Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
File:                     bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json)
Hash identifier:          QOdRgwAz4YCWfESPJtJbT9rjA+f2RdAEGIq4jX8J8vY=
Subject key identifier:   0D:8F:C7:44:3A:5B:D6:2B:08:A2:67:90:56:54:40:FC:16:67:8E:39
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018F877F2D33F102EFE24CBDEB31BB4E00C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
Manifest number:          0147
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: 4l8aF7hFCKKtBn_AFs3cQITdfCY.roa (hash: iqBYcVQJynF/LgZBvGOpyu0s1rZlYBhNmPWuGquJE4U=)
                          2: ArPmiaL9wsmukOM_54-ofrq479o.roa (hash: b1wf9M4SCu+LqCw0+A+FEUJKjcrs0KQ8XivK3bkOi9U=)
                          3: BNdkSfhBSecauy53ZOEypfpFi8Q.roa (hash: NED4WrJoQ9D9gYBmgW5s45DEmszMtbuVKTt5quSCAEg=)
                          4: OoW69NyaRuUkvjlFFyqz4FEKUio.roa (hash: olyZ5yEBAxKRaP8GbvLvmJbEW2bcXFbNyVengJRK17Q=)
                          5: RXTW6KgUVAG5XXEuoSJRUgSDpMY.roa (hash: m6+xN3v6xo7zYUmnHBQpGJa3ImwAzmDqKvUDgh1Fwww=)
                          6: RYnasgrYwDkMD19uXSf6pICv7sk.roa (hash: 7bDlcsBzEXU70zpKlu/x4t3mBrpt31CMd6Kye2aP8Zk=)
                          7: TYbQb6nAykgfZpTLM5CDZmBUTI4.roa (hash: 4OqfLK4hIuf3nSOYvcQYH+jYj9oCVMStY2FW5J9zU3I=)
                          8: YfxRM1pQzXJgmSyFt6Z1loIcSbs.roa (hash: FgjAnKtohpmDPNk6wuwxYKH/bRc9xoiYvwjYIEzXJAw=)
                          9: YkHapNEo4OI8xewnq6pxlJRfV1Y.roa (hash: M6yVqLT/Hjx4US+H2ZaQ18eaXeIIlgZ5G6tiV8pOI0I=)
                          10: ZFZgyzsJo23MF37jbPNPcIQrTaA.roa (hash: msZfx8GketImOIcaInpiRC8iBGYCd0XqACLHdjGc1Vo=)
                          11: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: yxs6P7rOap7GPG6trnJyAbvDyZ3ti/6fnBPOCKL/IHo=)
                          12: hFXW8ucpWcqqH0Sd0AO4hvg8IVU.roa (hash: i14z51V9n3TPIm/3TKcml+RZ2zG0pZbS6QKZguK2/qo=)
                          13: kLmTGMT64V_r9iBhmYXhsIylSZ8.roa (hash: AEMqYkuLgT/4w0cG/PGxXrZfXOh1RfljKomZGfDwYjY=)
                          14: lJAS6-eOP2BnAmOzhg1SL6DxUc8.roa (hash: l/voa6MDRIlBSmuaL1ka5Cuu1YrbnI8ntHxWRqNfJfk=)
                          15: mXI73v44nFPTfiknp49ki8ttAPk.roa (hash: ZmXiEfA96qYtsD10ZDLxVrNKIg+HHbXGUECKw9J2VGY=)
                          16: mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa (hash: pTybiO/cOmmh9UXeZyoO0jQVV8Q6QUG38IjtQmN2GPk=)
                          17: oDFrn-CFTzzRBAP-216O3A3lq_k.roa (hash: W96OJAVsIFcAHZZdYOXv3QUF+P2Ivu+eSjEVzaww7wE=)
                          18: sBsS28tJy9Sqsfc5WcAZo8J-YP0.roa (hash: JSoKf8HfVEMVYyu1HGyhp+rG1JDqq62FPV7i2Ig9wO4=)
                          19: t71YI4KSbaGkCmB-MEJdsGSfQaA.roa (hash: R/e5LF3J+CRodiuFWfzBq7cj+1ew0e07ualksOT+5xk=)
