Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File:                     C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier:          Uq5SxSLQUsr6LBA0OhcxxowvfNq3UbHNRLDYCw+3pvA=
Subject key identifier:   90:39:8F:28:6A:9C:7F:16:5A:42:12:E7:72:90:66:08:31:44:9C:F5
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer:       /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial:       018F8C6F001FC60EE465B35103586F4C396E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number:          05A2
Signing time:             Sat 18 May 2024 16:00:35 +0000
Manifest this update:     Sat 18 May 2024 16:00:35 +0000
Manifest next update:     Sun 19 May 2024 16:00:35 +0000
Files and hashes:         1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 1QWjlPWa0uAAuVuZ0+/g3JICHvBwXC46K0Nv+FaL2CE=)
                          2: SZz9H4HOe20DCr_66JjsBT61HHI.roa (hash: ZQ5EzC/QhWxCwI/iW+FgB68q/OTM9QaYMCYQdzsjFWY=)
                          3: XEk4OEe6dC_dLyYWMNkysigweWo.roa (hash: lI2Lb3pU6MGtSPPokHno9CGg7qAH2kVxkjIQGP3sQPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:6f:00:1f:c6:0e:e4:65:b3:51:03:58:6f:4c:39:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
        Validity
            Not Before: May 18 16:00:35 2024 GMT
            Not After : May 19 16:00:35 2024 GMT
        Subject: CN=90398f286a9c7f165a4212e77290660831449cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:d2:61:7a:7e:ba:4c:33:5d:2f:33:8a:ec:
                    1a:f9:70:d2:75:97:89:6e:0d:a5:b6:a2:77:94:1a:
                    6e:ce:ff:47:20:c9:8b:0f:43:42:d2:bf:a3:a3:77:
                    c4:93:cb:85:56:09:b4:4b:30:96:ef:47:ee:44:dc:
                    50:87:1d:bf:df:5b:ff:26:b0:3a:f9:b2:ec:04:87:
                    ce:7a:1c:9c:7e:8f:dc:ee:d4:f3:36:9b:aa:bb:09:
                    d8:7e:df:70:7e:d5:e5:07:fc:b7:51:a4:f5:02:6c:
                    4c:2c:37:cd:8a:16:ee:30:b8:41:fb:35:b6:84:c0:
                    e7:6d:db:37:9b:72:13:20:b6:d5:81:9b:65:e1:99:
                    2f:11:44:66:67:6c:4a:ff:70:bf:f8:2f:f1:7b:82:
                    b8:c5:ad:25:4a:7b:9a:15:19:95:b0:82:cc:b4:c6:
                    9c:35:f8:a0:c5:14:c9:01:84:be:f4:41:2d:72:86:
                    c1:fb:67:c6:96:c8:55:19:7d:ce:44:ae:ef:55:2b:
                    ff:79:3f:2c:09:a1:64:66:14:d2:26:d6:9f:65:45:
                    1a:da:72:b3:da:06:dd:b0:a9:f7:08:74:87:79:c5:
                    7d:71:be:13:d2:c8:b4:63:b8:86:3c:a4:a7:8b:b6:
                    03:73:0d:62:05:fc:fa:3b:9c:78:ba:93:fa:5f:e8:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:39:8F:28:6A:9C:7F:16:5A:42:12:E7:72:90:66:08:31:44:9C:F5
            X509v3 Authority Key Identifier:
                keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d3:7a:2a:16:e8:7f:43:ef:e6:38:50:fd:d4:27:13:8b:13:
         c8:d3:ac:d0:30:7a:6f:fe:d6:96:ff:51:cf:ae:9b:50:39:6c:
         90:34:f3:ec:87:b4:d1:f2:66:93:5f:b7:6d:15:1c:ca:ac:23:
         8a:67:97:e3:2e:61:e7:aa:4a:57:27:a1:45:b4:33:9e:23:3b:
         3d:64:f8:d5:27:e5:dc:32:12:85:ec:e7:a7:f5:6d:f9:fd:4c:
         b9:f2:e7:25:ca:7e:41:11:20:d6:5a:7b:dc:77:02:c5:d4:00:
         90:a4:12:fc:74:d6:29:1f:0c:e3:d6:10:fa:3d:35:96:39:cb:
         54:11:52:5b:f1:76:c3:d3:3c:b3:83:45:89:aa:23:d1:52:88:
         7d:cc:d0:07:07:67:19:5b:c9:ef:f5:dc:3f:7c:83:6d:1a:a4:
         82:f6:2f:f5:b5:21:df:51:b7:de:9a:29:a9:03:d3:45:86:75:
         e9:76:e1:90:0f:50:c8:6d:b7:0e:0c:14:35:1d:1c:52:c8:71:
         d8:ad:3f:9f:01:b9:45:d8:0b:de:71:f9:c2:be:6b:5d:e5:88:
         d0:d3:fa:94:f9:3f:c1:6e:c6:4f:74:f6:65:55:38:4c:e5:14:
         16:1a:94:d0:20:96:b5:10:62:d2:d1:4a:58:d3:27:05:81:1c:
         3c:4c:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:01 2024 by rpki-client on console-ams.rpki-client.org