Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File:                     BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier:          fb9ONbBW5n4nl7w0gJqUAvMAIm3INekp0wcKaEVV7Vk=
Subject key identifier:   7C:DB:1A:2A:1B:E3:8C:31:15:D8:B4:E3:17:BF:5C:51:3B:16:39:47
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer:       /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial:       018F15FC829615BD693FFB98D7CB2CB62310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number:          113E
Signing time:             Thu 25 Apr 2024 16:00:21 +0000
Manifest this update:     Thu 25 Apr 2024 16:00:21 +0000
Manifest next update:     Fri 26 Apr 2024 16:00:21 +0000
Files and hashes:         1: 3msj4c100GTVW57WjC2b5XW7ZEU.roa (hash: HX9Lxz8NC/YeNpjGZoeYGWOpEsjvYPqhfXTVHh/IIkQ=)
                          2: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: 5bk/TKcVXaxCMBSIMaetExi/BGrOI6bgjw/fJANofD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:fc:82:96:15:bd:69:3f:fb:98:d7:cb:2c:b6:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
        Validity
            Not Before: Apr 25 16:00:21 2024 GMT
            Not After : Apr 26 16:00:21 2024 GMT
        Subject: CN=7cdb1a2a1be38c3115d8b4e317bf5c513b163947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:7d:19:f3:f5:25:36:bb:66:49:7f:4b:61:
                    e2:6b:0c:e9:f5:31:a6:34:d1:31:59:7c:a8:f1:dd:
                    ac:9e:3a:3b:91:9c:9a:68:e3:1f:d6:a8:a4:0a:59:
                    91:37:cd:a5:0f:9e:d4:b7:e0:ed:05:19:ea:a2:0f:
                    ac:02:71:4d:de:cf:ab:57:19:fa:4d:ad:53:6d:b2:
                    32:74:90:cd:cc:3a:61:02:52:a8:e0:33:62:6a:b0:
                    b9:90:80:38:f0:3c:5a:39:c4:4c:81:aa:03:5a:14:
                    7e:14:0a:fd:bf:82:cf:ec:c2:54:4c:d4:b0:7f:a7:
                    cb:b9:ab:31:42:b4:37:f7:14:9b:90:e8:41:ee:9b:
                    4b:48:e0:c8:42:d5:c7:04:04:2d:b9:4e:50:91:15:
                    96:cb:11:07:d6:b9:cd:97:34:c0:98:92:d7:1f:5f:
                    79:2b:15:3b:8e:8a:ff:c5:c6:67:87:70:bf:24:4a:
                    33:c0:61:7a:05:82:d7:f1:05:26:ab:a6:70:0d:16:
                    86:8e:09:d3:78:f4:c3:29:2a:17:c3:0c:0e:72:eb:
                    04:05:5b:c4:57:13:b4:cc:b4:cc:f9:c8:08:03:6c:
                    33:64:fe:ea:af:d4:7b:9e:8c:21:d2:b8:88:86:00:
                    22:18:25:c8:62:d3:23:f6:b5:86:da:8e:8a:2d:87:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:1A:2A:1B:E3:8C:31:15:D8:B4:E3:17:BF:5C:51:3B:16:39:47
            X509v3 Authority Key Identifier:
                keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:4d:9b:34:e5:70:41:28:86:41:25:4c:4f:67:d4:ab:77:
         d3:40:50:e5:c0:1e:a9:db:5a:83:5b:ad:2f:11:f4:ab:bb:2c:
         96:12:41:a0:c7:cb:e8:91:90:1e:7b:b6:56:92:fa:4a:08:6f:
         e0:f6:3a:6f:4c:3a:74:49:3d:29:de:0d:93:14:e8:59:2d:be:
         d0:f9:62:87:6a:4b:59:c1:66:5f:41:10:70:2e:ab:5a:6a:0d:
         4b:49:74:9e:97:a3:27:66:d2:c1:ac:50:f4:3c:6f:80:8d:7a:
         37:69:62:7b:d8:1f:0f:34:89:87:31:22:ce:ba:1e:87:33:d9:
         53:78:6b:8b:37:a6:94:97:16:b8:9b:9d:2e:51:cd:0e:6f:9a:
         23:12:f4:7a:ad:b1:98:6f:79:17:57:74:75:b2:77:98:f6:8f:
         1d:f3:b4:2d:2e:8c:54:73:65:c8:a3:37:7b:d6:c1:7e:5c:8a:
         2f:65:86:e4:cf:f6:45:70:15:cb:5c:0f:2b:92:45:ea:54:e4:
         4c:b3:f5:84:ed:77:b5:24:8d:c7:ec:e7:4a:83:0e:ae:10:7f:
         b2:a1:5f:41:ad:58:60:7d:23:ce:7d:66:b2:65:99:8b:4c:e5:
         95:ee:b8:89:ed:b2:17:0b:32:94:f2:a0:ec:3e:e8:17:84:12:
         a8:28:6f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8V/IKWFb1pP/uY18sstiMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjQwNDI1MTYwMDIxWhcNMjQwNDI2MTYwMDIxWjAzMTEwLwYDVQQD
Eyg3Y2RiMWEyYTFiZTM4YzMxMTVkOGI0ZTMxN2JmNWM1MTNiMTYzOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU59GfP1JTa7Zkl/S2Hiawzp9TGm
NNExWXyo8d2snjo7kZyaaOMf1qikClmRN82lD57Ut+DtBRnqog+sAnFN3s+rVxn6
Ta1TbbIydJDNzDphAlKo4DNiarC5kIA48DxaOcRMgaoDWhR+FAr9v4LP7MJUTNSw
f6fLuasxQrQ39xSbkOhB7ptLSODIQtXHBAQtuU5QkRWWyxEH1rnNlzTAmJLXH195
KxU7jor/xcZnh3C/JEozwGF6BYLX8QUmq6ZwDRaGjgnTePTDKSoXwwwOcusEBVvE
VxO0zLTM+cgIA2wzZP7qr9R7nowh0riIhgAiGCXIYtMj9rWG2o6KLYcGPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzbGiob44wxFdi04xe/XFE7FjlHMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA5NmzTl
cEEohkElTE9n1Kt300BQ5cAeqdtag1utLxH0q7sslhJBoMfL6JGQHnu2VpL6Sghv
4PY6b0w6dEk9Kd4NkxToWS2+0Plih2pLWcFmX0EQcC6rWmoNS0l0npejJ2bSwaxQ
9DxvgI16N2lie9gfDzSJhzEizroehzPZU3hrizemlJcWuJudLlHNDm+aIxL0eq2x
mG95F1d0dbJ3mPaPHfO0LS6MVHNlyKM3e9bBflyKL2WG5M/2RXAVy1wPK5JF6lTk
TLP1hO13tSSNx+znSoMOrhB/sqFfQa1YYH0jzn1msmWZi0zlle64ie2yFwsylPKg
7D7oF4QSqChvrw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:34:58 2024 by rpki-client on console-fra.rpki-client.org