Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File:                     BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier:          CCAYPCzpEp7N9YemqX6knClTaIh3c+COLQSQUmICbUM=
Subject key identifier:   AC:C8:90:2D:71:5E:20:4C:19:08:0A:8C:08:A1:BB:BB:19:D9:E7:C3
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer:       /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial:       018F3FD5C57C2B85A34DFB25D8234CF3A86C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number:          1151
Signing time:             Fri 03 May 2024 19:02:05 +0000
Manifest this update:     Fri 03 May 2024 19:02:05 +0000
Manifest next update:     Sat 04 May 2024 19:02:05 +0000
Files and hashes:         1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: lKsAjuZtd5wIb6BCWMno5jQQDOhxgDGyDyLAUF7b8JA=)
                          2: D-ujBod5p62LpCK3mBnMIFa8-S0.roa (hash: GLh9h8/hmhiQCFJT65rUWEqrJKtpEPUhyW3LoUdUO+4=)
                          3: NmNpkXj7kw-4kG1IUktZXcUadJc.roa (hash: XeatUrScjLGX1RWw+AYq56QlMLOX03tMF5dru4TVgys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d5:c5:7c:2b:85:a3:4d:fb:25:d8:23:4c:f3:a8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
        Validity
            Not Before: May  3 19:02:05 2024 GMT
            Not After : May  4 19:02:05 2024 GMT
        Subject: CN=acc8902d715e204c19080a8c08a1bbbb19d9e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:e0:7e:f8:69:98:76:2a:03:4c:88:41:0a:
                    07:a9:db:a5:a5:66:e8:ef:04:50:72:32:96:d9:91:
                    ee:4b:58:86:d0:9f:c7:97:2c:59:cb:0f:5f:bb:be:
                    a2:f2:04:f8:4f:bb:e2:d0:92:63:b6:43:ee:8c:ea:
                    c0:b6:44:ca:7a:64:de:d1:be:6d:8a:52:f2:aa:3f:
                    0b:83:b8:6d:85:52:92:0e:86:f0:05:20:fe:c1:4d:
                    95:36:a1:7f:83:1b:da:ba:e4:a7:a9:8b:7f:df:08:
                    7b:4e:94:e7:5b:ca:5d:8c:66:94:6e:47:b7:86:4a:
                    dc:46:78:a5:34:90:c6:a9:f5:ea:3c:27:44:f8:a9:
                    1b:0c:e3:f1:88:30:a4:7b:c8:2e:63:43:88:66:f2:
                    05:f4:5e:8a:03:ca:62:0f:41:53:53:f3:48:a3:72:
                    2f:82:89:40:61:4a:63:52:a6:97:11:70:0c:0c:6f:
                    2c:0e:8e:56:9c:e3:e2:46:ee:09:73:6b:7a:43:aa:
                    6f:ae:26:26:3c:89:e9:8d:fa:5d:da:4f:e0:02:9a:
                    d2:76:f7:fb:1f:ee:c0:d4:08:1e:82:3e:fb:b2:95:
                    6a:d1:58:39:24:48:88:dd:6b:dc:f3:34:34:ac:4b:
                    e7:35:78:a1:49:df:94:cb:de:4d:1d:f9:7a:5d:52:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:90:2D:71:5E:20:4C:19:08:0A:8C:08:A1:BB:BB:19:D9:E7:C3
            X509v3 Authority Key Identifier:
                keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:22:aa:d4:24:aa:eb:ae:b0:d4:05:95:10:90:3d:a9:f8:
         8b:17:d0:1b:41:36:f8:9b:18:6e:6d:cf:5b:ef:c0:29:ed:43:
         a8:bd:8a:f3:b9:fd:9b:7e:c6:c7:0b:c2:9a:18:72:13:fb:9d:
         c6:aa:a9:34:54:be:64:d7:85:f1:62:00:40:23:e9:f0:8e:94:
         4f:8b:99:3a:e3:46:91:7f:90:68:4c:63:01:b4:5d:65:07:4f:
         05:e6:8a:39:da:d2:94:29:44:dd:8a:d9:91:70:53:11:fe:3d:
         ed:0f:08:78:d4:f6:72:13:19:31:e1:f7:12:74:90:66:64:85:
         d2:86:48:c2:4a:ef:4b:9c:0d:c2:85:8c:6c:33:15:9b:9a:54:
         a5:1a:48:63:56:ee:93:af:b2:5d:4a:37:3f:4b:c7:4a:c5:1d:
         0f:37:97:29:cb:72:3d:a4:76:ab:58:4a:cd:a4:56:0e:ed:1e:
         fa:cb:67:f0:5c:cc:5e:7c:1a:71:a5:3f:eb:bd:d8:a3:1b:37:
         0e:d7:e4:f0:9a:a3:00:55:60:69:e7:e1:48:c2:83:6f:9b:16:
         34:5b:b6:90:20:d7:34:82:c8:e2:c7:03:73:b2:8a:4c:d7:40:
         03:71:08:f2:2d:00:65:4f:9e:49:c7:f6:3b:a0:8b:6d:6f:9f:
         10:71:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:28:32 2024 by rpki-client on console-ams.rpki-client.org