Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          rKbf+/MzVo/GBNKEqetJFQq5mmyjeV3Z6aktB9kjZWA=
Subject key identifier:   02:5A:CB:36:30:FE:93:AD:65:2D:18:A2:61:11:97:CD:C3:E0:0A:B0
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       018F373FEE29F21514F809F5ED0121B9401C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          085C
Signing time:             Thu 02 May 2024 03:01:27 +0000
Manifest this update:     Thu 02 May 2024 03:01:27 +0000
Manifest next update:     Fri 03 May 2024 03:01:27 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: 2ehkg18ggOk56rCem582Gq5ar9bOq8Wh22T/3qgAYS4=)
                          2: dhlPVUM3wk2hWa1-gjuRxUCRIqY.roa (hash: CNzD72FeBrNhFxcICiHnLjua5N0STHUk06NOb/MrDso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:3f:ee:29:f2:15:14:f8:09:f5:ed:01:21:b9:40:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: May  2 03:01:27 2024 GMT
            Not After : May  3 03:01:27 2024 GMT
        Subject: CN=025acb3630fe93ad652d18a2611197cdc3e00ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:b5:92:9f:37:93:9e:0e:d2:b3:da:01:e1:
                    2a:8f:2e:be:41:ad:b8:c4:59:47:f5:fd:f5:40:28:
                    ce:61:40:93:53:49:71:1e:d5:a1:1d:d5:95:49:47:
                    69:e1:1d:03:70:39:20:8f:4c:85:9e:75:70:17:47:
                    5d:ba:17:27:de:41:7a:ea:8a:92:57:d8:59:e7:a1:
                    e7:48:d2:31:12:29:09:28:b1:8e:4d:d9:64:68:f1:
                    76:75:83:ba:de:f4:09:49:48:11:1d:29:81:cb:05:
                    92:d5:ce:fb:20:ce:9e:03:d2:fc:b1:77:89:9b:64:
                    fb:aa:e8:f3:ad:88:c9:ed:b2:5f:af:46:ab:95:2d:
                    db:5b:5c:96:61:2e:2b:35:5b:c6:42:58:77:27:06:
                    ee:84:7b:35:0b:42:39:be:3e:0f:e0:2c:fe:54:4d:
                    63:ce:12:d6:f5:21:05:a9:32:e6:2f:52:5b:be:d3:
                    5d:c7:52:73:e2:0b:65:e3:94:cd:05:54:ac:88:97:
                    85:ab:38:34:21:76:8f:c1:1c:76:df:5e:69:b4:71:
                    9a:41:13:7c:c1:f4:c0:f3:6a:dc:00:be:b8:1d:29:
                    ed:a6:20:d0:9e:3f:4b:04:9b:cc:b0:27:6b:cf:42:
                    63:27:57:16:60:c9:b0:37:be:bf:e3:7e:d1:18:0d:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:CB:36:30:FE:93:AD:65:2D:18:A2:61:11:97:CD:C3:E0:0A:B0
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:b5:e4:50:6e:02:1c:94:8b:87:3a:c9:c5:f7:51:be:30:
         ad:0c:e3:fc:87:fe:67:53:cf:ff:4c:48:25:ef:ce:11:85:6a:
         f9:ab:26:00:23:dd:85:32:44:bf:40:57:7c:ed:a2:35:de:57:
         41:b5:ae:e0:78:fa:eb:5b:4d:95:d1:a5:5a:55:8b:81:5d:94:
         b6:78:d7:ba:94:64:4d:f1:fb:0f:c1:b9:46:69:26:e1:30:0c:
         21:56:d4:47:9f:94:d7:81:15:10:4c:6a:d9:6f:33:6a:fb:cb:
         6d:d3:66:9f:dd:4a:86:39:7c:7d:0d:48:85:94:3f:12:22:6d:
         ab:d0:af:03:f7:d6:24:5b:59:e4:98:ac:f7:5b:46:2e:ac:30:
         e9:9c:f1:ab:08:c3:b5:7d:9a:ec:f6:8c:24:16:15:65:61:1d:
         9e:e6:cd:39:55:b7:9d:ba:fa:6f:cd:99:71:57:c6:cd:1a:47:
         dd:77:ac:b4:2f:68:7a:49:0c:e1:ce:e6:a7:31:25:1d:3c:6a:
         43:12:77:6c:a6:05:ac:8c:9a:cc:d8:6c:5d:c0:85:d5:db:15:
         cd:f3:fb:73:7b:bb:73:d1:bc:c8:d8:af:51:14:bc:b2:1e:ed:
         dc:b9:36:c3:5c:d5:e8:77:a6:6c:43:20:82:8a:06:60:87:9a:
         32:4f:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:23:50 2024 by rpki-client on console-ams.rpki-client.org