Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
File:                     Bskt8sn6opFfxf61pCcBg0GfrvI.mft (raw, json)
Hash identifier:          6ifRzkeqPWJEcsq2NaalOyYpMMXN16ARNpy6J89zADk=
Subject key identifier:   D1:E1:25:7D:42:AE:62:94:AF:A6:17:67:C9:25:D9:C7:89:14:EE:F5
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Certificate issuer:       /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial:       018F5136CE124AF859025C2B2E66D5D03B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
Manifest number:          0F1E
Signing time:             Tue 07 May 2024 04:01:37 +0000
Manifest this update:     Tue 07 May 2024 04:01:37 +0000
Manifest next update:     Wed 08 May 2024 04:01:37 +0000
Files and hashes:         1: 9PdQPRnnZyiyxaFI3CXVAqLbtPo.roa (hash: 77bdVRJLI57StmPTeMBaNq7W14GnEAlDVEzircm5EEU=)
                          2: Bskt8sn6opFfxf61pCcBg0GfrvI.crl (hash: a5G737Ef8GsoXiVK4pcsPOb+47TAIBgAebK8S/njxck=)
                          3: Dzjm-dRUCEwIJF7oGvd6oWViXeY.roa (hash: Gs3jTXU8pRchN+b1A0n39SNDur/2UAOqvJ43Yt+2l9Q=)
                          4: KnvhxTL7dpxo_BOyegXjlI3Uf7g.roa (hash: mxPJTf9+JvvTuMo9nE+wQn/cTfpeOOmk+MoHiCrfIbo=)
                          5: L9PRnb3hz2wMPcfyvw8fA7CD1vM.roa (hash: cr15ChGxbAppf+/EW+Zpuy3YgwXknAa2LX/OAQnYurA=)
                          6: ZbE_ouSxhARCro-5cPFYIF61h-0.roa (hash: 67kHqs8lVq+cOtyt3VAlKd8PVh34Eva1hX2lK1P+gzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:ce:12:4a:f8:59:02:5c:2b:2e:66:d5:d0:3b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
        Validity
            Not Before: May  7 04:01:37 2024 GMT
            Not After : May  8 04:01:37 2024 GMT
        Subject: CN=d1e1257d42ae6294afa61767c925d9c78914eef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:04:2d:f2:ba:4f:d0:26:67:d8:e7:01:c4:
                    86:7a:b8:63:99:cb:02:c5:f1:b6:00:4e:ee:13:1d:
                    e1:4c:d9:c4:39:5d:74:d9:9c:82:7e:b0:87:70:85:
                    65:c1:b6:bd:25:52:44:e7:5b:14:34:5f:eb:b5:72:
                    34:9a:5a:2e:20:6b:c3:c4:de:cb:8a:2a:bb:05:32:
                    ba:6f:2e:50:dc:5e:03:94:c0:5e:63:ca:fc:f1:d8:
                    6d:d5:2e:62:a0:7f:58:b7:a8:10:24:26:20:f7:a4:
                    59:1b:71:62:24:82:93:7c:c3:33:d0:9e:60:b3:91:
                    03:25:28:75:3e:f9:ef:34:bf:5c:72:9a:c6:0c:1b:
                    9b:e7:f9:99:9a:74:d6:02:0c:7e:ea:11:f9:c2:79:
                    17:92:b1:ed:a6:d4:8c:ca:68:e4:26:ff:f8:7a:f3:
                    b7:c0:a7:1f:7a:7f:ac:cc:19:fd:43:c1:48:4d:7c:
                    4f:94:ec:55:a9:43:49:e9:64:65:73:ea:4e:2b:c2:
                    fa:c9:b2:3c:a7:7c:15:bd:9f:9b:e9:2a:6c:bb:76:
                    8e:86:11:04:2d:54:eb:66:4b:ec:10:a7:68:6b:14:
                    7a:36:30:04:94:37:fa:f9:a8:a8:53:a4:61:e4:b6:
                    a5:0b:e2:d8:43:8a:de:6f:a6:bd:d8:72:6a:cd:a2:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E1:25:7D:42:AE:62:94:AF:A6:17:67:C9:25:D9:C7:89:14:EE:F5
            X509v3 Authority Key Identifier:
                keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:f0:8b:e0:e8:98:d6:7b:9b:1e:7e:fe:05:42:a8:58:63:
         cb:8e:7e:aa:d3:2b:96:9c:b4:72:c1:50:64:01:eb:35:fb:7a:
         5c:f9:b0:42:e0:d3:ab:35:a0:fc:ce:6c:cf:86:f7:0a:46:47:
         4a:37:49:84:8f:53:db:62:8f:24:ed:18:8b:fb:72:03:39:b7:
         5c:8e:b1:34:e3:e5:a5:08:c4:0e:f4:42:50:2c:64:bd:26:16:
         cd:a1:0f:a4:88:a0:33:a0:7d:06:aa:69:e5:86:3f:97:3b:bb:
         f3:f5:57:5b:34:15:27:39:5a:1a:c1:f3:f3:5a:6e:82:e9:4c:
         64:58:fc:c5:9f:72:e6:ca:f8:dd:0d:e1:c7:29:7f:36:93:88:
         f8:e8:4e:07:8e:88:3d:fb:cd:3a:9d:60:a4:aa:bf:c9:75:73:
         7a:1c:67:79:31:0b:a5:39:f1:63:62:f6:51:ff:3c:42:61:a0:
         bf:e6:40:ad:b7:08:11:85:6b:15:e8:90:ca:80:31:33:16:5e:
         60:0e:17:a9:97:ff:8e:a3:66:e0:47:91:12:b6:8f:65:c8:9c:
         b9:c6:c3:7c:45:95:ff:36:d1:fa:2f:0c:a0:a2:15:5f:16:bb:
         c3:51:15:1e:80:05:24:da:6d:2f:d5:ca:9e:a9:7b:40:69:c7:
         23:9b:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:21:12 2024 by rpki-client on console-fra.rpki-client.org