Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File:                     0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier:          oiTrwYrocYqpw36BsR2OfFwEB+wXEOGWG2dk48O34d0=
Subject key identifier:   0C:7B:65:A3:44:51:CD:C6:C2:D1:94:EF:DF:0A:2A:C1:DC:E2:52:90
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer:       /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial:       018F51379DA7287583C567A4C406DE406FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number:          0F04
Signing time:             Tue 07 May 2024 04:02:30 +0000
Manifest this update:     Tue 07 May 2024 04:02:30 +0000
Manifest next update:     Wed 08 May 2024 04:02:30 +0000
Files and hashes:         1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: OiV0b81lF+dNVegThIEfQn6FImr1dvOjnFMvsQ/kxlY=)
                          2: Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa (hash: lGkRewsGYiNWNIdnm1tydofRrF9heZ7cTaHRhq/tuQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:9d:a7:28:75:83:c5:67:a4:c4:06:de:40:6f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
        Validity
            Not Before: May  7 04:02:30 2024 GMT
            Not After : May  8 04:02:30 2024 GMT
        Subject: CN=0c7b65a34451cdc6c2d194efdf0a2ac1dce25290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:6c:23:93:36:87:55:f0:4c:b7:3d:a8:b3:
                    76:5f:aa:26:ae:e2:d9:e7:6e:59:18:90:13:2a:ab:
                    7f:05:b0:9a:76:f7:af:36:9b:c0:be:17:9c:61:f3:
                    c8:20:cd:20:63:bc:75:4d:d3:eb:ae:5b:5d:12:33:
                    94:8a:9d:e0:4b:0f:93:b6:67:82:ed:d9:7b:2f:87:
                    20:bd:fd:e1:ba:36:fc:97:27:4f:b9:de:9c:04:bd:
                    df:b8:16:13:61:2a:11:eb:95:46:db:a6:fe:88:2a:
                    d1:82:18:e2:5c:0e:fb:0c:58:5a:84:5c:20:a5:fb:
                    af:52:93:7f:a4:9f:4e:bd:81:10:df:47:df:39:68:
                    82:02:fe:70:1d:54:7e:f0:fd:8a:23:2d:41:6c:73:
                    46:ee:99:80:33:2e:76:c0:d3:25:ac:ff:57:bc:fa:
                    ce:26:b4:da:27:0d:42:d7:07:38:7f:8a:b4:d4:c7:
                    6e:79:01:a0:b2:12:38:68:db:74:70:c6:fd:ca:dd:
                    af:40:ea:aa:e2:67:bc:e4:a2:2a:6c:ca:62:b3:c5:
                    3e:f2:3b:19:fc:91:dc:3a:bd:01:c3:48:fb:16:68:
                    87:be:a3:91:cf:61:b3:c0:b1:01:14:33:3d:b5:8c:
                    ca:24:20:07:b7:82:d0:dd:ea:19:5f:f6:d7:ee:b5:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7B:65:A3:44:51:CD:C6:C2:D1:94:EF:DF:0A:2A:C1:DC:E2:52:90
            X509v3 Authority Key Identifier:
                keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:0f:68:7c:ba:06:0f:81:ba:f7:e1:f2:7d:69:ca:ef:fe:
         4f:fe:b6:17:99:fa:d4:f1:8d:a7:cd:2b:06:f0:93:32:f8:40:
         2b:63:1d:95:8e:24:7e:fc:89:06:51:ff:07:b2:ad:9d:82:29:
         8e:74:b9:83:68:45:fd:b2:83:39:d0:38:85:44:1c:a4:73:23:
         83:ad:c3:90:54:73:3a:a9:c2:07:a0:ca:35:1e:7f:18:d3:25:
         33:9f:5d:a8:af:06:9a:f4:11:b6:b3:6b:bf:b4:f9:63:5f:f4:
         f1:98:7e:d6:0f:0f:4b:39:cc:2f:12:06:2d:fd:49:03:2f:f3:
         7d:be:db:2b:30:81:45:b9:07:76:a6:b7:36:92:cc:3f:9d:bd:
         cb:e4:0a:ff:85:b0:74:4b:ee:3b:2d:79:b6:6e:30:c6:9d:84:
         0e:8e:35:44:9a:aa:b4:e6:d2:0e:67:96:8b:c3:8b:46:e4:d8:
         9e:35:58:fa:a8:6d:1a:f0:9b:ba:49:6f:8e:3a:ff:42:6f:e8:
         c4:a9:ae:3b:11:1a:35:a8:22:0e:64:79:58:fc:44:68:7a:2f:
         53:55:02:00:32:af:2d:c5:3e:23:f4:2c:9e:1e:a6:c6:0a:6c:
         14:c6:19:a0:32:49:2e:c2:65:08:82:76:4c:67:8c:45:a6:e8:
         91:e0:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:15:23 2024 by rpki-client on console-fra.rpki-client.org