Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          y7s07mBTyc7LaU4bkoQ8tGme5tYNAWdZV9YGI5Ft26E=
Subject key identifier:   DC:7A:6F:39:01:53:02:80:2F:B6:93:CF:8E:98:C1:11:B4:1C:5F:1E
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       018F4A21ACADE0C8D9672A20A2D8E6786816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 19:01:11 +0000
Manifest this update:     Sun 05 May 2024 19:01:11 +0000
Manifest next update:     Mon 06 May 2024 19:01:11 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: 5zdkHYN6NfHv35/pNshIrdGvEVcU1TglrIi/TH2NP00=)
                          2: GidnpJUdBBsN_scgTYlfb_06j_c.roa (hash: v+Mh46h6yo6EL+JlKI1a6yDTAN/yqlBATM96X1jxc9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:21:ac:ad:e0:c8:d9:67:2a:20:a2:d8:e6:78:68:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: May  5 19:01:11 2024 GMT
            Not After : May  6 19:01:11 2024 GMT
        Subject: CN=dc7a6f39015302802fb693cf8e98c111b41c5f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:ea:87:45:7e:5c:aa:48:c7:ad:06:ad:76:
                    27:18:a8:6e:d5:3f:b7:d9:73:97:f5:0f:05:ce:3a:
                    69:96:38:68:24:54:0f:5f:0b:36:3e:53:e5:c6:b8:
                    38:70:e8:f3:f3:65:2e:d0:54:ee:c0:b6:c7:e9:18:
                    81:1b:0a:f1:b9:e8:1e:aa:6b:04:b4:39:4d:fe:05:
                    e1:1a:5c:01:e4:6b:33:a9:bb:d2:46:4f:33:a9:f5:
                    6a:1f:c4:c7:82:c4:02:53:3c:71:1a:9a:07:54:21:
                    dd:1f:5e:b6:03:ab:f7:9c:9a:dd:82:2c:4e:13:e1:
                    e1:32:9d:cf:17:5a:10:1f:ae:c8:02:5c:98:1a:6a:
                    ca:4e:22:b6:6c:2a:85:4c:08:db:30:b3:b6:82:6a:
                    40:04:2d:c2:f1:61:92:0f:57:88:e1:d1:58:df:81:
                    88:71:d8:13:e3:27:ab:73:dc:d5:2a:1c:99:3b:ea:
                    6b:e4:97:bd:20:29:7b:57:e9:42:e2:76:6e:05:a5:
                    39:30:5b:a1:16:e6:0e:1d:08:8c:1b:92:4d:0f:0e:
                    33:c1:d5:e6:db:47:0e:be:ab:b0:5a:7e:f3:1d:a8:
                    42:4f:58:69:77:6d:0b:52:b6:c9:09:07:fa:9b:7d:
                    e0:75:b7:c7:03:c6:76:b7:0c:48:96:7c:96:7e:51:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:6F:39:01:53:02:80:2F:B6:93:CF:8E:98:C1:11:B4:1C:5F:1E
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:59:33:46:23:e6:f8:e7:8f:eb:51:30:c6:c6:50:48:70:
         28:4b:97:21:9a:83:2b:70:69:d3:d8:0b:12:8d:b4:ec:0b:14:
         54:c1:d4:38:08:af:fc:1b:63:7d:7c:19:58:2c:4d:80:39:31:
         2d:04:1c:39:cc:2b:0b:ec:b6:61:41:2e:d8:5f:f9:87:da:a4:
         79:e1:35:8f:8e:40:23:1b:21:0d:0d:c2:be:52:e9:cb:a3:7f:
         fa:b4:5a:d8:0c:19:a9:a5:19:68:4a:c5:7a:26:5d:1c:33:81:
         d1:0e:35:a4:c0:6b:cd:25:06:b5:ff:24:e7:06:d7:dc:7c:b0:
         30:d9:75:39:9b:16:01:00:3a:8e:6d:29:1e:7a:89:9f:f1:40:
         3d:69:05:44:d3:a4:83:5e:83:25:27:38:fe:1f:f7:f1:8a:15:
         a1:3a:f3:af:3e:1e:89:d4:17:46:0e:13:5c:f5:e2:6b:58:9e:
         ac:5e:19:6f:4b:d5:bc:52:de:b7:c5:95:f7:82:e8:f7:28:9f:
         20:20:8b:37:ee:52:61:69:fd:ff:56:8f:4d:02:1d:80:a6:04:
         57:18:0c:f5:9b:9a:f2:da:c6:28:3d:f7:f6:5e:63:02:2d:c4:
         61:2a:60:cb:6e:74:f6:3c:32:29:a6:87:5b:71:aa:4a:7d:19:
         69:40:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:25:11 2024 by rpki-client on console-ams.rpki-client.org