Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File:                     0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier:          1HAeJ5wXqFs1gPScK4hodoWDPrUDEf7S+8w1vyCrF5c=
Subject key identifier:   D5:AE:DB:B9:F3:B2:31:0C:44:60:3D:BC:03:FD:9F:94:7C:7A:5F:1C
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer:       /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial:       01975459899C4043C8BD457D4734736052B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number:          132B
Signing time:             Mon 09 Jun 2025 11:00:43 +0000
Manifest this update:     Mon 09 Jun 2025 11:00:43 +0000
Manifest next update:     Tue 10 Jun 2025 11:00:43 +0000
Files and hashes:         1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: 1vNTq0jN8G5f+3kmZCIB/e4M5j2dPWP+E7R/fXTBJ4c=)
                          2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:59:89:9c:40:43:c8:bd:45:7d:47:34:73:60:52:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
        Validity
            Not Before: Jun  9 11:00:43 2025 GMT
            Not After : Jun 10 11:00:43 2025 GMT
        Subject: CN=d5aedbb9f3b2310c44603dbc03fd9f947c7a5f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:78:f1:65:98:ca:bb:4d:3a:38:ca:ab:54:
                    a3:d4:b2:c4:fb:8b:49:96:86:12:53:7a:c5:00:08:
                    01:af:cc:0f:a9:0b:9d:62:53:ce:dc:5c:1c:14:b0:
                    e2:b4:c2:50:c5:70:70:b9:24:36:c2:fc:09:74:b0:
                    39:2b:23:64:a2:8d:68:ed:d2:d9:01:db:ca:cf:a2:
                    d2:ca:ad:22:55:81:71:7b:a3:65:49:aa:9e:18:87:
                    30:4e:da:b4:36:ee:c4:31:94:7b:7f:ad:23:4c:de:
                    4c:b3:69:8a:71:0b:52:35:14:c7:d0:7e:34:98:c0:
                    b1:f4:f4:1a:02:92:3c:07:99:c6:53:fb:3a:77:c1:
                    11:42:c9:75:8f:33:59:af:83:01:d2:d2:36:01:21:
                    84:6d:a9:e6:cd:cf:3d:e9:13:1a:24:af:01:a3:1d:
                    93:ee:cb:bd:f7:2c:9c:e2:c4:05:6f:b8:27:d7:57:
                    ce:2d:d3:3d:76:94:6b:f3:c4:10:03:aa:48:0c:b7:
                    59:d3:d3:d6:9f:6b:80:b7:73:1b:28:b9:16:2b:bb:
                    b9:02:77:32:16:71:8b:1d:42:c6:a2:bd:01:ae:ed:
                    d1:d4:45:46:26:a4:ba:d1:4f:9c:8b:30:fb:47:e2:
                    6e:b5:60:14:69:f6:6d:de:21:90:b6:96:fb:f5:19:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:DB:B9:F3:B2:31:0C:44:60:3D:BC:03:FD:9F:94:7C:7A:5F:1C
            X509v3 Authority Key Identifier:
                keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:d8:c5:92:bc:95:a0:a1:15:74:70:07:4a:6c:28:51:45:
         00:d7:80:e2:64:06:b3:97:d3:fd:de:03:77:6c:1a:43:d3:16:
         92:a7:16:a3:21:52:45:e1:af:e7:07:37:00:0c:f9:bb:af:23:
         0a:2e:d9:c3:86:b1:99:68:b8:41:96:03:36:5c:02:3d:ce:80:
         1e:b1:ba:e4:d6:8d:d8:06:e4:7e:e6:76:f9:b7:17:35:a6:e2:
         5f:84:c0:8e:1f:6c:fb:0c:05:77:74:f8:6b:05:7b:2c:77:a6:
         0f:f7:5f:9d:f6:18:17:af:d1:80:ad:e2:f7:fb:ec:d3:0e:f6:
         eb:34:da:4b:d3:c5:be:f6:33:0d:41:7e:4f:45:c6:d9:92:b5:
         c8:4d:ae:07:81:02:94:48:a7:c8:e3:a4:62:25:4f:49:68:a3:
         ec:b6:8f:d7:9d:da:fa:a7:35:bd:a6:5d:fd:37:7a:9b:4e:da:
         be:a2:f5:e1:f1:33:ac:8a:01:81:d1:74:93:0f:00:bd:e0:1e:
         0d:18:3c:58:c5:22:0c:c7:45:5b:91:22:dc:68:8b:ed:d4:bc:
         50:c5:92:e7:33:48:0f:11:84:59:25:b5:c1:00:fb:01:ad:dc:
         40:e4:7b:2b:fe:47:34:22:ed:bc:26:f8:78:43:dd:e7:12:00:
         8b:c6:a0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUWYmcQEPIvUV9RzRzYFKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj
ZGM5MGMwHhcNMjUwNjA5MTEwMDQzWhcNMjUwNjEwMTEwMDQzWjAzMTEwLwYDVQQD
EyhkNWFlZGJiOWYzYjIzMTBjNDQ2MDNkYmMwM2ZkOWY5NDdjN2E1ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ft48WWYyrtNOjjKq1Sj1LLE+4tJ
loYSU3rFAAgBr8wPqQudYlPO3FwcFLDitMJQxXBwuSQ2wvwJdLA5KyNkoo1o7dLZ
AdvKz6LSyq0iVYFxe6NlSaqeGIcwTtq0Nu7EMZR7f60jTN5Ms2mKcQtSNRTH0H40
mMCx9PQaApI8B5nGU/s6d8ERQsl1jzNZr4MB0tI2ASGEbanmzc896RMaJK8Box2T
7su99yyc4sQFb7gn11fOLdM9dpRr88QQA6pIDLdZ09PWn2uAt3MbKLkWK7u5Ancy
FnGLHULGor0Bru3R1EVGJqS60U+cizD7R+JutWAUafZt3iGQtpb79RmXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWu27nzsjEMRGA9vAP9n5R8el8cMB8GA1UdIwQY
MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt
MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0
LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKTYxZK8
laChFXRwB0psKFFFANeA4mQGs5fT/d4Dd2waQ9MWkqcWoyFSReGv5wc3AAz5u68j
Ci7Zw4axmWi4QZYDNlwCPc6AHrG65NaN2AbkfuZ2+bcXNabiX4TAjh9s+wwFd3T4
awV7LHemD/dfnfYYF6/RgK3i9/vs0w726zTaS9PFvvYzDUF+T0XG2ZK1yE2uB4EC
lEinyOOkYiVPSWij7LaP153a+qc1vaZd/Td6m07avqL14fEzrIoBgdF0kw8AveAe
DRg8WMUiDMdFW5Ei3GiL7dS8UMWS5zNIDxGEWSW1wQD7Aa3cQOR7K/5HNCLtvCb4
eEPd5xIAi8ag7A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:40:32 2025 by rpki-client