Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          /4SDF0plFK2KcU0k20Kxooug2Rq3WJAMTcUoMeTl9EM=
Subject key identifier:   9C:4F:3F:C0:B2:5E:5D:51:8D:8C:01:FC:39:1E:65:05:BF:AD:AD:AE
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       018F87ED8E4D5772B6B72B6604F29D57386E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          0101
Signing time:             Fri 17 May 2024 19:00:43 +0000
Manifest this update:     Fri 17 May 2024 19:00:43 +0000
Manifest next update:     Sat 18 May 2024 19:00:43 +0000
Files and hashes:         1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: k2L63ThQkst1wnSqZW+78h6UNL9QzhbMfBf2sCoICNo=)
                          2: D3hr63BRzI_bVwohYdyMQduoIyc.roa (hash: 8yiSRHLx4HfCASCDmqdadQBawFbY/tFW6EX4vrpKtJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8e:4d:57:72:b6:b7:2b:66:04:f2:9d:57:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: May 17 19:00:43 2024 GMT
            Not After : May 18 19:00:43 2024 GMT
        Subject: CN=9c4f3fc0b25e5d518d8c01fc391e6505bfadadae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:57:b9:93:5f:fd:32:8f:ff:8e:e8:ee:d0:
                    bc:4e:a8:39:30:a2:81:89:d8:eb:71:8c:db:35:f8:
                    bf:ff:3c:91:61:fc:97:7c:07:3f:0c:8a:d3:73:65:
                    57:27:92:74:45:35:5b:b2:13:e4:60:b7:2f:90:e6:
                    c4:36:d2:5a:30:1a:aa:2a:66:e7:68:aa:69:83:90:
                    71:2f:9a:9e:21:20:db:4f:f6:a1:0a:20:7d:67:30:
                    08:58:a7:8e:df:79:9c:01:e2:62:23:f6:1b:8c:5a:
                    eb:c8:27:eb:05:7e:b3:39:28:ab:cd:40:17:1a:49:
                    46:86:73:a3:3b:2a:d4:f6:b6:81:1f:47:58:c4:d2:
                    8e:17:e4:ae:c1:e6:87:29:fb:a8:cd:2b:bc:fc:c1:
                    84:01:3a:5d:36:f8:25:bd:e9:51:ad:f6:49:c2:37:
                    91:e1:a9:32:3a:be:5d:7c:25:5e:2d:6b:6b:3c:49:
                    26:f5:40:db:e7:c3:21:e4:3d:3d:5d:c3:49:1a:75:
                    43:08:c0:f6:3b:9b:c6:60:6c:59:2f:a2:ef:f0:33:
                    cc:a9:2a:23:7a:86:ca:1b:fe:2c:55:c3:f5:43:61:
                    49:79:2a:90:aa:a6:16:cf:af:f0:ed:b0:92:b7:8f:
                    02:31:3e:4b:8f:77:bd:d4:ec:12:c4:1c:16:a3:8e:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4F:3F:C0:B2:5E:5D:51:8D:8C:01:FC:39:1E:65:05:BF:AD:AD:AE
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:26:32:f2:8d:a4:d4:26:73:38:c4:e2:2f:92:8c:10:af:0b:
         d5:be:63:bb:c0:5a:06:bd:59:29:87:82:2a:55:ef:de:86:d4:
         65:e8:73:dd:92:d8:ce:44:f6:e1:a1:41:47:b6:a0:f7:be:bf:
         40:0d:51:44:23:7b:4e:94:c5:5d:67:2e:13:45:62:8c:14:6f:
         1b:61:e3:1a:f6:81:b4:b1:91:1e:98:53:ff:ed:47:e9:a1:de:
         0b:c0:33:90:fb:b4:19:e2:53:db:19:ad:4c:4b:e1:b1:6c:99:
         c6:c6:0d:45:e1:78:72:c0:cd:1a:f1:d6:af:63:84:36:3f:e9:
         ad:9c:a4:92:db:51:74:ff:19:39:c0:25:0c:ed:37:2e:69:fd:
         68:48:07:c1:e9:f7:b6:73:b2:2c:56:70:26:32:4f:ee:2a:1a:
         75:f9:5e:ce:45:7f:03:38:cf:63:a0:d0:0d:06:6e:28:a3:ce:
         b2:96:e5:e1:0b:42:27:f5:f7:0f:21:e1:dc:e7:db:58:6a:eb:
         eb:28:0b:3f:69:fd:0b:5e:ff:bf:76:d4:49:06:f7:a0:16:66:
         c4:de:8b:4f:e1:cf:24:84:d3:e8:1a:23:e3:35:39:05:c9:8b:
         c6:ca:65:84:ab:cd:f8:a3:e6:87:c2:07:8c:58:b9:88:f0:7a:
         24:78:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:26 2024 by rpki-client on console-ams.rpki-client.org