Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          4lAaq13Khcyq+S08cDOH4iENnYexa4mi4+T/wgtp9Rs=
Subject key identifier:   58:32:31:B5:C1:ED:BF:65:08:9C:15:BB:AD:90:D2:D4:AC:3A:08:43
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       018F4FED6DD83A1A93B56E5261F8A9EAEA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          115A
Signing time:             Mon 06 May 2024 22:01:51 +0000
Manifest this update:     Mon 06 May 2024 22:01:51 +0000
Manifest next update:     Tue 07 May 2024 22:01:51 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: pM4dQfSsZOY8Xo+dKCuBFfOylslidM03AB6JRoNr3mI=)
                          2: yHJlVvqc6IEGx9ThQLV6BNY1VCo.roa (hash: fc/QNhtaFj+EHfkwDZYML3pjp48/EQkxNhWwuDYPg4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:ed:6d:d8:3a:1a:93:b5:6e:52:61:f8:a9:ea:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: May  6 22:01:51 2024 GMT
            Not After : May  7 22:01:51 2024 GMT
        Subject: CN=583231b5c1edbf65089c15bbad90d2d4ac3a0843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:ad:18:eb:f9:ff:86:e4:4b:de:38:24:db:
                    f1:f7:05:29:35:2b:7a:ac:e8:bf:fe:83:b1:3d:b1:
                    16:f3:f2:e9:5d:76:fe:d5:ce:6b:ce:29:2c:db:98:
                    7b:65:ab:27:53:2c:6a:1f:cb:a0:a9:90:77:f3:cd:
                    c7:59:1f:9c:41:4e:8c:a7:95:5d:4c:43:3d:4f:72:
                    57:67:59:24:f9:83:3c:1c:c0:09:65:f0:9f:66:93:
                    86:71:15:92:31:ff:f2:35:9e:70:94:48:1f:4d:e3:
                    24:1a:4f:8a:f1:d6:d2:2e:80:ff:3a:8a:ad:35:44:
                    78:fb:a4:b1:de:ca:79:b7:98:84:c7:13:72:cb:44:
                    b8:0e:ec:51:b0:39:7e:dc:c3:6f:d9:89:39:c7:af:
                    9a:8f:6b:c5:19:d4:f4:b8:24:75:65:ef:77:1c:2f:
                    2d:92:f0:6d:0b:97:d0:78:0e:ed:bf:7a:02:0f:ac:
                    01:72:7f:e4:0a:03:ec:dd:ab:03:13:77:80:81:4b:
                    31:49:d9:77:62:15:4d:4f:b7:06:dd:3c:c1:de:b0:
                    52:3b:d9:8b:eb:73:f0:a1:01:34:63:51:8c:b3:b7:
                    cd:08:94:1f:77:b8:ca:b3:47:d8:f0:7b:7c:8b:92:
                    51:f0:d0:5d:16:ef:7d:5c:0e:d7:2f:a0:5c:58:c2:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:31:B5:C1:ED:BF:65:08:9C:15:BB:AD:90:D2:D4:AC:3A:08:43
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:24:43:d4:38:60:00:5e:ac:9b:c6:2f:6e:77:46:03:57:
         1f:b0:16:a6:ef:5f:3d:4a:d8:d7:25:64:77:a8:e1:36:9a:60:
         c5:3b:8a:af:07:f4:7c:d8:0c:e3:0d:53:8e:3e:b3:41:cb:71:
         49:e3:44:ff:22:7a:d4:44:f0:f6:81:e3:43:a3:8f:38:a2:2b:
         bd:0a:aa:e5:a0:6e:a4:6a:da:0e:39:7e:93:7a:16:fc:03:b3:
         3d:6d:97:31:da:92:9c:6a:86:9a:92:65:b5:c3:91:8f:8f:23:
         14:96:66:4b:d8:9c:e5:27:28:e1:61:6f:fb:52:02:da:af:f3:
         f9:e4:fb:13:a9:e6:59:a5:d4:0b:43:dd:7c:f8:89:1f:81:8e:
         19:70:ca:74:40:ab:56:6d:62:97:94:b1:75:82:8f:96:c2:25:
         c2:30:80:f2:e0:e7:a4:14:e8:ae:58:c2:d5:f6:73:43:c2:6c:
         a8:41:89:fa:01:bd:51:72:a6:0e:dc:8e:16:fe:11:8f:78:67:
         99:0d:8c:03:e2:c1:73:db:bc:3b:88:cb:d1:29:59:ed:b6:1e:
         81:56:6d:54:98:db:03:52:c5:a9:f7:54:87:df:a6:e7:f0:f5:
         ba:d1:fa:3f:2a:88:dd:67:a8:38:b3:f2:e5:41:c4:e7:db:c0:
         a4:93:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:15:13 2024 by rpki-client on console-ams.rpki-client.org