Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
File:                     BF30UOrP3Wee8NCMiAqR_HW4qJc.mft (raw, json)
Hash identifier:          RdUVu0Tp3BtEvYfuHOT46KoGfNydQTr2t49w18qUhJs=
Subject key identifier:   5D:A7:5B:DD:D0:D7:4B:B0:D2:E7:C6:44:DD:98:2B:58:4D:02:D9:D5
Authority key identifier: 04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
Certificate issuer:       /CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Certificate serial:       018F41C31CBAB8F6E0CE3C732C823532C5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
Manifest number:          087C
Signing time:             Sat 04 May 2024 04:00:56 +0000
Manifest this update:     Sat 04 May 2024 04:00:56 +0000
Manifest next update:     Sun 05 May 2024 04:00:56 +0000
Files and hashes:         1: BF30UOrP3Wee8NCMiAqR_HW4qJc.crl (hash: VWHnf4OvDbeuSVSGsasXfZYkgFoliWZNxwWaceJd83U=)
                          2: V01B3v4DNa6pEBDxFhPnkLayN_s.roa (hash: Y9qTWXWC42HT8upq877McYVY7T+jC75WCxYPa3RIlrk=)
                          3: at0xU4Xy0rRkmWXUtKUZysC3hhY.roa (hash: rOuoGhZTyll9Aqf+yn6PuggNh2fEqXaUH1QFv8DFpSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:1c:ba:b8:f6:e0:ce:3c:73:2c:82:35:32:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045df450eacfdd679ef0d08c880a91fc75b8a897
        Validity
            Not Before: May  4 04:00:56 2024 GMT
            Not After : May  5 04:00:56 2024 GMT
        Subject: CN=5da75bddd0d74bb0d2e7c644dd982b584d02d9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:5a:54:42:84:c3:38:5b:d7:73:f6:ef:04:
                    08:6e:34:5f:ab:bf:d3:fd:5c:3f:44:69:67:bf:d4:
                    3f:6b:21:de:b5:aa:90:3d:c0:2f:48:02:7b:88:27:
                    0e:e7:df:fb:7e:fd:5c:0a:3b:ce:d5:fb:96:bf:f0:
                    72:10:8b:2a:95:46:0c:c2:fa:7d:c1:46:d9:01:93:
                    0c:83:58:fa:c4:d2:e8:36:ed:9c:d5:a8:27:46:78:
                    43:62:2a:0c:aa:38:01:a7:c5:49:af:47:90:d0:66:
                    d6:00:6f:9c:3c:97:ec:b9:f5:2b:70:ac:d8:96:7f:
                    e1:30:f9:5e:a8:e8:e0:f9:9f:09:37:bd:9c:a4:e1:
                    ee:a7:ff:ae:13:2a:da:72:40:3d:99:17:cc:10:81:
                    77:06:6d:59:97:4f:d9:4f:33:ed:89:d9:6c:83:fb:
                    08:07:ff:de:33:36:22:88:be:5c:7d:fb:6f:f6:f8:
                    66:ce:bc:27:b6:e4:6b:8e:1d:97:da:e2:32:5b:b9:
                    9f:27:8c:30:46:dd:68:66:cd:c1:84:5d:07:e3:c5:
                    0c:fd:11:38:fd:70:de:c2:16:10:aa:28:0c:1e:26:
                    3c:de:d4:04:e0:5e:e2:02:fc:a8:83:30:0b:db:79:
                    bc:95:6e:6c:b9:36:75:6a:e5:25:27:81:83:86:db:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A7:5B:DD:D0:D7:4B:B0:D2:E7:C6:44:DD:98:2B:58:4D:02:D9:D5
            X509v3 Authority Key Identifier:
                keyid:04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:06:ec:0a:c5:53:2b:06:d1:b9:9c:96:0a:fe:7b:71:0e:
         91:d5:e0:3b:8f:33:59:83:5d:e0:e5:db:7e:65:4a:44:9c:61:
         64:e8:2f:8f:90:93:05:34:90:05:d0:fd:68:14:23:36:09:d4:
         3b:a4:2e:4e:b7:43:ec:32:03:60:a6:a4:47:2d:c0:b9:bc:17:
         57:35:ac:2d:b2:14:fc:d7:a7:20:59:b8:e8:b8:1c:4f:60:41:
         54:e9:77:8a:4b:5f:2a:a4:87:82:65:dc:56:35:b2:ea:01:1a:
         ec:e9:cc:47:fc:e3:ed:11:ee:88:30:9e:63:b5:dc:75:68:27:
         c9:b3:92:89:b3:c2:5c:3e:8a:16:69:df:1d:a4:25:bf:37:16:
         03:f8:80:11:bc:3c:ca:ee:a7:31:f7:bc:49:b9:cc:80:38:b5:
         76:a5:a7:ff:36:cf:a2:79:5e:d1:1e:d1:7a:87:3a:8f:3a:4c:
         0a:b6:b7:dd:20:3d:8b:7b:c3:37:08:d5:20:c9:74:56:8c:27:
         2b:89:0d:dc:20:74:44:55:0e:0b:cf:0c:e8:83:e8:be:a9:68:
         e9:9b:57:d6:ca:ef:28:bc:26:a6:39:5e:b4:c7:be:17:4e:90:
         14:89:f4:59:df:7a:2a:03:0d:73:f1:c5:99:2b:ca:24:7e:19:
         bb:65:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:52:24 2024 by rpki-client on console-fra.rpki-client.org