                          20: xzspfY1QWHE1JPH-taJyuAoGc-c.roa (hash: AD/fxJjkgWm/d/W6hET6cPSEDrtngFcwUvDOW/a1S2Y=)
                          21: z9jSaQooi48ciojI0DNXMjQGP9U.roa (hash: wBIZ9guDmNTfThhuSKlzu6dMR5P4osh8vKBmfEsH9Ys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2d:33:f1:02:ef:e2:4c:bd:eb:31:bb:4e:00:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=0d8fc7443a5bd62b08a26790565440fc16678e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:10:28:21:97:2e:be:0d:ea:b2:80:75:c8:
                    df:eb:fb:bd:a4:bb:d1:53:a6:50:93:fc:89:77:a0:
                    0b:b9:f3:9c:97:b0:5f:ab:4b:c4:b8:21:3f:1b:7f:
                    5c:71:0a:61:f9:ae:0b:61:4d:ae:e8:41:b2:d8:89:
                    3e:af:2c:9b:fb:1e:67:e6:7e:21:f3:fc:9a:3a:1b:
                    12:16:c2:4f:fa:5b:15:23:82:73:78:af:d0:9b:ba:
                    15:44:9b:10:cc:9e:b1:59:69:85:61:9e:aa:19:42:
                    63:ac:7e:65:f7:fd:8a:56:3e:a8:20:1a:1d:fe:1c:
                    0a:70:8b:67:b4:0d:d5:d1:ac:c6:f5:d6:de:b2:16:
                    e5:40:dc:2f:7c:66:f6:ef:05:38:c2:b4:0f:0e:75:
                    5e:26:0d:61:b8:97:2c:a0:5a:ab:53:74:cb:58:05:
                    59:c4:74:45:65:a0:ce:11:70:95:23:86:40:2a:06:
                    91:6c:64:c6:d7:a4:0a:2f:b3:30:7f:42:b7:45:f5:
                    63:04:b6:86:b8:39:55:61:68:23:73:38:cb:53:70:
                    19:e9:5a:9e:6e:f2:3e:41:92:cd:cd:84:f1:7c:fb:
                    39:a0:67:42:3e:d9:64:90:da:bd:df:35:b7:cc:94:
                    b5:09:08:e6:be:7d:60:79:16:73:be:1f:95:67:bd:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:C7:44:3A:5B:D6:2B:08:A2:67:90:56:54:40:FC:16:67:8E:39
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:78:c6:34:a0:32:96:c4:1f:98:6b:43:5e:18:95:f5:ac:
         09:ac:12:71:d7:60:ff:89:2c:c9:db:1a:2a:26:1f:2c:35:7b:
         13:14:9f:a6:73:d5:88:6b:74:87:34:38:23:41:d2:03:04:5d:
         b9:d9:f3:b2:a1:43:ae:e8:71:4c:ff:d3:98:f6:bf:a8:40:ab:
         aa:c7:bd:28:61:77:c4:8f:d0:0a:b1:43:4b:b9:ea:9e:38:5c:
         78:d8:82:10:2d:e0:01:ed:6e:26:c8:fa:10:6e:57:43:de:44:
         b3:f3:46:96:93:ae:19:08:1e:05:61:7f:7e:28:14:57:51:1a:
         86:65:81:ff:d6:e8:80:8e:90:06:1e:b0:19:c7:b5:46:41:c7:
         6a:d8:5b:eb:42:50:90:6d:aa:4a:7a:15:3f:55:8c:68:2d:c9:
         5d:44:53:73:2f:56:e3:f2:08:57:96:65:d9:a7:f5:30:48:11:
         de:dc:b3:be:49:e7:d1:88:f8:0c:20:aa:c9:fa:ba:87:44:3a:
         91:f8:ce:7d:4f:84:c6:d1:70:27:ca:c9:49:5f:14:ba:30:e0:
         e8:f7:ee:ad:74:2d:da:ea:1e:85:f1:90:93:b2:a1:cf:fc:a2:
         08:ee:bc:c9:19:a9:16:43:cb:b9:e1:37:48:46:c5:39:46:19:
         19:cf:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:31 2024 by rpki-client on console-fra.rpki-client.org