Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
File:                     BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json)
Hash identifier:          pmAeP+WRhWjb+A7HSMli72id5GmwBTe2Mv37CMIU7gY=
Subject key identifier:   C5:95:45:90:43:76:E7:B1:57:73:75:F0:12:45:CF:B9:0E:76:A5:B8
Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Certificate issuer:       /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Certificate serial:       018F8749F0B4CDD4AAB340439E61F2BF9C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
Manifest number:          023C
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: 6lZwkKL7ctj7POBWlkq63Xd709IkJdkqlQHiItOKpek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f0:b4:cd:d4:aa:b3:40:43:9e:61:f2:bf:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=c59545904376e7b1577375f01245cfb90e76a5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:ce:ee:7e:b3:d7:2a:3a:22:84:b9:3e:ab:
                    d7:bf:c2:c0:ac:37:8c:bf:a8:01:bc:88:36:a2:95:
                    75:e8:44:38:ef:2d:bd:05:de:86:d1:7b:eb:4c:89:
                    47:5d:89:3a:33:44:d1:e4:72:a0:11:e7:be:4c:05:
                    d3:33:c3:5e:fa:c6:b5:bb:8f:68:81:de:1a:83:4b:
                    fc:36:f5:51:5f:be:17:9a:23:5c:a6:65:78:b6:9b:
                    3e:bf:6e:e7:e6:6e:fe:79:d4:6c:c9:24:73:55:cd:
                    a7:5e:96:f7:8b:39:1c:bf:ea:42:c3:a2:6c:25:57:
                    b5:2e:0c:d4:86:dd:4b:9b:4b:09:73:da:0c:83:81:
                    73:d7:dd:8d:1d:25:db:bc:8c:8a:86:5a:f6:bf:98:
                    b4:8f:40:19:7c:16:19:60:e2:ff:bf:a0:09:5e:47:
                    43:ad:51:5b:c2:a6:07:f9:5c:b9:1c:60:68:36:a5:
                    50:ee:50:16:42:29:5b:d7:ec:00:86:9d:93:c5:2f:
                    7f:ab:fd:83:81:97:5e:46:20:e9:cc:fc:a9:47:a7:
                    d3:ab:53:f6:2e:a7:06:0c:2e:e9:0f:e1:71:ea:d5:
                    8d:69:8a:98:c2:12:da:46:7e:f0:d1:ca:b6:24:95:
                    cb:ef:ab:1c:30:3b:39:24:58:bb:27:73:b5:44:77:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:95:45:90:43:76:E7:B1:57:73:75:F0:12:45:CF:B9:0E:76:A5:B8
            X509v3 Authority Key Identifier:
                keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:ab:0e:f6:ca:ef:83:a5:85:1c:d4:01:0b:90:80:0f:8b:
         5c:9f:f1:09:c5:ec:b2:17:93:94:ad:19:b5:a2:d8:5d:df:0a:
         6d:b6:4b:6f:72:7e:1b:ac:a0:8f:33:73:74:ed:39:fd:2d:a4:
         c7:d5:6e:f6:f8:29:e9:68:a1:08:a4:cf:af:ae:ce:f0:77:c1:
         11:7a:80:8a:77:eb:66:f4:1a:24:4c:d6:39:bc:04:9e:45:7c:
         05:1d:99:6d:59:1b:b0:67:b2:7b:06:2d:3b:6f:2b:f9:90:b1:
         9f:68:4e:8f:20:0b:15:9b:5d:a3:e9:96:b5:3f:ba:70:de:69:
         60:4f:a0:8d:ba:8c:41:f0:ab:57:73:5a:68:af:6a:06:ea:54:
         03:8d:9b:a2:78:84:65:31:80:67:e9:9c:0a:08:83:3e:75:9a:
         c2:30:04:72:f2:bd:17:80:61:a3:4c:d0:c3:08:44:9d:c3:66:
         cd:f0:48:dd:b5:d6:7e:61:af:1a:ed:df:ff:90:1f:96:33:b1:
         c0:45:a9:9d:8e:37:e7:23:af:e0:69:cd:a7:88:d9:99:38:f6:
         48:a9:d1:36:e1:a0:9b:f4:d0:71:1c:94:64:cc:ef:a1:ca:e5:
         6c:9f:92:0d:78:02:0a:78:6e:e0:51:47:03:ca:7e:6b:47:c1:
         cb:a2:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:42 2024 by rpki-client on console-fra.rpki-client.org