Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File:                     BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier:          vVEoh+07o7SLrs9WcCmBIviFkyZpSKqChldP6JLI2RQ=
Subject key identifier:   E7:E9:84:A1:F1:11:A0:7E:6A:4B:D6:41:6D:77:78:B9:C1:42:63:C3
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer:       /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial:       018F381D7118FCD7D8C2F475ADDC0C595C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number:          05BA
Signing time:             Thu 02 May 2024 07:03:24 +0000
Manifest this update:     Thu 02 May 2024 07:03:24 +0000
Manifest next update:     Fri 03 May 2024 07:03:24 +0000
Files and hashes:         1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: KQjOt6bcFZMxmfzFbEuscmMDHSAtPdpC6ntjSa1yvOQ=)
                          2: mz-CCZCDbCjAbSiAEdWK5or1hIU.roa (hash: trpQqiuUMYzX7adSHWugLbz29JE8atHUwdsojz2+mo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:71:18:fc:d7:d8:c2:f4:75:ad:dc:0c:59:5c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
        Validity
            Not Before: May  2 07:03:24 2024 GMT
            Not After : May  3 07:03:24 2024 GMT
        Subject: CN=e7e984a1f111a07e6a4bd6416d7778b9c14263c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:b1:71:a7:e1:60:97:e9:c9:b4:6d:e4:ad:
                    25:e8:8b:31:29:9f:b3:9e:a2:d1:9b:19:fb:8b:05:
                    23:7c:73:a2:92:ec:e9:9e:f9:9f:83:92:23:2e:97:
                    ba:b7:87:45:27:fd:8e:42:cd:b4:28:db:2a:ee:88:
                    df:b7:01:ca:84:b5:5b:51:1a:31:8c:a0:96:d3:af:
                    93:4e:60:a2:e9:f5:22:b4:1f:e5:28:6a:70:67:8f:
                    db:4e:2d:7d:84:82:14:8a:e4:15:03:70:32:32:94:
                    cd:bd:e6:8a:1e:1e:8b:cf:22:3b:03:48:cc:37:b2:
                    53:7c:47:1e:ad:eb:9c:19:fc:9a:eb:f3:9d:5f:0f:
                    05:c0:0f:d5:1a:cf:0a:50:02:92:55:5b:d6:37:f1:
                    4b:1a:11:e6:f6:7c:b8:81:dc:ed:d1:6f:c2:84:fb:
                    4b:b0:e5:16:b3:87:e9:09:f6:20:29:3a:2a:9d:e4:
                    66:07:01:4e:e0:bf:ef:1e:26:35:94:26:48:ac:49:
                    f5:aa:1a:70:5f:87:bb:b2:1d:19:95:dc:2c:f4:53:
                    df:9b:b6:43:8d:1e:a5:68:7b:f4:19:bf:c4:d8:62:
                    29:05:45:d5:eb:e2:48:ce:e4:2f:2e:fa:29:9f:fb:
                    59:8d:15:9a:a1:a5:10:d0:b6:6e:67:f0:41:d0:0d:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:84:A1:F1:11:A0:7E:6A:4B:D6:41:6D:77:78:B9:C1:42:63:C3
            X509v3 Authority Key Identifier:
                keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1e:d6:d8:b5:37:ac:98:23:b3:08:41:19:35:aa:9b:fb:bc:
         81:d2:bc:3f:38:b0:c7:e2:8c:ca:85:79:a5:cf:b4:cc:ad:d5:
         14:a7:43:0d:db:c6:d7:c3:8b:f5:28:d7:30:68:ed:b8:f7:ef:
         3e:3b:93:2b:c6:c5:5f:95:52:d2:f1:8d:82:df:6b:81:5d:26:
         0a:29:c4:3e:5a:60:f7:34:41:85:25:98:a0:b5:1d:95:7a:24:
         37:d4:3a:0b:29:51:aa:4c:1f:dc:d4:aa:b8:d7:17:fc:e8:1d:
         b1:94:fb:12:13:24:f9:49:f5:4e:3d:e7:da:6d:68:89:bb:c2:
         9a:dc:1d:a9:27:82:66:db:b3:61:4b:6f:9e:a9:02:fd:19:04:
         d4:95:9c:57:98:03:01:b4:04:6a:fe:82:1a:67:ac:4f:12:da:
         13:4c:87:78:a3:2a:00:85:85:58:b9:f6:db:93:47:02:25:2a:
         28:76:96:23:ec:25:3e:d1:f8:4d:a8:ad:9e:ae:f7:bd:cf:58:
         2d:e8:5e:d6:a8:72:7f:6b:b6:98:ec:0a:26:dd:75:b4:da:c5:
         84:88:5b:5d:7b:0d:58:c0:5c:97:11:94:a9:54:c5:8e:f7:90:
         03:45:43:9f:c8:f8:3e:67:7c:f1:b1:d8:93:dc:23:8e:9b:22:
         90:4d:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:35:25 2024 by rpki-client on console-ams.rpki-client.org