Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          cXteMRuHWD6wHrBhJvcCT/YAFFHZE/EgtAPC2N+WY8I=
Subject key identifier:   9E:EE:B2:04:AC:03:BB:4C:1D:13:33:B9:71:59:74:16:51:85:76:B1
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       018FA32E1AE687FFCDB7D9D3B7D834C1F26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          1185
Signing time:             Thu 23 May 2024 02:00:58 +0000
Manifest this update:     Thu 23 May 2024 02:00:58 +0000
Manifest next update:     Fri 24 May 2024 02:00:58 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: UfNes7uyih6WUP638cyc2MNzMUCBrw30IEB4W6Gsths=)
                          2: s-v7tYSHCekSl7eUZeKYe4iHd54.roa (hash: dlCO9d232uKfLy5Pb76mmoWkS1Hep0ArJT+1zIKTQCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:2e:1a:e6:87:ff:cd:b7:d9:d3:b7:d8:34:c1:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: May 23 02:00:58 2024 GMT
            Not After : May 24 02:00:58 2024 GMT
        Subject: CN=9eeeb204ac03bb4c1d1333b971597416518576b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:11:75:2c:1a:46:18:34:ba:8c:74:28:ce:
                    79:50:92:03:1d:ae:a4:d6:79:69:11:e3:41:a2:92:
                    98:4d:1a:3d:05:9e:37:88:b9:3a:a2:55:5d:d1:f8:
                    8c:7c:95:93:3e:89:66:c1:30:81:54:40:54:22:34:
                    6d:ff:2a:c3:7b:e9:33:63:c9:f4:2e:9b:b0:9a:a2:
                    48:ae:84:42:9c:98:57:24:ac:79:13:1f:0b:22:c0:
                    8a:68:42:a7:72:f6:59:de:ea:d5:18:d3:ed:3e:3d:
                    a8:a3:17:26:2f:1c:93:70:18:33:c0:23:15:c5:1b:
                    cd:33:f8:31:2e:d5:18:84:f0:b2:e2:2b:e4:df:4b:
                    20:4b:e8:7b:2a:e3:a3:83:a6:c5:55:f4:a0:9e:e7:
                    62:61:94:7e:ba:82:32:f6:75:90:37:d2:20:35:5d:
                    e9:a2:ac:f0:96:78:2e:24:2f:77:4b:ec:86:7b:b1:
                    34:23:61:9d:5f:30:52:3d:de:07:ae:a5:71:fd:cb:
                    4f:ff:d1:4b:17:c2:1f:b5:23:b2:28:9f:8c:cf:1f:
                    4a:f7:62:66:a9:3d:d6:29:ab:c4:a9:d4:49:29:6e:
                    1c:10:c3:3d:9b:25:7d:54:f3:85:12:f9:28:0f:7f:
                    cf:6f:9b:f7:a9:c5:26:1c:fd:e9:5f:75:94:34:fa:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:B2:04:AC:03:BB:4C:1D:13:33:B9:71:59:74:16:51:85:76:B1
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:c5:ac:17:9f:f8:9c:ff:41:fe:4b:aa:78:71:ab:b8:40:
         8b:25:85:56:50:3f:fe:4d:2c:81:21:02:d5:7d:57:ba:ce:ae:
         11:0a:5e:f3:4f:82:e1:eb:11:c8:ea:86:b4:4e:be:d7:39:1c:
         46:8a:d1:67:53:cb:2b:58:d3:fa:1b:41:ad:63:7b:ef:12:63:
         b1:6b:d6:97:1c:16:ff:2a:24:92:fb:5f:a7:ff:a2:98:03:ea:
         31:3e:b7:28:31:14:10:3f:13:c6:4f:97:0a:79:69:1c:cf:03:
         ce:be:4b:17:11:97:63:4d:84:86:fd:2f:c2:3b:32:8a:18:94:
         f9:30:b6:96:0a:04:1a:da:07:65:3c:0b:4c:e1:ad:69:76:9e:
         29:60:0b:e5:2b:85:db:a6:e2:b8:e5:2d:e1:b8:34:43:68:a0:
         f0:ef:2f:9e:a8:11:36:c8:63:c6:d3:98:6a:27:8b:a7:bb:13:
         33:f5:e5:4a:9a:13:e9:7e:b3:f1:e2:48:de:3a:9f:b4:05:c6:
         f7:78:6a:3d:b4:19:25:3d:70:fd:0d:3b:ba:d2:bf:46:63:2b:
         03:a1:5b:5d:53:de:b7:9c:8f:ee:2e:61:7b:a8:2e:8d:0d:3b:
         91:06:17:5c:18:e3:c5:2a:a4:f6:bc:8e:39:5c:3e:ee:0a:38:
         51:ec:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:37:01 2024 by rpki-client on console-fra.rpki-client.org