Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          NkDtIqY1k73sqBVPtZecEpVKuvXd/D6dQ4rNv5X+n88=
Subject key identifier:   78:FE:E7:0C:88:DB:2B:A3:80:DC:A1:B3:BF:7A:DD:B8:AB:65:AE:57
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       018F45A0D64D2AF7BA5BFAB7F73351CB8D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          05A4
Signing time:             Sat 04 May 2024 22:01:59 +0000
Manifest this update:     Sat 04 May 2024 22:01:59 +0000
Manifest next update:     Sun 05 May 2024 22:01:59 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: sen/AvloZHU5FgzRLFZT0VspyCNCqT1VAhYXsRqv+6s=)
                          2: h_4s4-oq2XiFzUJ9Q6Oa7VoqsNI.roa (hash: 7BDjX7+AdP8ijbAUSeTSIVediAI5UH2Ya/Af9gwte60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 22:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:d6:4d:2a:f7:ba:5b:fa:b7:f7:33:51:cb:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: May  4 22:01:59 2024 GMT
            Not After : May  5 22:01:59 2024 GMT
        Subject: CN=78fee70c88db2ba380dca1b3bf7addb8ab65ae57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:ec:c6:0b:37:3b:77:70:8c:e0:44:98:ab:
                    54:29:b5:ab:83:84:5a:30:b9:13:01:3b:b1:61:e3:
                    3e:b3:2d:8d:7d:61:15:07:d9:bb:6d:e4:62:0a:14:
                    65:94:49:5f:53:85:ce:cf:5a:e8:b4:4e:4f:78:ea:
                    14:33:2f:be:6b:37:0f:0d:07:3d:2f:b7:13:d9:94:
                    2b:89:0c:b1:9f:f7:4e:65:c4:b5:34:eb:b7:96:b9:
                    79:e4:c2:86:8b:70:2b:17:63:c7:10:49:c0:b8:f6:
                    8f:9d:0a:ad:73:0a:1a:a7:e0:a8:a3:71:57:5d:c4:
                    b1:46:8e:cc:31:45:8b:73:6f:d0:2a:35:39:4b:2e:
                    46:a7:0f:c0:50:e1:d1:ee:26:ec:19:d5:1c:05:47:
                    6b:92:40:6f:65:21:d7:1f:66:94:f8:ef:07:49:45:
                    cf:41:26:76:7a:80:3a:ba:4d:44:48:a9:45:69:e6:
                    6e:04:8d:9f:82:61:45:86:a3:c3:47:c3:19:10:66:
                    78:70:ad:30:d8:8f:64:65:2b:95:96:f9:60:bc:cc:
                    aa:37:9c:fe:e0:7c:f4:a5:d0:d3:ca:df:31:bb:4a:
                    42:db:e8:f2:1e:b6:7b:cb:c8:be:7c:7a:4c:ec:06:
                    34:2d:bf:03:a0:5e:3d:7b:38:ce:52:4a:5d:8f:7f:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:E7:0C:88:DB:2B:A3:80:DC:A1:B3:BF:7A:DD:B8:AB:65:AE:57
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:f4:43:a6:14:02:a3:91:88:01:68:90:81:fd:8c:fc:1c:
         c1:44:70:78:c4:f7:3d:74:16:58:5b:22:52:8a:7a:4d:66:a0:
         77:f9:e7:9f:83:c5:3f:81:59:e0:7c:04:33:74:03:1b:10:d3:
         1c:97:c7:76:67:91:f6:5a:45:61:c5:31:85:43:44:58:05:27:
         05:9f:e9:21:9a:f7:44:63:04:c8:f3:34:b6:76:be:72:17:37:
         d2:9f:40:29:22:31:47:c6:b3:e3:ff:32:96:66:1b:54:bd:f8:
         1c:5d:52:30:9c:e8:a7:e9:86:48:28:c3:66:2d:57:5d:d9:b2:
         f7:94:9d:47:e9:6d:55:6b:c1:68:06:6f:c0:66:88:c2:b0:89:
         48:9e:b3:2a:d2:d1:45:fb:ef:66:c4:0d:1f:96:5f:6c:3b:47:
         88:50:db:41:71:d1:58:c6:04:19:78:a0:49:b3:0e:43:a3:5a:
         f3:24:cb:1e:eb:83:f8:be:b8:38:6f:21:92:a7:5f:31:3c:db:
         7d:4a:27:85:73:20:e6:b5:c5:fa:40:f7:43:40:dd:bc:ef:8b:
         45:f5:81:d3:e7:91:b8:28:df:d7:87:cd:b5:4a:1a:e3:8d:1d:
         64:f6:82:3c:ff:58:ad:9a:35:7c:58:60:62:d1:da:8e:0a:93:
         db:09:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:28:49 2024 by rpki-client on console-fra.rpki-client.org