Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          qXqYe9E6ieiIOGESgzil89ZxP37ES6FAEdMk1sZdH5M=
Subject key identifier:   D2:46:31:FA:BC:1E:11:B9:9F:24:97:94:DB:25:4A:EC:1A:A2:9D:B7
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       018F3BF9BD62A58B5FBFD72A8B5A9FB5E9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          0F01
Signing time:             Fri 03 May 2024 01:02:53 +0000
Manifest this update:     Fri 03 May 2024 01:02:53 +0000
Manifest next update:     Sat 04 May 2024 01:02:53 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: Pj2GVbafCrL5uoV7yKGVPCZfZfOo+rIoHfVmBU34o6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:bd:62:a5:8b:5f:bf:d7:2a:8b:5a:9f:b5:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: May  3 01:02:53 2024 GMT
            Not After : May  4 01:02:53 2024 GMT
        Subject: CN=d24631fabc1e11b99f249794db254aec1aa29db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:9f:83:09:2d:d7:ab:8a:b9:e0:16:88:5c:
                    df:93:90:95:07:fe:43:ed:37:a3:1b:e0:90:7e:07:
                    d8:96:62:b9:78:1a:25:f4:95:66:49:6c:9e:25:26:
                    1f:47:d0:fc:4d:f8:1e:f6:fd:6a:7e:48:fa:a2:5a:
                    fd:e6:ba:75:4d:14:d5:8f:4f:69:9f:e5:15:56:19:
                    da:d7:53:5c:26:4f:33:04:da:11:3c:34:15:8b:20:
                    f2:36:e3:d1:54:a1:eb:df:27:bd:e5:cb:97:0b:23:
                    fa:29:02:41:ba:9c:ba:df:50:e4:71:c2:34:0a:ef:
                    c0:29:ac:b1:e0:52:77:61:83:b9:a3:39:1e:60:96:
                    8f:94:7e:ec:8d:3c:90:8f:d9:96:1e:d0:ec:ee:1a:
                    f7:16:92:50:0d:2a:42:c9:e9:49:28:fc:2a:ed:22:
                    07:ad:de:35:7e:4e:64:e7:6a:fe:60:4a:fc:33:fe:
                    31:4c:50:22:fe:b4:ca:d3:50:c7:1c:5f:0a:a4:34:
                    be:25:07:3a:2d:4c:71:b6:95:57:64:f7:a7:55:67:
                    eb:a6:ea:5a:11:ac:37:cc:a8:d5:8c:0d:dc:a0:69:
                    85:b5:b8:7e:99:66:7e:59:f3:3e:e2:c3:c6:8c:2b:
                    e8:b7:1f:96:08:da:aa:3b:a4:9d:c2:22:d5:59:6d:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:31:FA:BC:1E:11:B9:9F:24:97:94:DB:25:4A:EC:1A:A2:9D:B7
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b0:de:bd:fe:cf:d4:56:e0:4d:33:1a:56:f2:58:66:8e:05:
         3f:d2:ff:a3:8a:5e:d7:60:2d:43:76:5a:7b:88:fb:9b:05:b0:
         b4:2b:48:16:34:ca:f5:29:42:35:a7:b9:21:47:58:73:f6:6e:
         81:97:94:fd:3c:68:68:1b:90:7b:d4:17:e6:e2:b1:56:11:65:
         d6:da:cf:2f:6d:4e:41:c4:fa:5e:36:73:69:57:0f:2f:0b:ba:
         69:94:f0:dd:e1:6a:19:ed:41:4d:25:6f:1a:87:3e:20:c5:e9:
         db:0f:d0:13:7a:b9:ad:3f:00:82:2b:31:90:45:a8:7c:c2:69:
         32:f6:c9:f1:41:c0:eb:9f:2c:be:bb:21:02:d9:4a:d3:fc:0a:
         9b:b5:9c:d2:1b:1a:ec:80:53:b6:c4:38:ea:a1:c1:47:80:49:
         87:84:90:81:7b:51:28:e5:a5:06:60:9f:68:a1:fc:76:9a:99:
         34:9f:7b:21:94:d6:06:6d:82:da:5b:2d:a0:51:32:32:ca:36:
         42:43:d1:c3:f3:97:56:43:85:ec:e9:87:97:b7:c8:83:31:74:
         2f:20:10:d0:da:9f:98:00:87:18:8e:40:48:c6:4f:83:27:6e:
         8b:62:b1:c0:21:c8:4f:3e:68:9e:79:7c:c4:55:31:2f:f0:aa:
         90:ff:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:49:27 2024 by rpki-client on console-ams.rpki-client.org