Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File:                     CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier:          nhcpQJzZfd0zpuBbTpFiv0sq+TsFflpSYFrDqJLBqJY=
Subject key identifier:   BB:DD:E1:5F:64:1F:18:72:FB:65:47:89:BF:FC:73:92:85:42:3E:3B
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer:       /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial:       01904CE8D2A51C653EEE8B9D18F7A48775C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number:          0EF6
Signing time:             Tue 25 Jun 2024 01:00:44 +0000
Manifest this update:     Tue 25 Jun 2024 01:00:44 +0000
Manifest next update:     Wed 26 Jun 2024 01:00:44 +0000
Files and hashes:         1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: wlqDCLY4YUkcfxutQdImoSZBkEL1nkW//K+Xsao5A18=)
                          2: nlmP7pjabv-6CREPPLzW0oB-JcY.roa (hash: aozceqUheL9kWi6RIa8xM4ehcgYsA0Kqs773oBsQu0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:e8:d2:a5:1c:65:3e:ee:8b:9d:18:f7:a4:87:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
        Validity
            Not Before: Jun 25 01:00:44 2024 GMT
            Not After : Jun 26 01:00:44 2024 GMT
        Subject: CN=bbdde15f641f1872fb654789bffc739285423e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:0c:16:f6:74:66:16:a7:b9:2e:7a:5e:24:
                    90:8c:3c:09:79:07:71:83:6a:1f:1b:a3:ec:4e:18:
                    79:85:8d:4a:74:12:40:b6:e2:e3:ec:f5:1c:f2:71:
                    fe:99:31:16:3e:fd:89:bb:56:58:ba:76:5d:3e:50:
                    53:dd:16:c9:10:36:26:43:b1:b3:8b:f4:c4:f2:cc:
                    83:14:c1:f2:d7:5a:b5:20:e6:6e:d2:94:81:79:3f:
                    f6:6a:eb:1c:c7:71:65:3a:bf:a6:92:8f:ab:d8:89:
                    4d:5b:a7:05:51:51:f6:97:ec:55:e5:57:96:e2:ef:
                    4b:9b:aa:65:02:97:53:80:04:fd:1e:bd:7e:e1:ac:
                    92:a3:1c:fa:86:dc:a1:ea:3b:b9:eb:f7:0a:0e:39:
                    0e:76:8c:13:c2:45:e4:74:45:ca:df:6d:e7:fa:6e:
                    da:eb:1f:3a:65:aa:f8:41:e1:53:c4:b4:65:49:ec:
                    ff:0f:c8:9f:b3:07:e1:3e:22:98:96:15:6c:eb:c0:
                    f4:d8:f8:78:0e:d1:d5:28:40:6a:cf:ab:85:32:78:
                    05:60:af:ba:da:61:da:54:54:74:d0:fc:31:15:28:
                    12:a5:f6:1e:fd:af:c8:85:d6:c3:9b:67:f7:a7:6a:
                    ab:1d:50:55:ed:29:6d:fb:9b:0c:72:e4:0c:6f:b0:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:E1:5F:64:1F:18:72:FB:65:47:89:BF:FC:73:92:85:42:3E:3B
            X509v3 Authority Key Identifier:
                keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:14:27:e6:bc:ae:1a:dc:14:08:9c:c1:a2:cb:3d:6e:ce:
         ca:2d:05:9c:24:49:cb:d0:8e:21:9a:3f:f1:49:e9:c8:78:94:
         3e:3d:81:34:b2:73:7c:a8:80:7c:e6:0a:14:c7:1d:d6:fb:e7:
         89:df:44:4e:e5:92:97:69:0a:b6:0f:33:a0:0b:34:38:1f:74:
         f0:41:30:3a:9b:62:20:7f:5a:6f:8d:3d:b0:26:46:ba:7b:01:
         82:6e:1a:6f:d8:a6:d0:13:2e:a9:6d:47:1f:35:e5:c0:f4:2e:
         d1:1b:ad:74:69:94:41:3b:04:c1:45:28:ba:30:c7:11:ec:9a:
         ab:79:a5:eb:55:48:8d:98:b2:40:a4:72:54:93:49:e2:3b:44:
         4d:fe:b6:48:d0:b6:33:c1:69:d8:4f:95:58:86:d5:79:8d:34:
         88:2a:e9:bb:a9:b4:34:b7:a1:c0:c1:fa:ff:c8:ea:c7:6d:ce:
         15:a7:bc:e7:c1:1f:e4:09:6d:9e:29:52:5a:d1:0e:2b:77:a1:
         a0:82:82:e2:c5:8b:f7:32:8d:38:d2:71:db:a6:00:02:dc:36:
         52:f6:db:10:51:8d:5e:49:13:cc:aa:c0:50:94:5d:e4:72:63:
         63:d1:73:69:65:17:00:e0:a7:a7:d8:71:b7:c8:26:29:39:1e:
         c0:ae:4a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:43:34 2024 by rpki-client on console-fra.rpki-client.org