Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File:                     0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier:          XpA5umBMK1a+NLPEy3YgKim5wRm8TV718qIfqJCZhFY=
Subject key identifier:   F8:1B:F1:DE:A5:87:5E:AE:C0:E1:20:CD:E3:BE:8A:47:B2:C2:B6:CC
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer:       /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial:       0193549CA4A4205894BEDC331F6530DEFC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number:          1118
Signing time:             Fri 22 Nov 2024 16:02:52 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:52 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:52 +0000
Files and hashes:         1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: RR39+6dImSnL3U43mn/VK+RFtEBrELkwyXIJ/BUIvKE=)
                          2: Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa (hash: lGkRewsGYiNWNIdnm1tydofRrF9heZ7cTaHRhq/tuQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:a4:a4:20:58:94:be:dc:33:1f:65:30:de:fc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
        Validity
            Not Before: Nov 22 16:02:52 2024 GMT
            Not After : Nov 23 16:02:52 2024 GMT
        Subject: CN=f81bf1dea5875eaec0e120cde3be8a47b2c2b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:7f:aa:cd:9e:46:eb:86:dc:62:91:d1:7c:
                    64:cb:18:7d:4b:16:43:a5:0e:31:11:39:2b:06:c4:
                    09:68:bf:34:8f:89:a3:23:bc:83:e6:5d:64:24:0c:
                    f2:65:04:53:33:c5:d9:8d:54:69:81:70:ec:d2:dd:
                    1e:0f:8b:cc:ba:f3:cb:be:2f:a3:f2:27:cc:c4:6e:
                    10:65:2e:bc:68:29:2e:ba:4b:10:37:aa:73:fa:6d:
                    61:00:c3:82:10:9b:05:81:46:9c:40:2b:4c:9b:db:
                    5d:bc:d4:7c:d6:f9:b0:6c:4b:13:b6:3c:47:34:e7:
                    4a:d9:a4:32:bd:7a:94:d6:f6:8e:0a:32:74:ed:bb:
                    8a:05:af:d4:dd:d5:21:a7:34:aa:45:18:da:2d:83:
                    5c:a2:43:4f:27:44:50:a4:1e:86:c3:27:05:d3:3b:
                    5c:4f:70:56:ab:de:24:cc:27:ed:c0:1e:c8:85:63:
                    ff:74:9c:39:47:ec:08:a9:06:36:54:9f:f9:0e:f3:
                    bf:6c:22:84:f7:69:b2:be:2d:16:ab:7d:e6:6f:fa:
                    01:8a:96:b9:07:67:9e:aa:bc:be:ba:4d:e6:e9:f2:
                    45:d4:5c:90:fa:c4:fa:35:bc:5c:36:34:2a:87:b0:
                    8c:f1:53:dc:3d:8f:45:9d:d7:0e:e3:cf:0c:a2:d4:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:F1:DE:A5:87:5E:AE:C0:E1:20:CD:E3:BE:8A:47:B2:C2:B6:CC
            X509v3 Authority Key Identifier:
                keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:71:96:b0:79:f6:ec:ce:cc:92:8d:cc:39:c0:eb:b4:11:da:
         40:ba:ba:2c:aa:92:61:cd:0b:e0:a1:b4:42:4a:fc:19:25:f1:
         c2:01:34:57:3a:e4:a8:ca:40:c4:39:e6:4b:ff:ec:e3:de:9a:
         c5:e4:23:68:02:2d:23:19:ca:42:4c:e5:2f:de:14:a0:40:a2:
         27:5c:39:5a:94:e3:5a:e8:ec:02:86:55:b1:78:a2:1c:cc:3a:
         b5:c3:56:a5:24:c5:2f:8f:75:87:c7:5f:00:ff:0a:d2:44:5e:
         01:de:a7:3a:84:0b:f6:cb:99:17:bd:cb:2a:a1:b7:0f:c4:16:
         68:fa:ee:38:80:55:25:4a:40:57:55:99:b8:d8:46:8f:d9:56:
         89:1b:89:77:f3:b9:0e:6e:64:b2:42:c1:df:c7:6a:38:a2:2e:
         34:0f:db:38:67:43:48:8e:3b:41:3a:3c:14:cb:87:1c:35:97:
         ab:c4:fa:2f:57:f3:b0:61:07:a5:94:4b:82:7a:b0:88:e8:b4:
         6c:c7:2e:c5:34:6f:52:10:7e:49:e8:2d:39:96:2b:40:39:7b:
         6d:9c:42:f8:81:19:84:18:bb:22:11:b5:37:97:a3:c5:5a:dd:
         8e:1f:cb:bf:b1:08:ae:a6:e6:30:37:07:63:be:4a:18:11:17:
         0d:b1:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:54 2024 by rpki-client on console-ams.rpki-client.org