Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File:                     bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier:          HKBTo9L7kMqXlJ+57IGt9H8NngKolge9ASBJ6Cd6hZs=
Subject key identifier:   A8:C3:14:6C:F8:66:2C:50:79:09:29:EE:E5:C3:74:C4:FE:BC:86:3E
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer:       /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial:       018F885AF70ED7ED9BB2D7AF9699093C4656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number:          02F8
Signing time:             Fri 17 May 2024 21:00:13 +0000
Manifest this update:     Fri 17 May 2024 21:00:13 +0000
Manifest next update:     Sat 18 May 2024 21:00:13 +0000
Files and hashes:         1: 9ZXiXYjHcuwmbRifgqMWdl8LJo0.roa (hash: dBeIQsk63xyg+AUcI36Lu6oeCKPyDrb/EkLmtvtWw1s=)
                          2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: r7OybETssBzcI8IczJLHtHwPD3LnfzVS/RDTzrCJsFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f7:0e:d7:ed:9b:b2:d7:af:96:99:09:3c:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
        Validity
            Not Before: May 17 21:00:13 2024 GMT
            Not After : May 18 21:00:13 2024 GMT
        Subject: CN=a8c3146cf8662c50790929eee5c374c4febc863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:2b:cb:0a:19:09:e0:f0:35:b9:32:2d:64:
                    3c:51:81:e5:05:d2:a4:08:1b:df:cb:8f:86:2c:26:
                    88:50:6b:a2:0a:b7:01:bd:81:73:7b:bf:43:a6:77:
                    a6:07:51:49:72:e8:ca:77:78:b7:f0:83:20:07:90:
                    15:f9:28:54:d9:a2:be:16:d8:d7:e4:26:6a:41:c6:
                    bc:2a:44:48:ec:e0:2f:7e:80:d6:c2:80:59:3a:58:
                    ad:38:f1:a9:ad:ce:33:54:e2:db:0c:34:1b:e7:ce:
                    16:ad:88:f5:30:db:53:9f:aa:11:6e:39:a3:2a:51:
                    ad:b4:0f:9b:76:42:ab:7f:70:2c:14:04:04:fd:07:
                    c2:61:94:a9:98:4a:a1:a0:58:08:e0:28:f2:e7:42:
                    de:81:b4:b5:ce:36:b4:08:c8:4d:d0:55:5e:94:2f:
                    ef:95:54:4c:76:8a:33:79:eb:fb:6f:64:d2:7e:fa:
                    5d:44:db:70:40:09:de:ff:63:24:91:63:29:2f:24:
                    62:e5:1c:fd:54:9e:37:f5:81:c9:12:54:7e:62:4b:
                    a8:c0:45:0a:23:d2:d3:bd:0d:2c:13:37:50:7c:f3:
                    58:22:0e:04:4c:79:01:79:91:d8:77:db:34:26:6d:
                    02:ad:e2:93:c3:39:26:42:b4:3d:9d:3f:74:f0:66:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:14:6C:F8:66:2C:50:79:09:29:EE:E5:C3:74:C4:FE:BC:86:3E
            X509v3 Authority Key Identifier:
                keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:c0:71:dc:b1:72:e2:02:23:c0:3f:75:33:90:8a:5f:76:
         6e:de:e4:eb:58:d8:a8:f9:53:86:80:3f:a2:c4:3f:79:fd:3e:
         40:0c:9c:f3:78:ef:54:46:d9:1f:d7:bf:dc:a8:91:9d:2b:99:
         02:33:41:fb:f2:f3:70:48:38:3d:6c:2a:11:89:b2:80:bf:7d:
         14:cd:7a:ef:db:49:c2:5f:2f:26:95:65:3c:59:e4:d9:6f:57:
         35:ea:cf:89:c6:4e:8f:f3:d5:97:a3:59:d7:55:b6:76:86:75:
         6e:f0:af:25:f5:69:b9:64:0f:d9:92:6f:5a:56:c9:60:ab:6a:
         95:b5:f9:b2:c8:6a:95:6c:4c:c2:1e:3f:d6:d7:23:e7:cf:4f:
         eb:f3:62:b7:e2:7c:e5:5b:d6:72:c6:5a:18:a7:c4:3f:a8:eb:
         de:d1:a6:6d:1d:32:ac:02:d2:70:96:f9:1b:01:3f:03:86:2f:
         70:cc:73:ae:88:17:55:54:d0:dc:1e:7a:4a:28:a1:4a:70:9b:
         f3:f4:39:f3:62:ec:5e:5c:e1:19:3e:43:4f:3e:84:56:77:5f:
         d4:fd:78:9a:93:9d:31:1c:00:cc:d5:77:b9:6f:ee:aa:fc:87:
         78:0d:ce:82:86:23:cf:36:18:26:cd:67:0a:0c:d5:cf:00:81:
         60:f5:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:53 2024 by rpki-client on console-ams.rpki-client.org