Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File:                     0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier:          fD/8RxYJH/jrZHQUB8fAvmYu87kvOLRtqF9GJjrqEa8=
Subject key identifier:   BA:51:D0:92:D5:A7:4A:A5:FF:E4:93:AF:C3:90:65:BA:BB:C7:5C:FC
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer:       /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial:       018F5514155FED65ED571C5E1A29AFC513B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number:          115F
Signing time:             Tue 07 May 2024 22:02:10 +0000
Manifest this update:     Tue 07 May 2024 22:02:10 +0000
Manifest next update:     Wed 08 May 2024 22:02:10 +0000
Files and hashes:         1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: UZvOLp4iDvlMpBEelN8pRNORcDrkqOgqhvJx6sfYgkI=)
                          2: k9IrH8SD4Ugz_lou3oXRmMNjMsU.roa (hash: ZwM42BQOtj+YVDfa7eQ4t2agQXgiQcm3sNBhqCNtDgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:15:5f:ed:65:ed:57:1c:5e:1a:29:af:c5:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
        Validity
            Not Before: May  7 22:02:10 2024 GMT
            Not After : May  8 22:02:10 2024 GMT
        Subject: CN=ba51d092d5a74aa5ffe493afc39065babbc75cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:37:d0:c5:b2:f5:d4:17:19:b0:06:92:a8:
                    eb:bf:1c:bd:98:6a:36:18:a0:3c:d6:18:cc:df:68:
                    8a:a2:37:6f:4c:b0:32:5b:39:63:01:7e:ba:71:69:
                    d8:9b:64:6b:50:0e:ab:d1:1e:53:b4:e8:a8:87:af:
                    67:ad:5f:f6:2d:11:97:84:d9:ce:f5:f9:53:57:cd:
                    7d:e1:38:df:bd:b5:85:5a:fc:ee:57:94:d0:19:9c:
                    39:bb:a4:4f:f7:a3:84:e2:df:f3:b7:61:1e:fa:ad:
                    b6:46:22:5b:c7:89:57:11:7e:8b:da:0e:8f:1b:46:
                    24:04:7e:70:58:69:b7:27:18:c7:b2:6b:d6:da:5f:
                    af:3f:cc:05:94:cd:b7:c5:d3:94:5d:18:a2:1c:f5:
                    a3:16:f6:ec:20:19:9b:81:db:4d:12:3a:42:34:83:
                    c5:6b:a3:d9:1e:66:75:a9:b2:f5:26:8c:25:ad:8f:
                    53:55:44:8d:d8:52:c0:53:ed:f2:c0:52:e9:f7:4c:
                    eb:c9:1c:35:60:9c:af:d6:20:48:a5:6c:bf:3b:c7:
                    32:4f:89:70:c7:3b:41:71:cb:83:0e:98:85:d0:ce:
                    b4:1e:85:c1:e8:85:19:3f:ec:cb:3e:be:9d:10:46:
                    6e:a1:f2:31:ba:88:79:21:9c:c4:7d:e5:0e:44:3e:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:51:D0:92:D5:A7:4A:A5:FF:E4:93:AF:C3:90:65:BA:BB:C7:5C:FC
            X509v3 Authority Key Identifier:
                keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:45:ac:51:48:a2:08:bd:6f:62:b2:15:8d:11:fa:96:7e:
         d5:58:5d:e5:b7:ae:8f:e7:f8:c2:99:88:cf:6b:9f:52:d5:a5:
         bf:ee:a3:82:c0:32:5c:1c:40:2c:77:0f:36:37:e2:c9:b2:53:
         8c:60:2b:24:58:78:14:86:85:42:6f:6c:46:98:43:f3:34:5a:
         4e:82:d4:88:b4:f2:25:a4:c1:81:82:da:a0:8b:23:d6:40:12:
         89:fa:54:d8:ee:0e:24:6a:a3:be:51:32:7f:50:56:c1:d7:d5:
         19:ba:d7:85:47:75:d4:ef:8b:ca:dc:fd:83:7d:75:1f:33:8b:
         73:0e:63:52:ca:06:4d:9d:c3:44:9f:d8:88:96:77:68:67:1c:
         28:f4:e5:86:e2:a7:23:55:48:6a:e2:d2:2e:8d:be:f7:83:05:
         bb:50:a7:15:84:23:80:f5:6a:cb:8f:8e:57:a5:8c:1a:54:08:
         5d:b2:43:bd:1d:ff:ea:ad:6e:bb:a1:ee:59:54:c8:d2:cd:c1:
         3c:ed:5c:25:2d:fd:17:00:78:8f:01:26:b3:d5:25:98:05:db:
         58:cd:15:ed:36:e5:9e:f4:ca:da:27:60:47:6a:9f:bb:58:e0:
         48:b9:ea:ff:48:ce:f4:40:80:65:a2:72:9e:63:ec:c6:69:4c:
         3e:2d:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:24:36 2024 by rpki-client on console-fra.rpki-client.org