Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File:                     BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier:          wu8gzsUzFrff8+cMpK8+fl+yQ2npVdO4K+HaO7ALKyY=
Subject key identifier:   50:10:EA:A3:00:AD:19:28:FE:AA:F7:1F:7F:8F:5A:94:C3:A8:F4:26
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer:       /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial:       018F8891E6927BF7DAE4068D5EDF37C72131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number:          016B
Signing time:             Fri 17 May 2024 22:00:14 +0000
Manifest this update:     Fri 17 May 2024 22:00:14 +0000
Manifest next update:     Sat 18 May 2024 22:00:14 +0000
Files and hashes:         1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: b6odCdCnH3Wf/SkcBSyBlX22bNMufB6nFi5SzT6Kq6s=)
                          2: WPHiMng5h6h4NP3wZQr0F1jbZjQ.roa (hash: 3z0NoT9AeiuEuU+RksCSl23dxlWUUDuMPI0ejfrj8bs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:e6:92:7b:f7:da:e4:06:8d:5e:df:37:c7:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
        Validity
            Not Before: May 17 22:00:14 2024 GMT
            Not After : May 18 22:00:14 2024 GMT
        Subject: CN=5010eaa300ad1928feaaf71f7f8f5a94c3a8f426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:62:83:ec:30:66:fc:d6:aa:8f:6e:31:59:
                    e1:91:a4:d6:a6:4d:bb:4d:33:cb:76:eb:91:91:2b:
                    4f:95:07:11:02:be:c8:e2:6f:36:2d:d6:87:9b:79:
                    40:ff:16:d5:4d:4b:2c:aa:95:68:08:a9:99:44:6b:
                    3b:79:fb:17:2f:79:14:9c:d4:ae:2d:aa:3c:ef:bb:
                    19:12:dd:57:dd:69:62:2a:71:53:88:79:83:39:e7:
                    ba:f7:b5:be:ef:9c:a7:03:53:cb:f4:69:85:39:a9:
                    d4:82:20:98:09:3e:fb:88:b1:4b:18:7b:4e:76:38:
                    81:f3:87:b9:2b:48:ec:84:1c:42:fb:27:2a:59:17:
                    80:bc:78:22:b1:b0:bd:f2:43:8e:96:9a:49:76:58:
                    fa:e5:98:57:25:f0:7d:3e:2d:6b:54:be:ac:f2:40:
                    05:b5:7a:b5:b0:69:0c:e2:f3:11:6d:50:20:c1:da:
                    5f:dd:5c:1f:e2:db:da:b5:a3:9a:84:9d:45:2d:29:
                    ce:b0:f1:f2:28:86:01:10:3b:c7:17:90:e5:cf:6d:
                    c9:db:39:88:cb:3b:0e:10:e4:63:4b:26:e8:ac:95:
                    f9:4e:89:ef:6a:a0:71:6c:af:41:de:40:56:a4:f3:
                    d3:80:24:d0:59:20:4a:73:e7:42:c5:54:98:a1:88:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:EA:A3:00:AD:19:28:FE:AA:F7:1F:7F:8F:5A:94:C3:A8:F4:26
            X509v3 Authority Key Identifier:
                keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:7c:14:95:b4:c3:c8:95:15:1e:32:0c:4b:10:b7:74:ab:
         8d:b2:c4:95:c3:58:cc:2b:80:2b:c9:68:c7:36:46:5f:38:d7:
         51:b0:79:4e:bd:a6:f8:47:47:e4:d1:77:b1:35:a0:10:2c:9a:
         78:0d:1d:aa:c8:f0:f2:72:84:e5:de:ef:1b:b0:2c:ec:a2:88:
         08:bd:25:17:82:35:c1:2a:97:04:93:8d:1a:a3:3c:4f:b0:46:
         0d:d2:e3:57:62:f9:23:76:72:2f:7c:ee:6c:69:2a:cb:dc:44:
         44:63:b5:f1:5a:c4:63:50:27:b3:af:dc:f2:46:81:cb:8c:a4:
         a6:a4:ad:b7:a5:f9:1a:12:d1:f9:ba:7a:3f:3f:62:b7:bc:e1:
         26:01:37:b9:47:df:44:31:36:56:85:93:b7:82:50:26:21:d1:
         e2:2d:a7:a5:4f:67:27:29:5a:39:13:ef:cf:a5:ee:59:f3:6b:
         78:8a:df:82:d4:01:72:61:15:f9:ba:97:3a:f8:57:a5:4a:d5:
         74:82:e6:25:94:5d:14:d6:42:fc:22:93:5c:c2:4c:0a:e2:36:
         a2:e0:07:0b:fd:cd:09:df:a0:45:56:db:30:fc:76:a2:88:e2:
         67:c2:53:51:13:04:3e:b7:7c:c7:3c:77:54:d0:a3:22:34:5b:
         9f:e2:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:34 2024 by rpki-client on console-ams.rpki-client.org