Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File:                     B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier:          mUmjEkij0w234xzR5caDimYyeDVKAb2ZzYK/yAqZq/k=
Subject key identifier:   7C:B9:34:59:8F:CE:8F:C7:62:B8:FC:60:53:AD:C3:48:E1:70:FF:2C
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer:       /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial:       018F57DDAEE9C27095D9BFF0D0A14B1A4986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number:          0F5A
Signing time:             Wed 08 May 2024 11:01:36 +0000
Manifest this update:     Wed 08 May 2024 11:01:36 +0000
Manifest next update:     Thu 09 May 2024 11:01:36 +0000
Files and hashes:         1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: d8yOypDZdeaKqOs2VSWncKMsKusLXj5mK612OczP/u0=)
                          2: V5Bw1xaIs9gJJG3FItQX7XO8MSw.roa (hash: BQYlOJNnavAP5tLNQ83Pzyz4xgbSXHbkqMTlXU7QOM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 11:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:ae:e9:c2:70:95:d9:bf:f0:d0:a1:4b:1a:49:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
        Validity
            Not Before: May  8 11:01:36 2024 GMT
            Not After : May  9 11:01:36 2024 GMT
        Subject: CN=7cb934598fce8fc762b8fc6053adc348e170ff2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:94:da:88:50:df:75:c6:1f:83:63:e3:cc:
                    ea:5b:e4:e0:d7:ce:57:b4:d7:24:3e:15:d5:5d:64:
                    7f:9b:21:5f:14:e4:1e:63:94:d2:ae:bf:5e:1b:bf:
                    be:0f:0c:b9:13:98:c9:04:b9:ed:f2:64:91:70:8f:
                    7c:2c:91:04:51:a6:de:95:43:ce:07:0d:3c:f7:86:
                    2d:06:8a:66:d7:cc:e9:29:bb:ba:da:ab:e1:89:3d:
                    7b:85:1d:dd:81:38:56:e6:78:02:67:fa:bc:20:0e:
                    5e:4f:74:0d:be:34:a3:e5:d8:76:0a:9e:67:7e:17:
                    e6:c6:1a:71:56:b5:f7:22:6d:53:56:cd:1c:f2:90:
                    8a:74:cd:88:24:50:cb:b5:1a:d5:23:20:21:88:0b:
                    5f:3e:b9:d7:d9:ee:e5:75:d0:b9:44:5d:82:f7:25:
                    67:dd:4a:48:28:8a:f3:6d:26:a6:71:f7:5a:4c:ae:
                    9d:04:39:16:47:89:69:7f:d9:0f:96:8d:ac:09:9c:
                    5e:fc:90:0c:1e:cf:4b:2e:6f:67:66:56:e9:3d:6d:
                    fc:00:30:4f:41:20:48:ad:14:eb:ed:cd:65:9d:6a:
                    77:32:85:e7:2c:4c:02:b6:59:ba:d1:e1:dd:c0:19:
                    62:df:37:bd:c6:19:86:02:6a:f2:01:a3:59:80:7f:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:34:59:8F:CE:8F:C7:62:B8:FC:60:53:AD:C3:48:E1:70:FF:2C
            X509v3 Authority Key Identifier:
                keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:2d:a2:4d:db:f3:58:87:76:98:a3:e0:e2:1b:fb:3f:b2:
         2e:48:5f:77:ab:b5:d5:1a:5c:f6:ec:3a:fd:09:39:4d:62:d9:
         8b:77:4f:bd:b7:13:0d:16:f5:83:84:a5:a9:a9:fe:66:32:d2:
         82:91:52:c9:b9:da:e4:af:11:75:c9:de:33:20:cd:bf:46:24:
         85:cc:02:4f:ea:8e:66:d9:22:25:62:84:d9:ea:01:5e:08:16:
         39:c5:9c:99:5c:49:27:01:89:e1:61:b8:22:57:4f:2c:70:de:
         22:cc:d5:2f:7f:60:63:b9:41:b7:b9:87:40:d6:4b:b0:f9:7a:
         d5:45:0a:44:a0:d3:2e:f9:8c:37:f1:48:94:62:96:42:63:0c:
         25:87:94:9b:b9:7e:e6:86:bd:fd:07:e5:ed:21:6c:4e:ca:c0:
         67:1f:cb:d1:33:70:b7:0b:21:b8:d1:5b:2c:79:9b:2e:5d:93:
         6c:7f:7c:24:92:9f:25:d6:9f:b2:df:24:28:3e:ca:a7:70:92:
         0c:91:43:6a:32:79:c5:6f:81:15:34:94:3c:af:0f:a1:ce:ff:
         a8:ff:32:02:15:d8:66:b6:cc:02:36:41:b5:d4:dc:d3:13:ca:
         a9:2d:ee:91:60:c5:0b:4c:cd:1f:a3:85:ff:84:ef:95:f0:66:
         f6:ff:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:37:14 2024 by rpki-client on console-fra.rpki-client.org