Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File:                     bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier:          9ZND6p36njkyfJ9RzlQXw3aTBpEZSmFGJxE2xKrNmGA=
Subject key identifier:   4E:01:8E:DA:4B:E7:3F:71:E5:D8:A4:CD:3F:66:E8:34:EE:AD:42:27
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer:       /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial:       018F874AF1499F06D8759F6F18964FC7FB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number:          0EBB
Signing time:             Fri 17 May 2024 16:03:06 +0000
Manifest this update:     Fri 17 May 2024 16:03:06 +0000
Manifest next update:     Sat 18 May 2024 16:03:06 +0000
Files and hashes:         1: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: b/hYymSv4Mw4ifFYHJfqa6R126jk2hnM10jPXMhp264=)
                          2: jenhggasWhyh2nSRrVpwU8pezDA.roa (hash: AtLTszahnR8leNsulaDhupa0opCkAkBgSZ94YkReS2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f1:49:9f:06:d8:75:9f:6f:18:96:4f:c7:fb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
        Validity
            Not Before: May 17 16:03:06 2024 GMT
            Not After : May 18 16:03:06 2024 GMT
        Subject: CN=4e018eda4be73f71e5d8a4cd3f66e834eead4227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:e6:03:51:b5:2a:13:b7:a3:2d:47:f3:dd:
                    44:1b:a9:ac:b4:49:6a:c3:77:46:fc:54:f3:36:dc:
                    83:1f:e3:a5:f9:48:e9:0f:14:b6:bc:a6:42:e8:0d:
                    fc:c2:84:4c:d2:a2:a1:34:a9:c4:15:81:ec:54:49:
                    a3:ec:e7:16:f9:aa:3a:41:82:aa:ab:b4:84:a9:87:
                    5d:52:d6:66:d6:23:fa:49:bb:fe:9f:00:00:d3:bb:
                    db:8a:7c:04:ff:b6:c1:10:91:69:d3:5a:68:50:2e:
                    00:af:bc:24:4f:9d:b3:2b:e1:45:b1:f2:e0:2d:8b:
                    fa:f0:58:47:9e:6e:14:b4:e1:ec:82:ff:c5:47:46:
                    16:6d:c9:02:e4:ce:83:83:1d:fd:e3:5c:24:cf:be:
                    99:63:eb:13:c2:62:15:0c:b1:09:cb:9c:bd:02:6d:
                    19:0d:ac:02:fb:ba:35:8c:ca:c4:c5:6a:06:8b:78:
                    f8:76:6f:1e:94:00:0f:3e:1c:a7:51:7a:1b:5a:d5:
                    da:f0:62:d9:4c:f6:eb:da:c5:a9:39:50:bf:16:63:
                    0e:8d:f0:59:62:c1:d1:c8:14:13:e0:45:4f:97:ab:
                    30:5a:8a:2a:d9:a5:ae:be:c6:0e:38:cb:75:54:7e:
                    0b:8c:29:18:95:75:0b:a1:da:53:bd:45:90:05:d1:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:8E:DA:4B:E7:3F:71:E5:D8:A4:CD:3F:66:E8:34:EE:AD:42:27
            X509v3 Authority Key Identifier:
                keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:49:b3:18:02:4e:9e:bd:4c:7a:50:6b:86:d6:27:ae:73:3c:
         87:b4:e9:62:3a:b7:07:72:5c:db:c9:73:f4:e7:e2:e6:e8:dc:
         c7:74:6d:a3:7c:24:ff:cc:6b:33:42:88:ca:c1:c8:8c:14:0b:
         c8:f4:8e:08:0a:a3:88:67:0d:01:af:35:b2:1e:05:cb:68:5e:
         ae:ee:f5:66:fa:1d:e7:ea:a4:0b:1e:f2:15:c9:ba:9e:8d:02:
         4f:7b:39:8a:2d:33:06:f7:32:50:eb:74:6d:84:33:af:f9:62:
         20:3b:7c:08:c4:a7:e8:dc:ac:09:cd:f4:00:49:22:90:71:dd:
         ef:15:1e:eb:0f:8f:b5:a6:76:cf:c1:7d:20:46:25:d1:32:f4:
         59:e0:2c:81:a9:7c:85:c5:c6:16:78:c0:8b:d6:a9:66:37:63:
         b6:e2:00:d5:21:ad:c4:59:eb:41:1e:be:ed:9c:9d:4f:18:c4:
         14:84:5b:b3:24:b9:0c:dc:29:15:90:fa:b6:13:86:a4:d0:30:
         49:f9:84:6d:5d:2e:df:ec:a7:11:74:61:a8:34:e2:58:f9:bc:
         13:0a:f0:80:5b:4e:64:3b:d0:94:ad:15:cd:01:e0:4a:68:f9:
         e7:42:f3:c2:b5:ec:37:50:53:03:e7:96:41:6d:98:4c:00:0d:
         ef:c4:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:03:18 2024 by rpki-client on console-fra.rpki-client.org