61:82:16:39:e5:9e:18:a6:33:ea:
         ba:17:fe:95:f9:fd:f0:88:52:20:70:b0:01:57:fc:22:d5:62:
         e6:fc:79:23:1e:5f:74:ec:24:3f:a7:f1:ff:47:1f:40:90:64:
         55:b4:c6:9a:8a:ff:87:f2:db:13:78:4c:d8:14:c2:3e:c6:f8:
         d0:29:0b:b3:b4:6e:de:c3:75:cd:fd:1f:54:53:57:29:f2:e9:
         76:c2:1e:81:ed:fd:3f:31:dc:b1:b7:b3:dc:db:c0:6f:ee:cc:
         57:a5:6a:4d:29:09:6e:5d:ae:c5:1b:84:8b:84:db:1b:19:d0:
         15:64:d1:1d:96:a5:ce:fb:b6:8a:ab:f3:6b:e1:ca:9a:6c:97:
         5b:8e:cd:bc:51:6c:36:5d:61:1f:ea:32:09:1c:f4:3e:a4:01:
         7b:e0:ab:10:58:72:f3:e8:03:3d:13:8c:01:d4:f8:6f:77:f1:
         54:00:06:89:70:57:da:d5:44:3a:3a:2c:57:f8:f8:29:2e:75:
         36:24:18:60:e2:f7:19:59:ea:77:ec:46:09:eb:f1:96:0f:2b:
         3f:5f:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:15:23 2024 by rpki-client on console-fra.rpki-client.org