Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          61GFF52uVmL0OOfQcpgBHH2aKPurBqrv/bEq5GRS50o=
Subject key identifier:   CA:78:CE:83:C8:2C:08:EA:13:ED:B6:3E:1F:57:EE:4D:38:9E:E3:67
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       018F343F76B7E7C2C0B0ED9D0C25BFB4AD8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          0833
Signing time:             Wed 01 May 2024 13:02:05 +0000
Manifest this update:     Wed 01 May 2024 13:02:05 +0000
Manifest next update:     Thu 02 May 2024 13:02:05 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: n+6fuQKG3yGocydi8HSeR2bgngnZ9VMzP55k38fKDVc=)
                          2: Ed40lhL1_58AJhUBIq9C8xb1UYY.roa (hash: VozeE9xRGUsYGucaA02JGQEO3VJkzXZzwklmJwgzAqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:76:b7:e7:c2:c0:b0:ed:9d:0c:25:bf:b4:ad:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: May  1 13:02:05 2024 GMT
            Not After : May  2 13:02:05 2024 GMT
        Subject: CN=ca78ce83c82c08ea13edb63e1f57ee4d389ee367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:a5:0b:b8:48:ad:45:59:0d:1d:e1:25:6b:
                    5b:43:ca:02:4d:70:e0:3a:dc:2f:71:91:d4:71:64:
                    7e:87:08:f6:f9:00:19:c0:4a:20:b6:cf:98:b8:f8:
                    b1:67:71:4d:02:38:cb:25:1d:50:11:92:7c:03:07:
                    96:2f:70:ba:5c:6a:97:75:e5:cf:43:7d:16:2b:79:
                    42:03:7c:0d:c0:ee:3a:67:84:01:b9:14:b4:69:19:
                    21:e7:46:dd:81:d6:51:70:ad:c4:3d:2c:ff:15:24:
                    0d:82:34:ed:c7:59:22:a2:f1:91:15:d4:4b:4b:8e:
                    a3:86:07:08:42:95:67:2a:3b:38:07:88:3d:7c:81:
                    cf:ae:25:b8:e7:6f:f7:39:19:59:16:28:16:a4:3b:
                    77:e5:6a:f1:1d:c3:b4:fc:45:58:24:ae:67:ac:66:
                    ad:33:44:90:47:6f:9e:e3:b2:37:27:64:54:fe:d6:
                    09:28:c1:57:f7:98:bf:7c:60:e6:e5:6f:f3:eb:2d:
                    f4:59:1f:d5:28:9e:75:31:77:ab:c1:9c:45:52:65:
                    29:da:c5:ef:e7:af:16:9d:af:cd:c3:d7:da:55:2c:
                    d0:51:fb:26:8b:e4:a9:2b:c5:43:89:9f:35:80:73:
                    8b:7e:79:d6:b9:ce:da:ea:f4:43:bd:ba:63:fa:b9:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:CE:83:C8:2C:08:EA:13:ED:B6:3E:1F:57:EE:4D:38:9E:E3:67
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:34:50:47:e7:6b:d4:f5:79:47:24:ef:80:dc:fb:ec:10:e7:
         bd:26:d4:52:ed:86:e1:8b:e7:07:7a:12:ef:28:a4:d9:0c:23:
         f9:f6:5d:9e:2d:fc:59:31:27:05:59:81:6a:96:d7:75:68:21:
         e6:a8:75:e7:39:0e:4f:0a:c9:86:bf:b4:5b:2c:8f:7e:da:65:
         f8:93:34:9d:0c:f5:96:fd:26:f7:aa:c1:c4:58:a7:25:da:45:
         f8:2e:1b:17:e4:6f:16:55:08:c7:6a:51:dd:3d:7d:f4:93:a8:
         45:ec:21:59:8b:32:3f:ae:fa:84:1e:c2:96:26:b3:f8:46:d1:
         09:1c:41:49:db:53:22:61:71:28:bc:7f:31:6e:0e:bd:20:28:
         69:b9:6a:05:72:f7:e0:26:01:01:14:23:42:b9:f3:dd:a6:28:
         76:ec:5f:bb:e9:a5:ff:74:92:71:cf:84:83:61:9c:32:9b:c0:
         85:06:40:fa:1c:9a:a7:57:ec:5e:ea:0e:0c:b9:c8:b7:e9:32:
         3a:78:cc:b0:34:c0:9d:da:aa:4e:a6:ba:c9:3a:b5:bd:4b:13:
         64:19:27:37:8a:a1:c1:64:f9:44:25:99:e2:65:81:c8:d3:2a:
         dc:0d:05:f5:cc:53:01:90:3d:04:e1:7a:80:33:2f:a6:7c:2a:
         bb:c1:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:02:53 2024 by rpki-client on console-fra.rpki-client.org