Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          zxBzAc6SqGZ6A+hG6W1qXCAjtIrVde4RBADt+hEl7jI=
Subject key identifier:   4A:0E:14:12:FF:C1:7F:5F:41:C3:FC:2D:A2:79:12:8C:E6:E7:4A:B1
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       018F5248DEB0933587B96C5B353B1374DE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          07AE
Signing time:             Tue 07 May 2024 09:00:58 +0000
Manifest this update:     Tue 07 May 2024 09:00:58 +0000
Manifest next update:     Wed 08 May 2024 09:00:58 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: ZNMH9EmIPpdcGVKbHFFpjQ2kUcoa2IlnLTYq1BSCFu8=)
                          2: OY_Q1KRxEzna22K9KSwVlp1EBC4.roa (hash: YUD+E5OPRO4EydZ5vX2LWmRK6djez0UxwAzDh5RZ3Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:48:de:b0:93:35:87:b9:6c:5b:35:3b:13:74:de:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: May  7 09:00:58 2024 GMT
            Not After : May  8 09:00:58 2024 GMT
        Subject: CN=4a0e1412ffc17f5f41c3fc2da279128ce6e74ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cb:04:30:11:b9:d2:24:a9:da:76:36:81:38:
                    3e:14:02:ae:20:5e:77:51:be:be:5b:31:71:4f:79:
                    16:aa:70:25:69:53:3a:60:0d:bd:d5:a2:4a:b5:64:
                    e0:82:13:5f:d7:98:7f:b5:33:1b:55:83:8b:54:ff:
                    32:c1:63:06:54:86:74:60:8e:2f:da:de:4e:ec:4f:
                    e3:58:00:51:d1:67:2a:37:39:a2:25:ca:c6:8f:26:
                    53:e7:75:8e:f5:0a:97:88:61:0b:3e:9b:4b:40:a7:
                    f4:87:0b:f7:1f:33:36:64:87:1e:26:4a:53:bd:ec:
                    7f:69:94:6a:11:92:23:52:22:f2:da:2e:8f:ac:07:
                    c3:69:30:88:92:39:eb:e3:76:37:12:72:2d:f4:b8:
                    be:f5:19:ea:a2:43:a1:ca:9a:f1:09:f8:d6:09:56:
                    ac:91:25:20:5e:be:5e:60:b5:4b:48:eb:23:5c:51:
                    42:50:d4:cc:e9:bc:29:f6:70:44:52:90:26:4d:19:
                    32:14:03:f2:8d:7b:50:26:f6:ff:0b:96:98:02:a0:
                    bd:ac:31:23:b8:9f:94:23:38:c7:87:9c:0c:92:c6:
                    76:35:aa:24:e9:e0:cb:d0:8d:85:22:e6:ae:59:0d:
                    24:81:ff:68:8d:af:11:2f:88:ab:5e:9f:a9:ab:92:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:14:12:FF:C1:7F:5F:41:C3:FC:2D:A2:79:12:8C:E6:E7:4A:B1
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:c3:cb:4c:5c:51:3b:61:b6:ec:84:f3:bc:29:f6:1b:a7:
         c5:e1:e9:d8:38:92:62:55:c2:5f:64:3f:3a:6b:89:75:a5:3a:
         74:5b:15:3c:5e:21:86:1f:78:0d:2e:16:43:56:34:53:a5:3c:
         ee:35:fa:b3:25:a7:67:0a:dc:79:a3:d7:c2:36:23:24:a9:26:
         d8:46:af:6c:85:89:7c:10:05:1e:47:8e:44:cd:7b:f0:0a:c1:
         29:c5:3a:1f:09:b2:e0:5f:60:e8:93:00:50:e5:85:b4:b5:48:
         76:ad:3f:88:7d:01:de:f1:be:5c:1f:3e:39:80:ab:2d:84:a7:
         9f:21:4d:47:c6:aa:5e:a8:11:fe:b6:36:8e:5a:c6:13:6c:cd:
         0e:68:31:ea:c2:1e:57:c7:76:30:33:27:26:bd:42:b3:41:40:
         b1:d1:3a:66:5a:c6:23:0f:39:40:87:40:82:1b:2b:23:88:c9:
         e5:4a:77:df:b7:47:84:fa:80:2b:23:49:3d:c6:28:57:7b:46:
         51:b9:86:f7:75:8c:32:94:ec:ce:95:06:58:d9:01:8d:6e:96:
         ef:97:04:12:22:c2:6b:d8:ba:38:7e:04:ff:de:d4:18:ba:99:
         d2:bc:e7:f7:5e:18:3f:20:51:a6:6c:03:27:82:80:67:34:8f:
         8f:bc:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:07:45 2024 by rpki-client on console-fra.rpki-client.org