Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File:                     BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier:          iiPuKr1yf41UqmjFUi3YzCckS1JCPPeBSaUjvVqu9uA=
Subject key identifier:   2E:54:7F:87:C6:09:1F:D8:33:6B:3F:EF:33:51:A5:47:F2:71:8F:E2
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer:       /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial:       018F5137554F580A09A2FEF0D12B68015FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number:          0418
Signing time:             Tue 07 May 2024 04:02:11 +0000
Manifest this update:     Tue 07 May 2024 04:02:11 +0000
Manifest next update:     Wed 08 May 2024 04:02:11 +0000
Files and hashes:         1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: VJ51VbUCAjBkl4XrovWiYJ0zk/npBqZ20CYy4+kZq0Q=)
                          2: O7BF3njYk1hSe1uTuVdyjrVeFlE.roa (hash: WsB8E8u7sMZm6DBJtyrLfS8CeUjyc1Cj7ZMO/DHdeho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:37:55:4f:58:0a:09:a2:fe:f0:d1:2b:68:01:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
        Validity
            Not Before: May  7 04:02:11 2024 GMT
            Not After : May  8 04:02:11 2024 GMT
        Subject: CN=2e547f87c6091fd8336b3fef3351a547f2718fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:10:71:31:a1:b7:59:b4:f0:ce:62:9c:e6:
                    bf:c6:a0:db:61:4c:b0:6e:35:11:a3:3f:5b:90:4f:
                    ad:ce:a5:c2:00:98:45:4c:d4:8a:50:d5:31:78:11:
                    70:ce:b9:2e:d3:92:ef:d1:a2:91:84:6a:29:4a:8a:
                    ea:db:6f:5c:fe:39:d4:23:a1:46:af:9c:41:46:61:
                    85:41:cd:34:cb:c3:77:8e:0c:64:be:fa:d8:0e:66:
                    00:1b:7e:58:11:f5:c3:95:79:d5:cf:08:1e:63:2f:
                    5b:9b:23:a0:54:42:50:22:c7:26:88:6c:9f:f6:29:
                    a5:3d:cc:c5:fd:54:d8:61:96:8a:26:6d:7b:5c:00:
                    89:d3:01:8c:51:d8:79:3a:08:bc:ef:e6:9e:ab:9a:
                    53:26:f3:f6:99:c7:18:f2:03:a7:4a:93:c3:7f:eb:
                    6f:39:ec:f5:ac:8a:91:c4:72:ee:56:00:e8:1c:0c:
                    64:b7:48:f2:83:46:aa:c0:2e:a3:89:c8:74:e8:49:
                    9c:6d:42:00:10:ac:fd:c2:63:79:b7:f2:bd:72:eb:
                    09:c2:9e:76:14:40:0e:d9:11:1d:f7:90:9a:af:d1:
                    a4:d6:ff:19:84:16:e2:91:12:e2:5c:6c:e6:3d:bb:
                    88:72:67:e4:c8:89:7e:50:ae:27:a8:df:1f:7f:fa:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:54:7F:87:C6:09:1F:D8:33:6B:3F:EF:33:51:A5:47:F2:71:8F:E2
            X509v3 Authority Key Identifier:
                keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:56:bb:76:a8:22:41:7b:8a:59:e9:fb:13:f9:e8:bc:78:b5:
         d4:c1:64:7f:4f:09:83:d0:48:e9:0e:42:e8:bd:d4:c4:fa:cb:
         58:75:3d:d7:d6:ed:7a:6d:70:f7:03:93:b2:97:49:9b:fb:ce:
         10:4f:72:13:7f:74:95:5a:f8:a4:a0:ad:4f:c6:6b:12:a0:8f:
         88:47:50:bc:04:0f:19:3b:61:2e:b5:7c:09:6f:66:eb:cc:ac:
         b7:42:af:fc:6e:1d:6e:07:2b:c0:4d:07:e3:ba:19:d9:be:55:
         4b:bf:1c:4f:ac:71:50:aa:54:de:18:b9:f3:9a:62:f0:98:1c:
         e3:36:83:49:a8:c0:c5:44:7d:8f:d0:71:79:06:6b:7b:39:80:
         63:5b:ea:57:63:70:16:79:37:6d:d2:a4:1d:85:40:28:34:6f:
         96:6b:ed:45:39:04:64:48:17:54:55:f1:f1:29:4e:3e:f8:90:
         cd:08:8b:00:b8:52:15:1b:db:29:9f:d2:b1:41:70:ad:8f:06:
         78:1a:c6:57:d4:89:cf:1a:04:19:d5:61:0b:72:25:a6:49:04:
         d9:91:64:f2:44:4d:74:da:3f:9a:28:42:8f:3b:78:34:98:34:
         6a:d7:9a:0a:3a:5c:f9:eb:a0:1e:b6:ee:34:37:94:d5:0e:1d:
         cc:5f:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:16:22 2024 by rpki-client on console-ams.rpki-client.org