Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File:                     BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier:          0oqI4HUw+hKv9dmTHxQh3DhLXGlhg1+ATClkQTAIWwY=
Subject key identifier:   34:F7:AE:A1:5B:5C:20:5D:19:CB:1F:FC:FF:C4:8D:E1:D8:1F:33:86
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer:       /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial:       018F497E559F879A16454AFD003A9561F1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 16:02:47 +0000
Manifest this update:     Sun 05 May 2024 16:02:47 +0000
Manifest next update:     Mon 06 May 2024 16:02:47 +0000
Files and hashes:         1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: TpQKZXSScGTEeyM2z8pZ63XIpb9F129zaX6ah/mXbSo=)
                          2: RP0tGcUWeKQ6qQjHJFGgMXSPkoc.roa (hash: OfDe7NfUMJbqa46QZ0/ACvjmE1T8UJfjQmmUodRTb7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:55:9f:87:9a:16:45:4a:fd:00:3a:95:61:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
        Validity
            Not Before: May  5 16:02:47 2024 GMT
            Not After : May  6 16:02:47 2024 GMT
        Subject: CN=34f7aea15b5c205d19cb1ffcffc48de1d81f3386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:84:11:88:96:28:10:dd:fa:80:5a:c9:d6:
                    40:00:fc:44:19:9e:df:e6:ec:05:d8:55:07:cc:1d:
                    71:f1:f6:e6:fd:0f:5f:f4:09:a0:b8:67:3e:32:4e:
                    67:c2:b3:d5:b0:d9:66:2c:d7:f8:b1:b0:46:5a:03:
                    1b:66:7d:d4:2a:1d:d3:18:54:c4:53:67:be:6f:b1:
                    19:1b:72:07:02:3b:7b:69:67:e6:3c:b1:f5:90:e9:
                    32:20:2e:f8:22:2a:ba:ac:21:93:29:08:5b:60:8f:
                    85:3d:75:fc:fa:c1:09:1f:1b:ac:f9:16:93:9f:24:
                    fd:2c:03:6a:26:a2:07:e6:84:17:93:f5:74:bf:47:
                    1c:81:2b:bd:d6:a0:03:4c:cf:fd:26:23:0b:e1:02:
                    6b:cb:f8:a6:48:c1:fc:f7:a8:37:c0:69:38:62:d5:
                    d7:e6:9b:c8:87:2c:eb:a2:3a:c6:e1:07:38:2a:b0:
                    ad:3f:5d:b1:9f:62:87:00:32:c9:87:c8:62:ed:0f:
                    23:4d:1b:39:f9:2a:90:73:bb:dc:6f:c7:9f:d1:de:
                    d3:f7:14:b5:08:e8:5e:f7:1c:20:4a:f4:3c:e7:74:
                    54:4c:c9:53:a1:08:d4:59:86:d0:ae:25:12:fd:29:
                    e8:47:0e:29:ba:69:21:dd:ac:d8:1c:2a:9f:bb:db:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F7:AE:A1:5B:5C:20:5D:19:CB:1F:FC:FF:C4:8D:E1:D8:1F:33:86
            X509v3 Authority Key Identifier:
                keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:92:2f:39:ef:b3:50:11:e9:48:b3:d0:fe:eb:11:a9:24:58:
         6f:d6:dc:a4:2f:b2:f2:ec:5b:90:39:b2:c5:6a:cf:1a:d7:80:
         7c:89:09:da:ac:03:e5:e3:ef:ad:54:b3:b2:42:ed:67:3a:31:
         86:be:13:8e:c5:71:95:a3:05:ce:94:49:da:1d:33:30:00:ae:
         14:8e:2a:39:55:12:d8:64:df:09:79:f5:04:15:f0:f6:f6:b8:
         4b:37:a5:2c:8d:6e:dc:e3:c2:93:c1:e4:b5:50:d7:c8:ad:f0:
         b4:2b:5b:58:ef:41:22:4b:32:bd:c0:b7:07:4b:e5:eb:58:a4:
         f2:02:72:20:43:0a:22:cb:0c:e4:eb:65:0b:ae:ed:67:8e:a2:
         49:70:f3:f5:77:87:68:cb:1b:2c:e3:e3:da:5d:7c:23:ac:65:
         c7:02:d2:d6:20:15:fa:2a:f6:ae:85:07:44:06:24:e7:9b:ba:
         b4:4c:60:4c:66:61:e3:00:e2:b4:68:19:95:21:7f:19:1d:2d:
         14:e1:cc:ec:bb:00:61:be:9b:ea:66:39:9a:ab:06:42:b7:41:
         e9:60:cd:97:8a:2c:96:1d:28:4d:7f:0a:3b:6f:df:45:67:7d:
         60:18:9f:dd:b9:a7:0d:da:77:1b:b8:fb:61:ee:3c:ff:cf:c4:
         f4:63:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:42:33 2024 by rpki-client on console-ams.rpki-client.org