Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          DAe2VQXHBncZm3yrA87Ufr1wSFXKVjelBsd4kzW7x9c=
Subject key identifier:   88:42:12:B9:61:C3:C6:4D:2B:B9:50:5B:CF:33:EB:EB:05:A8:4F:9A
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       018F836E5F4B5368AD02EA603A2C34D1E5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          1185
Signing time:             Thu 16 May 2024 22:03:19 +0000
Manifest this update:     Thu 16 May 2024 22:03:19 +0000
Manifest next update:     Fri 17 May 2024 22:03:19 +0000
Files and hashes:         1: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: s8hOAaiePFpCyvJs09LOJXgBXOLwv2Ci3dlFfVsWxjc=)
                          2: ND7ELQRcfjhY4m13zhjVX7-HK2A.roa (hash: DNq0YViAtTotD/I2KnxdTjDVH8BkUCSyF9Qdr30nBNY=)
                          3: g1_1DJnYO4bOWIQtBDY_J-k7xFk.roa (hash: jWrUiduLF5hvuATStlPCBqYHsCAY3ClQMUx0iX5toHc=)
                          4: gAdUh56npv0zLxWS57QxwADWSWQ.roa (hash: gyLWoebpiIwUu4/avZ6DNQG6N1Ic7EsMvF9Ys8Kux/A=)
                          5: jD9hcW9TbeC3qLeJHoOFHC1ygBc.roa (hash: J6R+gG7fNo9OiReVg3IZUNndIgyVgZuc7iQD7HdkMSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:5f:4b:53:68:ad:02:ea:60:3a:2c:34:d1:e5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: May 16 22:03:19 2024 GMT
            Not After : May 17 22:03:19 2024 GMT
        Subject: CN=884212b961c3c64d2bb9505bcf33ebeb05a84f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:87:47:2c:21:18:ab:c9:72:34:d2:0d:36:
                    63:40:aa:3d:ec:b9:4f:7f:a3:50:3b:7d:08:b3:e3:
                    cf:e5:ce:6a:b4:2c:49:98:a6:43:a9:db:10:3b:97:
                    68:ba:9c:7c:a0:b5:cf:7b:88:10:92:5d:f6:78:48:
                    43:8e:c9:69:e3:92:78:d5:e0:08:07:d3:29:59:09:
                    e5:50:72:ee:7c:5a:2a:f4:8c:af:b9:42:9e:8b:09:
                    64:45:d2:a6:f5:8a:d7:14:29:3e:95:b5:8c:b1:11:
                    89:2e:97:38:e2:a0:2d:e6:4d:c2:7b:1c:b7:30:82:
                    56:1e:48:5b:85:54:a6:ba:20:e9:05:43:4d:93:5f:
                    75:9e:53:2c:5a:0c:fa:27:01:ea:8a:30:d8:59:ac:
                    1c:89:4e:21:b3:a3:ce:1b:74:d2:6d:26:ca:cc:21:
                    11:b0:5f:4f:6c:54:e2:3a:1d:46:33:49:a4:59:f5:
                    65:d3:a0:ed:02:a4:4b:c2:78:f0:0d:61:9e:c0:07:
                    97:fc:0e:9b:47:06:8b:32:31:e1:9a:87:dd:5b:91:
                    c6:7c:dd:b6:86:69:64:4b:cc:b2:06:21:8d:0e:7f:
                    d2:a5:e6:73:