Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
File:                     BuSteIiwjKRTVje2CLt9whSmYk8.mft (raw, json)
Hash identifier:          xd4FsaCbLAo6qdUP5L8eLovGAaCrqv399+WqzfgBi6Y=
Subject key identifier:   EA:9C:2A:EC:76:41:02:BB:AB:BA:6D:4D:31:2A:2C:7D:69:8F:07:0F
Authority key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Certificate issuer:       /CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Certificate serial:       018F5136C3310CDBBEC8D12F6F9A3CE5F751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
Manifest number:          09F8
Signing time:             Tue 07 May 2024 04:01:34 +0000
Manifest this update:     Tue 07 May 2024 04:01:34 +0000
Manifest next update:     Wed 08 May 2024 04:01:34 +0000
Files and hashes:         1: BuSteIiwjKRTVje2CLt9whSmYk8.crl (hash: 9ybbRvHfwbynA0bev2zuVFx8ES1EB4BOoSLy5yNC8ME=)
                          2: fqMLSZVor2Dn8o_xbMYJHKEzfU0.roa (hash: a0QzmVG2Y2rnrD4BamBcOThr0McANmumE2kTlpkt5V8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:c3:31:0c:db:be:c8:d1:2f:6f:9a:3c:e5:f7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
        Validity
            Not Before: May  7 04:01:34 2024 GMT
            Not After : May  8 04:01:34 2024 GMT
        Subject: CN=ea9c2aec764102bbabba6d4d312a2c7d698f070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f4:89:38:53:21:1a:89:4d:66:9a:80:5d:18:
                    08:09:83:8d:03:c7:10:72:33:11:07:b6:24:c5:82:
                    c2:57:66:6e:e8:d0:2d:34:51:37:ec:e9:ec:24:c3:
                    57:c2:f1:84:32:de:45:08:bb:81:68:66:14:35:88:
                    a2:0c:46:ab:cc:68:b0:ad:81:1c:67:ca:fb:b7:c6:
                    a2:27:e6:95:46:3c:85:ed:08:51:f7:02:39:f7:0d:
                    8b:ac:ae:e5:db:f3:19:c9:e9:ae:f0:56:95:86:0f:
                    37:b9:50:f8:41:96:50:d6:4d:d1:3b:93:29:99:8a:
                    6c:31:2d:30:ce:2c:71:92:b2:ec:80:ab:f4:b3:58:
                    2e:82:d8:69:7f:7a:45:cc:55:1d:ef:66:f0:50:03:
                    c8:f4:ea:fd:cd:5e:f9:28:88:65:a0:d0:d1:39:32:
                    03:03:8e:f4:93:4b:3f:0e:2d:94:b5:c4:8e:16:75:
                    c3:07:70:7f:1d:aa:e5:f0:de:7c:24:4b:19:9e:25:
                    bf:ae:ed:f2:fb:31:5a:2a:56:e1:7c:aa:97:09:14:
                    b6:89:e7:68:20:05:c3:b7:8b:cf:31:92:53:53:bc:
                    a4:48:68:7c:c1:e2:f5:8e:8d:57:91:a5:a7:1b:1f:
                    36:ff:b4:67:d6:32:98:7b:2e:50:ca:56:bc:e5:fa:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:2A:EC:76:41:02:BB:AB:BA:6D:4D:31:2A:2C:7D:69:8F:07:0F
            X509v3 Authority Key Identifier:
                keyid:06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:39:85:ce:67:1f:9f:91:89:70:6c:98:5d:c4:aa:c3:a1:40:
         d5:bf:37:ea:05:f8:b5:56:79:d8:5c:42:58:c2:5f:51:c2:66:
         56:a5:97:34:ad:a9:cb:e8:32:f1:bd:c0:fd:21:6e:ae:aa:b4:
         25:76:ee:82:ac:7f:c0:88:ac:e6:65:c1:a5:97:61:56:5d:f2:
         0a:ea:bf:70:14:d9:80:72:ab:a7:33:89:a3:14:8f:a8:19:9a:
         28:33:b5:51:68:0b:ad:2f:db:56:31:ba:e3:7b:4e:0b:33:f5:
         d1:56:4a:2e:64:96:ad:ac:c0:42:4d:ce:97:85:e1:2e:d9:a0:
         d6:7d:ea:08:36:46:ae:0c:51:41:cb:6f:0f:ec:94:8d:9d:47:
         0d:b3:5f:f4:e2:5e:9b:be:72:d6:61:ab:3e:42:30:78:62:a5:
         8b:91:28:46:d1:51:37:ed:b0:3b:7b:79:da:40:c3:1d:ec:20:
         da:54:86:42:d2:9d:4b:6b:37:22:4f:49:3d:02:56:9d:5a:bb:
         af:0d:e6:df:aa:f3:c9:76:e7:87:be:e2:fe:2b:1a:cc:24:5a:
         ea:28:da:6b:4f:69:a8:df:88:04:87:92:2a:1c:aa:82:d8:cb:
         34:fa:db:74:bb:cc:31:a0:79:90:52:bc:c4:bd:95:9d:f1:05:
         52:68:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:10:44 2024 by rpki-client on console-fra.rpki-client.org