Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          7cjiinuIPBpj+sSpCuzZMn/u/7B49ISa9N5N6NGTf0g=
Subject key identifier:   16:CA:06:03:08:7F:70:7A:D5:6E:22:97:79:49:4A:F1:BD:27:0A:0C
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       018F381C0BDDE155D1CAD21A50B3E22FB97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          086B
Signing time:             Thu 02 May 2024 07:01:53 +0000
Manifest this update:     Thu 02 May 2024 07:01:53 +0000
Manifest next update:     Fri 03 May 2024 07:01:53 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: L8TynieB0pl9U7pspx255sHMWTQYrEWQ6JDPBQAiiM0=)
                          2: i9E9qX8H5X3AlD1pTKh298_zlys.roa (hash: Tl3XNuEWZZCZHvKi+51d1YG8QKkTjXdnQdpvaP7yGVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:0b:dd:e1:55:d1:ca:d2:1a:50:b3:e2:2f:b9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: May  2 07:01:53 2024 GMT
            Not After : May  3 07:01:53 2024 GMT
        Subject: CN=16ca0603087f707ad56e229779494af1bd270a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:c4:24:b5:d7:04:4e:c9:87:c1:2f:ac:a4:
                    92:dd:78:e6:f2:6c:5b:0f:99:6f:f9:97:4d:83:b3:
                    9c:9f:f6:22:31:31:d6:5f:80:bf:2a:a0:0d:aa:09:
                    5a:ec:a2:a6:0c:8b:09:24:75:c6:5c:38:ca:17:cd:
                    f2:2c:a2:ee:e5:ea:0b:bb:28:c2:20:de:f8:7c:51:
                    39:07:be:14:fb:c8:9e:4b:83:cb:30:61:0e:e3:88:
                    d6:5e:14:d4:37:af:2e:45:77:30:5a:c7:d9:e8:52:
                    43:98:29:07:28:3a:ce:6c:98:95:a0:91:76:74:46:
                    02:fa:15:20:84:86:d3:d7:ca:8d:ea:6f:7f:bd:cd:
                    ba:37:e2:d4:86:bf:f4:30:93:22:b8:92:1f:d1:18:
                    d1:2c:1b:b8:f2:dc:cc:39:1d:5c:79:67:c7:38:b4:
                    e3:3e:aa:8d:28:78:2b:44:d5:37:2d:fa:06:5e:12:
                    cb:07:0c:65:f8:79:f0:32:0e:c5:50:a7:69:6d:1a:
                    5b:11:68:91:1d:13:dc:fb:d6:6f:35:48:4d:4f:79:
                    da:be:bb:3b:75:7e:59:47:38:7d:14:59:6e:a4:95:
                    1f:bc:1b:7c:77:d7:c0:d8:af:a4:d0:c9:e9:bf:be:
                    1f:a5:06:ea:2a:b1:9e:47:cd:cc:d7:31:09:57:39:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:06:03:08:7F:70:7A:D5:6E:22:97:79:49:4A:F1:BD:27:0A:0C
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:af:79:3d:8a:dc:b8:53:ff:45:41:b3:e8:e5:3c:fb:83:
         cc:5d:ef:5a:2d:81:bc:b8:04:19:6b:ba:96:b8:f2:7d:7a:2c:
         ef:be:64:3d:33:e6:04:cb:84:cb:b7:8f:21:6b:9c:53:47:2a:
         c5:ef:b3:c3:2f:1d:4e:12:83:6d:ae:b1:b7:81:95:65:01:e3:
         e9:8b:e5:6d:f5:81:9d:13:6e:ac:1c:ba:cb:94:f7:8a:2b:2b:
         95:86:3a:e1:cf:52:4e:01:d9:fb:bc:d9:46:18:56:57:68:44:
         58:6c:62:89:b2:bf:66:cf:77:95:a7:a2:25:d4:9b:f8:ff:ad:
         e1:7c:e7:47:2e:39:05:f1:46:cf:9c:db:db:3c:87:33:02:83:
         f1:80:ee:62:9f:48:d8:5d:d3:ba:cb:27:df:16:8a:2f:42:b5:
         95:1c:93:ae:15:47:56:ad:23:f5:d3:28:48:bc:8a:27:9c:a2:
         96:03:7d:00:7b:1e:75:9b:46:b9:60:9e:e7:0c:f5:9f:6c:f2:
         37:bd:22:c0:6d:2c:15:2a:72:74:07:63:08:a2:32:52:a2:ed:
         a0:44:e5:a7:f3:16:e3:0a:ad:0a:c3:1d:bb:b0:6c:21:60:4a:
         4c:c1:c0:16:2d:85:f6:c0:de:d0:a5:02:45:91:94:1a:88:64:
         a6:f4:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:22:01 2024 by rpki-client on console-fra.rpki-client.org