Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File:                     sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier:          5m8frvKBM5sasSQ9nmRWx3pvBkRpjS/mn/xUyTUTG2M=
Subject key identifier:   54:9C:1C:F2:14:22:23:ED:0B:F2:83:AF:D0:92:B6:66:32:6F:85:A4
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer:       /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial:       018F9C86A7C397B63038856305D4CB789704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number:          0BE1
Signing time:             Tue 21 May 2024 19:00:21 +0000
Manifest this update:     Tue 21 May 2024 19:00:21 +0000
Manifest next update:     Wed 22 May 2024 19:00:21 +0000
Files and hashes:         1: M5-8T8TFMcb3J2CvuaHGfYikil8.roa (hash: sEuV/u3YL8dSNJyH59zm3ikAH6V5LtH2iezUmG3BKhk=)
                          2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: 3q8m+dlGBE6ccMsD7jZfpJv8GGIu5KiE1b3GTJj+3sA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:86:a7:c3:97:b6:30:38:85:63:05:d4:cb:78:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
        Validity
            Not Before: May 21 19:00:21 2024 GMT
            Not After : May 22 19:00:21 2024 GMT
        Subject: CN=549c1cf2142223ed0bf283afd092b666326f85a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:8c:5a:6d:ef:0e:9a:9b:e9:63:9e:64:29:
                    bb:6b:21:c6:14:f4:d4:02:a2:84:46:a8:e3:5d:9f:
                    8f:51:4b:75:7b:ee:b5:0b:6d:cd:f5:c1:d7:19:de:
                    bb:d0:6a:2d:8c:af:dc:7b:01:1e:95:a9:03:ba:89:
                    1b:7a:61:6a:6f:fd:f4:b6:39:79:e5:2e:f1:62:63:
                    4e:69:b4:10:a5:66:a3:4d:b6:6b:89:1e:86:6f:98:
                    fd:88:c1:d7:c2:92:cd:97:10:c6:e1:00:64:29:f3:
                    42:ff:2f:51:1c:8f:b2:34:dd:7d:d3:ce:58:75:da:
                    04:97:56:6e:25:de:e4:dd:c2:d5:d4:55:0d:95:4f:
                    fb:90:84:91:64:9c:c9:3b:b3:13:c3:f9:0e:8e:cc:
                    b7:d3:40:59:58:c1:b3:d6:03:2c:d0:b7:4b:4f:8a:
                    b1:25:ad:e6:ab:17:0a:c6:01:e3:13:b6:b1:f2:2c:
                    76:91:8e:d7:b4:72:e5:0c:39:ee:2b:c2:f5:98:62:
                    2a:04:52:c6:26:10:8b:c4:c9:7b:25:0c:59:64:d4:
                    01:e0:fd:fc:4a:96:58:a9:1e:f7:f5:93:92:92:2a:
                    6f:6c:8d:13:a3:dd:77:e1:dd:1a:3f:04:94:77:47:
                    07:47:72:e1:9e:54:5a:c9:ee:bf:a3:2e:75:e3:da:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9C:1C:F2:14:22:23:ED:0B:F2:83:AF:D0:92:B6:66:32:6F:85:A4
            X509v3 Authority Key Identifier:
                keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:26:d1:b7:22:99:f7:f6:5d:ac:c4:7e:4f:f3:4e:6f:86:e9:
         64:2f:bb:66:f2:84:8d:ca:bb:cc:59:8e:e8:78:0d:01:a4:05:
         39:50:3b:b6:bd:16:05:d2:45:2f:04:53:64:12:51:d1:8c:75:
         7e:a7:91:c9:8d:33:dd:c9:41:8d:3b:7e:ae:97:6f:b9:f5:ff:
         4e:1a:13:6e:e1:50:7f:d2:68:14:dd:a2:1a:9d:28:c8:30:80:
         73:42:0c:f9:99:ba:c0:52:ac:2e:03:60:98:b6:85:39:f9:fb:
         c0:de:1d:51:2c:0f:5c:3f:d4:38:6b:4c:5a:e2:68:93:cf:e0:
         e9:95:7d:16:9e:73:48:dc:84:08:18:f8:a9:a2:ea:5f:af:5d:
         35:86:cb:63:be:a7:11:cf:f8:32:cd:2e:39:09:29:f4:8b:27:
         31:ef:ed:db:e0:e7:0e:14:b1:c0:ba:25:b3:a4:51:39:a1:43:
         60:3a:f7:b6:ba:b7:77:73:d6:7d:a5:c5:79:8f:f8:28:0a:30:
         b6:cb:55:4a:4c:a7:9a:d9:9e:94:29:4c:ca:8e:39:e1:ce:b1:
         4d:ee:a2:91:06:43:3f:37:f9:b8:d8:81:01:ee:74:1c:cc:4c:
         12:40:d3:e8:1d:7a:b4:e2:36:e3:92:68:f1:91:4c:10:ec:90:
         e2:94:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:40:36 2024 by rpki-client on console-ams.rpki-client.org