Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File:                     BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier:          5jO/Sjzr1gC2HvttMI/M7XXK9bvNsnQH6/tMwhVMAck=
Subject key identifier:   C6:D2:64:59:97:25:4B:55:5C:2E:42:69:15:5F:B9:DA:2D:09:01:F6
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer:       /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial:       018F43B2D175E95FCEA2096B6166A15CD4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number:          07AD
Signing time:             Sat 04 May 2024 13:02:23 +0000
Manifest this update:     Sat 04 May 2024 13:02:23 +0000
Manifest next update:     Sun 05 May 2024 13:02:23 +0000
Files and hashes:         1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: QaT0YrY6uL73Hs4XDqXGLKxetwq34FsBlckIxfHtEzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:d1:75:e9:5f:ce:a2:09:6b:61:66:a1:5c:d4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
        Validity
            Not Before: May  4 13:02:23 2024 GMT
            Not After : May  5 13:02:23 2024 GMT
        Subject: CN=c6d2645997254b555c2e4269155fb9da2d0901f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:3a:fe:e1:dc:28:d2:44:e0:72:d4:47:b0:
                    b9:88:b5:35:3b:d2:82:1b:a4:ab:fe:02:ff:56:0f:
                    6a:7b:3b:7c:4d:45:cb:43:5d:02:cb:27:f5:e4:a8:
                    fb:16:ce:60:7e:d7:d9:ab:9e:0e:51:97:36:6e:6f:
                    f9:44:7a:14:ed:0b:d7:cc:40:65:fb:f9:98:d8:6d:
                    68:c1:b8:c8:4d:94:f7:78:06:cb:b7:35:7b:0d:33:
                    b4:49:60:f3:ca:62:cc:02:62:57:6f:dc:c2:6c:49:
                    0a:f1:d1:ec:12:c8:bd:50:b6:95:0c:82:20:0e:91:
                    70:2b:32:ee:23:fb:7a:ff:be:54:b7:c3:f1:ed:78:
                    79:c2:87:98:74:7c:97:65:4f:16:d5:a0:95:68:18:
                    69:3b:c9:2a:ff:6d:aa:6f:22:ff:06:c2:46:b8:9e:
                    23:1a:82:51:af:8d:27:d8:dc:fa:97:2e:14:65:24:
                    b7:5f:3c:7c:d3:c4:a5:60:96:26:dd:5b:b8:21:4e:
                    d3:6c:67:78:6f:1c:e3:4d:0f:10:fe:c5:1a:ed:af:
                    d2:56:27:bd:50:56:18:17:31:d3:1d:d8:f7:1d:17:
                    e3:93:ae:c8:75:0c:7b:80:3d:1d:46:ca:c7:5b:c5:
                    46:e3:95:6d:a3:5e:57:8d:77:ab:77:1b:8e:2b:30:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:64:59:97:25:4B:55:5C:2E:42:69:15:5F:B9:DA:2D:09:01:F6
            X509v3 Authority Key Identifier:
                keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:1a:cf:bb:84:dd:ea:a3:5e:83:33:84:5c:46:5a:e3:99:
         99:54:69:5f:4c:4f:31:63:68:9c:6e:8b:3a:79:e0:4f:d3:b4:
         8d:1d:1c:2c:ca:c2:b7:4e:0c:b9:dd:08:49:44:c5:e7:53:d0:
         8b:16:47:8d:57:80:b0:11:f1:f3:ca:12:28:f3:6c:5f:3d:2d:
         e2:4f:6b:b7:ff:84:a0:88:c2:fd:0a:dc:af:20:4d:9c:6f:59:
         cb:9c:66:b7:47:21:da:17:8e:06:62:88:ed:c6:94:89:ca:66:
         0d:86:40:76:19:07:55:2d:15:88:fa:bb:86:92:4c:8c:57:cc:
         8c:cf:f0:d7:bb:93:14:51:94:b8:25:f3:17:8e:92:2d:fd:e9:
         ab:55:c7:68:f9:36:ec:a7:8c:b7:f7:9b:b8:f4:93:1b:4a:e6:
         8a:5d:d1:ad:51:65:f8:76:1e:93:f9:66:fc:5e:ac:bf:3c:5b:
         4f:0f:ed:ef:1c:91:02:33:48:30:be:4f:90:66:79:1a:6c:1f:
         9c:e1:4a:d1:53:6c:da:fd:6f:32:df:3a:4e:f4:98:c9:20:42:
         c8:e2:98:7a:cd:27:9b:c1:f9:5f:fb:90:a2:cf:a4:98:b1:2c:
         1d:81:82:54:8b:44:79:41:d3:ff:3e:a5:a3:db:40:13:a3:08:
         76:a4:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:14:12 2024 by rpki-client on console-fra.rpki-client.org