Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File:                     bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier:          YYhAj/DIs0eoa8wmUflim7GyNliFmZE2PDPpTezATaY=
Subject key identifier:   AC:3E:A8:87:7A:6C:DD:CE:BA:05:1D:8C:5F:C4:AB:7A:04:5D:65:80
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer:       /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial:       018F86A39B8D8B9F5AFB6A5E34BAB552A3F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 13:00:20 +0000
Manifest this update:     Fri 17 May 2024 13:00:20 +0000
Manifest next update:     Sat 18 May 2024 13:00:20 +0000
Files and hashes:         1: GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa (hash: i/dq+aF4HEsssAvntSk4PEuypmTWbk+eLnz1a/0kM00=)
                          2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: xsQ165owlDvXu0MYNrkNWbpj0pbZlHSPHapXQhOq2J4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:9b:8d:8b:9f:5a:fb:6a:5e:34:ba:b5:52:a3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
        Validity
            Not Before: May 17 13:00:20 2024 GMT
            Not After : May 18 13:00:20 2024 GMT
        Subject: CN=ac3ea8877a6cddceba051d8c5fc4ab7a045d6580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:2d:c4:ef:b5:81:e5:e2:16:94:f1:40:82:
                    0a:49:73:17:67:2a:b5:74:2f:24:ef:dd:75:0d:54:
                    c8:fd:af:e7:2d:d1:56:62:a8:65:b0:d9:76:9f:a4:
                    e2:be:9f:8d:57:0d:b0:bc:cb:17:7e:a1:d2:0a:04:
                    fa:33:18:95:6d:8d:ad:28:70:dd:2c:27:4d:f3:b1:
                    d4:ef:da:d8:5d:5a:50:b2:57:af:03:2b:7b:7e:a0:
                    92:f1:24:04:ce:c7:40:36:65:5a:2a:4b:52:fd:97:
                    29:ca:f0:0a:e3:e7:a3:c3:52:91:41:b3:5c:74:b0:
                    84:9a:9b:50:2d:05:7e:1c:51:c9:4c:c3:ae:21:e8:
                    3a:2e:2c:54:71:6c:54:74:2c:45:c1:5e:ff:9e:35:
                    d4:5c:5b:19:54:1d:30:0e:d3:1b:bd:d7:4d:40:a6:
                    37:1e:86:fa:09:6b:10:a5:fc:89:10:1f:c1:69:6f:
                    d3:ab:eb:fd:1f:de:36:df:e9:42:44:ed:4d:76:25:
                    7a:28:f6:0e:dd:2f:fd:8e:a6:ec:d3:e2:b7:04:c8:
                    73:00:61:1f:b4:71:00:f1:72:82:af:fd:b5:24:b8:
                    44:23:bd:b1:6c:6a:3e:aa:a7:89:87:ec:a6:55:e1:
                    25:1c:47:1e:ff:6a:d8:12:69:98:00:ea:a7:19:69:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3E:A8:87:7A:6C:DD:CE:BA:05:1D:8C:5F:C4:AB:7A:04:5D:65:80
            X509v3 Authority Key Identifier:
                keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:be:2c:74:5a:75:23:57:f1:50:a6:b6:f3:4b:15:43:5a:de:
         f1:98:c3:ae:4b:6e:f5:3c:a8:74:59:5f:19:4d:bb:dd:03:ca:
         dd:05:b7:df:c2:72:56:8a:58:87:5a:4e:af:e7:c8:c6:5d:b5:
         13:29:50:74:74:bc:18:59:66:32:de:01:19:c2:07:83:90:8e:
         67:1f:b2:bc:6c:54:c7:8a:9e:fd:1b:1c:2c:05:76:56:45:6c:
         8b:48:ce:f5:3a:f4:10:f9:3d:bc:ac:0a:61:ad:20:f3:b7:ee:
         e4:1a:32:4e:78:af:ce:9a:e6:19:0b:31:90:f8:2c:72:6e:0c:
         f4:03:1c:0b:19:b8:a5:f6:74:33:26:9a:a2:ff:1d:3c:fd:b2:
         0a:7e:54:32:d2:87:12:1e:51:28:79:25:da:29:53:ab:0e:a9:
         35:e9:15:13:8f:b8:38:2b:d8:0b:6f:6a:69:1e:75:7a:6b:cd:
         72:94:3b:38:7f:e9:46:e5:f4:06:9e:67:fd:39:1a:34:cc:b7:
         df:3e:02:42:41:10:b9:68:ac:3c:d1:76:45:03:d6:68:d5:11:
         d3:7e:95:ec:94:9c:e8:5f:fa:aa:af:0a:82:54:10:f6:66:52:
         59:19:9b:50:93:ce:1d:75:33:2f:a5:b1:f1:a9:e8:39:22:64:
         33:a4:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:20 2024 by rpki-client on console-ams.rpki-client.org