Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
File:                     BU1P54D-RTMHgN627DhMuUk_LfI.mft (raw, json)
Hash identifier:          4wsrJ0qGZ77Ed0WpF50fg1M6g9Srn4jkV01ejiA43u0=
Subject key identifier:   E4:E9:92:8D:8D:04:FA:D8:C4:9B:EA:83:4B:5F:D6:34:58:92:0C:FB
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Certificate issuer:       /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial:       018F4B6D3717887ADC4AE163F8FCA9CDFF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
Manifest number:          0D87
Signing time:             Mon 06 May 2024 01:03:19 +0000
Manifest this update:     Mon 06 May 2024 01:03:19 +0000
Manifest next update:     Tue 07 May 2024 01:03:19 +0000
Files and hashes:         1: BU1P54D-RTMHgN627DhMuUk_LfI.crl (hash: yFrSrNy2w0m+OU824pr6OOwv/bYJadOISrh3uRShbtM=)
                          2: TS3rILBfBr9u4RAj0aRR2oJ4gMg.roa (hash: AeZnQ78Q+n14+W2M9vta2o5cZDaZSGeOQp+cWQ2MUGA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:37:17:88:7a:dc:4a:e1:63:f8:fc:a9:cd:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
        Validity
            Not Before: May  6 01:03:19 2024 GMT
            Not After : May  7 01:03:19 2024 GMT
        Subject: CN=e4e9928d8d04fad8c49bea834b5fd63458920cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:00:fe:c3:51:64:b7:af:d2:bc:d6:fa:c3:
                    8e:9f:a0:b3:ad:ff:f9:78:3e:96:b0:8f:78:dd:c5:
                    94:c2:3c:7c:fe:e9:2f:65:67:42:78:3a:1a:68:72:
                    4f:37:66:26:01:9f:64:c2:6e:7a:3b:a4:6d:9a:ff:
                    3d:c5:a4:bc:9c:d1:5d:52:45:eb:6d:0f:a9:96:5e:
                    80:f5:d4:77:af:2c:43:30:7a:e3:b1:ba:43:35:8e:
                    d5:b9:a1:f5:27:ca:35:27:15:5d:49:0b:d6:a6:e1:
                    6f:6b:af:83:10:b1:04:9a:fb:a4:c3:fd:44:6d:d1:
                    35:eb:88:28:10:d5:b2:32:a4:91:7f:fb:07:cb:a8:
                    c8:3c:fa:43:d7:aa:aa:7e:36:99:d2:1d:10:44:85:
                    3e:95:6e:d0:b5:90:07:f3:fe:f0:fa:95:f0:ac:aa:
                    53:10:76:66:74:27:a1:e3:de:8a:82:9b:da:31:7a:
                    51:20:65:5c:b2:9b:4c:4c:a3:64:ca:5a:07:3d:28:
                    94:26:f3:ff:9d:8b:8f:de:26:7e:f5:b6:30:6b:5f:
                    f3:5c:2e:db:96:29:fc:d4:07:7b:f1:81:43:58:b5:
                    8a:4b:bd:7f:9f:3d:79:58:57:86:3b:12:de:56:1e:
                    a6:d1:c6:21:17:b3:4a:d7:c1:c4:02:43:ee:a8:b2:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:92:8D:8D:04:FA:D8:C4:9B:EA:83:4B:5F:D6:34:58:92:0C:FB
            X509v3 Authority Key Identifier:
                keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:d4:70:3a:f0:8d:c1:a1:60:46:24:bd:30:e7:e5:ae:9a:
         84:0a:e9:20:0b:22:16:08:f6:62:4b:d7:48:6c:ab:29:46:4b:
         b4:0a:e8:46:df:3c:66:e0:80:8b:5a:b3:fe:9e:ce:e6:a1:f5:
         c2:22:79:ab:95:12:11:09:73:49:92:90:0f:33:9a:1d:cd:b9:
         e6:1c:41:9f:4c:3f:d4:81:b9:3f:d8:88:3f:17:60:6a:2e:35:
         74:ca:42:c5:bd:0a:c6:7e:18:91:79:cb:dc:9f:11:13:98:be:
         d0:4d:46:fb:5d:a9:af:3a:a0:6b:86:a5:5b:10:69:50:be:66:
         36:9a:d3:d1:94:70:2e:d4:b9:d9:84:82:25:75:62:90:ca:9a:
         ff:82:dc:73:5e:e6:6d:d8:f7:ed:b2:97:58:fd:52:d7:30:5c:
         ea:a0:a0:97:7f:a4:14:bd:42:9d:bd:98:9b:f2:7c:01:7d:ca:
         7b:64:08:6c:3d:b1:2d:a5:5f:b7:d2:9f:e1:20:c2:0c:08:50:
         6c:13:e0:54:fe:1b:be:c8:2e:3b:a8:f2:77:62:8b:35:e7:3f:
         3f:b1:1f:bc:32:93:b4:c5:52:4b:83:b4:47:f9:ff:17:dd:f0:
         da:b7:b9:ec:c6:80:47:ca:2c:6c:ff:de:17:58:81:dd:02:7e:
         5c:6a:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:44:07 2024 by rpki-client on console-fra.rpki-client.org