Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File:                     BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier:          kFTgFQ5ejMgsat1LHSaZHBElgs4iiUfIjxCOnjkY4Yc=
Subject key identifier:   FD:9D:52:16:9D:1A:4A:BC:02:1D:9B:A7:9E:FA:1C:E8:18:EF:90:CF
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer:       /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial:       018F4A8F9E1CB40A455376E9C93C316C5F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 21:01:16 +0000
Manifest this update:     Sun 05 May 2024 21:01:16 +0000
Manifest next update:     Mon 06 May 2024 21:01:16 +0000
Files and hashes:         1: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: oiPoSmB2seVvoBusroeKTCJ5/JtMiQ2PkMlb8pKBVlY=)
                          2: gxSBL2NEmSnFR0yi3Nuq8O6a2zc.roa (hash: Fw8a+BWk47ulTcZESkv7lPMzPuBm5f+UprB6fbTQXmc=)
                          3: lgEzm-kcUVVmPCY-AD8nO_qvUjk.roa (hash: dCN9qOuTM06r1zDH8l/PonQAtODsmdFH9QRZiym6WuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:9e:1c:b4:0a:45:53:76:e9:c9:3c:31:6c:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
        Validity
            Not Before: May  5 21:01:16 2024 GMT
            Not After : May  6 21:01:16 2024 GMT
        Subject: CN=fd9d52169d1a4abc021d9ba79efa1ce818ef90cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:38:98:74:9c:59:da:2a:d7:06:44:a3:20:
                    f8:45:d2:54:2f:4c:05:0a:cc:16:f3:11:87:ec:6f:
                    8a:e2:36:2e:e1:80:29:f9:15:b6:c2:36:7d:12:e9:
                    d0:1b:cb:e2:df:1f:8d:57:bb:e1:f9:f3:40:54:81:
                    61:91:99:84:37:1d:83:d1:ff:d6:9b:25:6d:33:4c:
                    8e:d7:1f:b1:a0:7e:eb:6a:37:e3:34:c6:d9:4a:f6:
                    9f:b4:fa:50:07:7f:ef:e7:7c:90:f6:9e:d8:86:c8:
                    c1:90:08:b2:14:b7:f2:e7:82:47:e5:96:77:c1:82:
                    bd:f9:cc:c2:40:ef:6f:c9:4c:dc:5f:1a:f8:88:fa:
                    10:b1:88:a2:ef:38:93:c5:2f:b0:cc:f6:c6:ca:cd:
                    84:fc:45:82:65:68:ce:1e:fc:47:83:08:03:8e:bf:
                    01:a8:2b:a5:78:72:ef:4c:db:22:fa:e0:6f:a2:12:
                    3e:5c:98:ed:1c:ee:b2:1e:43:73:47:33:c2:8c:34:
                    29:e4:6f:57:80:14:30:d7:26:f6:91:c9:52:4d:11:
                    4c:71:c2:60:4e:59:1d:45:e8:f2:16:4e:13:77:41:
                    38:4b:fb:b6:d0:52:b5:f9:f6:90:0b:de:a1:59:6c:
                    f4:5b:fc:58:c3:36:41:f3:f3:0f:a9:ab:42:14:1c:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:52:16:9D:1A:4A:BC:02:1D:9B:A7:9E:FA:1C:E8:18:EF:90:CF
            X509v3 Authority Key Identifier:
                keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:75:37:47:7a:06:e0:6a:64:0a:58:92:62:df:6d:a7:18:80:
         e7:4f:48:2e:aa:2f:d5:a0:21:15:2b:48:a4:f9:e5:4f:ae:92:
         c8:f9:f4:c3:1a:87:7e:24:47:52:ac:b4:02:6f:d8:72:39:39:
         70:75:f1:b2:3b:72:85:24:14:d7:b6:2e:f2:6c:cd:28:24:ac:
         2a:ea:63:3e:bd:62:8a:b8:ae:79:5d:da:06:13:f5:4e:85:d3:
         7c:37:07:a4:36:31:91:da:cc:2a:b0:17:e6:b3:6f:0b:bf:bc:
         76:ee:5b:89:d9:af:15:9a:9b:b7:0c:e6:35:54:04:42:0f:fb:
         38:ce:56:6f:b0:1e:cd:87:91:e5:26:e1:60:22:d2:29:23:ff:
         ff:4f:e7:4d:21:cb:21:6f:24:92:49:c4:ee:56:9c:b2:85:7e:
         12:10:80:dc:1a:61:4c:b4:20:8a:8e:5c:12:8d:31:3e:05:79:
         5d:c1:5c:77:14:51:b4:db:c7:f0:68:c9:6c:30:d2:0a:35:01:
         9b:72:f3:b5:37:91:4c:99:73:46:ea:66:01:37:ad:ad:eb:2a:
         27:12:fe:95:14:21:fe:a5:69:37:4c:e5:7e:32:a4:16:4d:f9:
         d5:bb:91:80:df:9e:4e:ce:96:40:8f:f3:8e:c2:04:bc:c3:ea:
         41:98:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:48:19 2024 by rpki-client on console-fra.rpki-client.org