Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          /uus4sOlUnLANLMm/ueG2emGH/DOeExsnl575r97rSM=
Subject key identifier:   80:15:5E:41:F4:03:9E:91:C3:0B:FD:3E:4B:3D:14:1D:14:57:27:EB
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       018FB2D86A8F79323A611D70CFB8673E29B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          118D
Signing time:             Sun 26 May 2024 03:01:18 +0000
Manifest this update:     Sun 26 May 2024 03:01:18 +0000
Manifest next update:     Mon 27 May 2024 03:01:18 +0000
Files and hashes:         1: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: pu0XLPEXPaY9Ksm35/Iz+bjhafiTH2wj1FrarDk+N4I=)
                          2: tulFFIYR057QmGJCcZ1zKRbo8dc.roa (hash: WYrBzOyLKuhJ9lYNAxqEhWDma1uY0lF27mumuWBcFns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:6a:8f:79:32:3a:61:1d:70:cf:b8:67:3e:29:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: May 26 03:01:18 2024 GMT
            Not After : May 27 03:01:18 2024 GMT
        Subject: CN=80155e41f4039e91c30bfd3e4b3d141d145727eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:40:7c:81:9a:19:1f:34:45:eb:27:2d:49:
                    af:b7:e0:c5:ad:10:c4:05:49:83:5e:bd:6b:0b:e1:
                    36:e3:2c:11:71:0c:f5:36:de:8f:86:bc:a8:f6:9b:
                    d0:68:10:d4:8a:3b:d0:4c:31:3c:d2:ce:cd:01:a7:
                    a0:a4:6d:3a:2d:c8:4c:01:ed:c0:32:b2:41:c9:c8:
                    41:42:de:d1:5e:8c:d3:56:e7:d2:d0:d6:a3:00:a6:
                    50:8b:0a:d7:ed:df:da:ae:0a:04:d4:02:89:8a:2e:
                    73:b1:70:6e:c8:29:d8:a0:6e:dd:df:a3:eb:cd:06:
                    d5:da:37:d0:e7:f9:e5:26:56:dc:80:60:87:6f:7e:
                    bc:1f:8f:e0:44:e5:ae:e1:10:d9:e2:ff:d0:0c:9f:
                    e7:45:d2:59:44:17:76:ca:fb:ad:5e:1c:f7:a9:de:
                    ff:6a:a4:9d:35:25:4e:77:00:0e:0b:31:15:30:71:
                    cf:17:be:f1:77:7a:53:9f:18:f3:e1:ca:ce:f8:c8:
                    12:49:9e:e1:13:f9:f5:71:98:f7:fb:5b:52:9c:8a:
                    f9:2f:ef:ea:f2:cf:d6:85:15:dd:19:75:f3:5c:77:
                    1a:d1:90:6c:64:2f:bc:f9:53:0b:25:d3:58:c7:29:
                    18:7a:f6:81:ed:e5:31:5c:ca:a9:b7:03:c5:05:b6:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:15:5E:41:F4:03:9E:91:C3:0B:FD:3E:4B:3D:14:1D:14:57:27:EB
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:23:78:5f:fb:76:72:be:8a:04:a6:0b:ae:dd:11:3c:07:ee:
         d6:b6:2d:d5:e5:9c:11:74:b1:63:ce:6f:e2:8c:88:a3:ee:8b:
         66:d9:d6:65:5e:63:8c:4f:2f:0d:1e:62:9a:ec:aa:93:07:11:
         00:0d:e7:92:68:29:af:a3:07:b1:7f:79:c4:30:4c:cd:08:54:
         5c:9b:11:8f:ca:38:f7:40:9d:0a:00:83:09:c0:99:09:f0:ee:
         74:67:13:ea:37:81:ca:76:d9:4b:6d:36:4d:0e:bb:0b:a3:5e:
         70:c7:b1:4d:bd:c5:fb:0d:0b:40:9b:30:4c:fd:bf:49:1e:b8:
         66:7d:58:a9:80:34:92:24:5b:f1:3f:86:37:2a:b1:6c:97:34:
         30:38:8f:de:a7:52:c9:e2:ba:6e:ff:b2:3c:71:ad:93:c9:b5:
         e5:07:eb:af:29:d9:31:07:32:ee:3c:93:61:f9:09:77:4d:0c:
         49:17:d8:12:99:ec:49:f2:41:95:d2:b3:5d:05:f9:d0:7d:55:
         1b:9e:80:16:6d:39:e8:db:d3:0a:57:af:3a:36:8a:22:d2:0d:
         ad:c1:8c:2b:4a:d2:51:17:64:c0:99:a1:5e:36:59:53:9d:c0:
         54:a2:fb:51:a1:19:6a:3d:94:98:36:1b:b1:86:e8:13:c7:d6:
         80:29:f8:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+y2GqPeTI6YR1wz7hnPimzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjQwNTI2MDMwMTE4WhcNMjQwNTI3MDMwMTE4WjAzMTEwLwYDVQQD
Eyg4MDE1NWU0MWY0MDM5ZTkxYzMwYmZkM2U0YjNkMTQxZDE0NTcyN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWxAfIGaGR80ResnLUmvt+DFrRDE
BUmDXr1rC+E24ywRcQz1Nt6Phryo9pvQaBDUijvQTDE80s7NAaegpG06LchMAe3A
MrJBychBQt7RXozTVufS0NajAKZQiwrX7d/argoE1AKJii5zsXBuyCnYoG7d36Pr
zQbV2jfQ5/nlJlbcgGCHb368H4/gROWu4RDZ4v/QDJ/nRdJZRBd2yvutXhz3qd7/
aqSdNSVOdwAOCzEVMHHPF77xd3pTnxjz4crO+MgSSZ7hE/n1cZj3+1tSnIr5L+/q
8s/WhRXdGXXzXHca0ZBsZC+8+VMLJdNYxykYevaB7eUxXMqptwPFBbaGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAVXkH0A56Rwwv9Pks9FB0UVyfrMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSN4X/t2
cr6KBKYLrt0RPAfu1rYt1eWcEXSxY85v4oyIo+6LZtnWZV5jjE8vDR5imuyqkwcR
AA3nkmgpr6MHsX95xDBMzQhUXJsRj8o490CdCgCDCcCZCfDudGcT6jeBynbZS202
TQ67C6NecMexTb3F+w0LQJswTP2/SR64Zn1YqYA0kiRb8T+GNyqxbJc0MDiP3qdS
yeK6bv+yPHGtk8m15QfrrynZMQcy7jyTYfkJd00MSRfYEpnsSfJBldKzXQX50H1V
G56AFm056NvTClevOjaKItINrcGMK0rSURdkwJmhXjZZU53AVKL7UaEZaj2UmDYb
sYboE8fWgCn4WA==
-----END CERTIFICATE-----
Generated at Sun May 26 06:34:40 2024 by rpki-client on console-ams.rpki-client.org