Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          IrmRPl0ia/VOStQu8QvwPvc8bPzPfJZAUQR6/ck1OlI=
Subject key identifier:   64:70:36:8C:4D:C8:75:3E:99:10:53:27:D8:98:3C:F7:80:14:E2:10
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       018F478F9B869B46BFD0B64EC45762A50139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          0543
Signing time:             Sun 05 May 2024 07:02:24 +0000
Manifest this update:     Sun 05 May 2024 07:02:24 +0000
Manifest next update:     Mon 06 May 2024 07:02:24 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: w2JsmXGok9SquzddZiXWxcy+DX7K55628K/NxyJlp6o=)
                          2: KDEcwEs-EY38BX1F7FKvcYqHGAI.roa (hash: cZDnVQQpy3bWY8ZfUm99fXd6gLHuau6s0AU0xzAzgqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:9b:86:9b:46:bf:d0:b6:4e:c4:57:62:a5:01:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: May  5 07:02:24 2024 GMT
            Not After : May  6 07:02:24 2024 GMT
        Subject: CN=6470368c4dc8753e99105327d8983cf78014e210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:bf:79:a8:7e:40:23:0c:f1:67:2d:98:ae:
                    06:80:cf:02:d4:75:ff:32:3e:d9:e5:b6:d3:7f:42:
                    13:7f:36:ae:36:86:c8:6a:02:ae:bb:6c:01:12:dd:
                    6c:a5:3a:99:d8:92:91:bf:70:d8:3a:1b:b1:a4:db:
                    1d:21:06:c5:f7:eb:f5:f7:d1:23:a5:d5:a4:f1:1a:
                    12:54:5e:07:a0:8d:43:b6:5e:74:77:e9:ea:ee:90:
                    33:df:84:29:59:11:e1:c6:c6:e8:89:cd:e2:51:11:
                    69:e1:c3:2e:49:cf:29:55:4b:a7:e8:54:2e:52:b0:
                    69:94:28:fb:64:c8:48:be:3c:e9:b3:ca:de:18:ac:
                    1f:71:c7:a6:03:94:ab:ac:71:91:8a:70:91:ed:79:
                    23:5b:3a:02:54:17:37:2f:04:6e:0e:b1:37:0e:a4:
                    25:54:8f:29:40:c0:a7:b5:f1:e1:fe:45:6d:c8:3c:
                    37:18:73:e7:7d:2d:a1:0f:98:4b:59:47:6f:85:21:
                    9d:97:ed:6a:24:97:c7:64:23:7c:61:c1:aa:04:c4:
                    e8:ef:4f:af:3c:46:a6:97:d9:96:14:5a:38:8a:32:
                    3c:75:66:c8:5f:86:f5:55:c1:c8:60:ac:44:40:27:
                    d1:1b:2c:d5:fa:6a:d3:04:e5:7f:8a:4c:6c:fe:84:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:70:36:8C:4D:C8:75:3E:99:10:53:27:D8:98:3C:F7:80:14:E2:10
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:bb:83:f8:5a:08:e7:f8:7f:a2:0e:39:81:2b:0f:d1:a7:
         fb:1f:41:5d:28:64:26:35:44:ca:20:ec:70:58:e2:4f:3e:39:
         65:c2:79:ce:30:76:c7:98:58:54:dd:e1:e3:a3:60:97:28:72:
         21:a6:90:57:80:97:7c:ce:07:fe:d5:41:22:35:9e:52:82:f4:
         57:b8:bd:93:83:6a:d3:e4:3e:80:83:ea:41:90:e0:28:b7:4b:
         2c:6b:7c:ea:2f:92:e4:5a:86:da:6f:ac:4a:a7:9e:01:4a:a3:
         63:ed:53:0a:55:6e:c6:73:3e:89:f2:04:b2:3c:7b:66:fb:a1:
         e1:07:5e:9f:6e:a6:bc:08:0c:5a:4b:93:d4:cf:a7:5e:5c:0d:
         02:40:fc:e8:61:3d:f8:b1:39:36:0f:cf:a1:fc:fc:f4:51:15:
         49:b0:e6:fa:df:c8:e1:f2:af:9c:eb:8c:1c:46:23:39:72:21:
         9f:6a:44:d2:35:4a:d6:6d:89:0c:3f:1a:08:60:63:9b:a2:68:
         7e:48:e3:18:29:87:e8:c1:22:7f:bc:fa:8f:c7:e2:77:02:03:
         d6:1b:95:57:33:dc:7f:0d:74:e6:fb:cb:41:39:27:de:3d:03:
         14:bc:20:79:d5:af:33:6c:66:df:92:61:84:1d:f5:e9:88:99:
         4f:ce:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:21:17 2024 by rpki-client on console-ams.rpki-client.org