Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File:                     bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier:          OYtDmsQSqSCThwKxJMdMwAK3Drz7HQoVNgeCao7inm4=
Subject key identifier:   DD:F9:96:A3:DB:4A:80:96:74:AD:38:55:C6:D0:72:C5:94:D9:91:B8
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer:       /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial:       018F874917C9DED9534B9A2DB2A7F5524C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:05 +0000
Manifest this update:     Fri 17 May 2024 16:01:05 +0000
Manifest next update:     Sat 18 May 2024 16:01:05 +0000
Files and hashes:         1: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: Zjib0K4u9RqCdRwmu7qlYyEO/Hks4mADGG6cq0cNyu0=)
                          2: koOmRpt80U1XMDBcl-wHPVI1a0M.roa (hash: TQUJZDDIMDMtvti9yGtB4z9nMUGYmpbFPB7hN+A3dIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:17:c9:de:d9:53:4b:9a:2d:b2:a7:f5:52:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
        Validity
            Not Before: May 17 16:01:05 2024 GMT
            Not After : May 18 16:01:05 2024 GMT
        Subject: CN=ddf996a3db4a809674ad3855c6d072c594d991b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:0d:14:3f:97:c1:9a:44:98:db:15:3c:75:
                    7b:ff:13:5c:37:17:df:d0:91:db:35:99:65:81:9d:
                    5c:d9:f6:03:3e:5d:64:eb:20:14:1c:69:3f:d7:96:
                    5d:93:46:32:19:83:58:9d:19:af:94:30:2e:26:b4:
                    3a:c4:d0:e3:27:e9:64:b0:7e:8f:c3:c2:9b:e6:36:
                    a9:53:f6:41:2a:96:de:9a:b3:4b:29:98:58:65:b3:
                    90:ce:8d:53:4d:92:81:92:e8:88:6c:6f:0e:96:ac:
                    19:1f:eb:4f:ba:bb:e4:e5:b2:02:3a:bb:8c:05:20:
                    0b:61:db:4a:dd:69:58:e0:a0:a2:4f:21:99:8e:38:
                    da:d8:b4:e5:de:c7:ff:d5:8a:14:ee:68:1f:85:14:
                    f6:06:1a:30:ea:b1:21:3c:44:85:e5:d0:37:41:d1:
                    03:55:c1:72:30:5f:0d:a4:f2:c0:61:a9:06:b8:46:
                    4c:f9:01:63:06:33:32:bb:c9:d5:4a:9d:73:9d:7c:
                    fb:c6:cf:78:c3:c9:47:58:00:c0:5a:50:81:4d:b6:
                    bd:fa:c1:22:08:8e:fd:a3:98:ae:2d:c0:a3:f9:ac:
                    11:fc:9b:c3:2e:8c:aa:87:dd:47:d9:32:0c:17:7e:
                    00:18:c8:ab:6a:87:ef:8d:a4:c9:66:e8:76:52:95:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:96:A3:DB:4A:80:96:74:AD:38:55:C6:D0:72:C5:94:D9:91:B8
            X509v3 Authority Key Identifier:
                keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:b2:ef:2b:8e:c2:85:58:f5:e5:7c:98:b8:27:c2:ce:4e:
         b0:e1:b8:91:0b:1d:5c:c0:2e:c3:82:1e:aa:56:c7:76:9e:63:
         c4:a2:db:26:fa:4c:37:e1:e3:97:d1:b5:cf:a9:d4:05:3d:ee:
         27:11:16:ce:7f:1f:fc:9d:c9:7a:97:bc:db:c8:14:e6:65:ee:
         c6:b1:96:96:38:24:90:d1:14:d6:94:21:a4:25:67:0c:4b:e3:
         02:d1:04:f5:35:ce:df:f3:d9:0f:11:a9:9b:f1:8a:1f:b3:00:
         66:b8:f2:5f:e4:4b:b8:e7:ae:26:24:84:a3:23:d9:a2:67:92:
         b2:be:23:87:a0:d2:08:f1:f5:72:2c:a9:de:c4:90:03:e8:45:
         07:99:3a:7a:d3:32:b8:6a:b4:8b:e6:60:bb:dc:50:26:eb:7f:
         ff:43:aa:63:38:fa:de:27:a8:b4:77:ae:2e:d9:1a:92:ae:56:
         0c:1c:78:ec:e9:c6:d7:0b:3d:82:d8:ae:8e:82:ef:a5:07:cc:
         96:0d:5e:c1:8c:fb:ad:18:aa:4c:9b:cf:29:bc:30:8f:05:c3:
         0e:dd:0d:3b:04:94:ee:13:c6:1b:b5:35:5e:c4:bc:87:54:91:
         c2:f8:d7:18:c9:00:1d:45:f2:b6:a4:4b:aa:60:ba:76:f1:79:
         48:15:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:43 2024 by rpki-client on console-fra.rpki-client.org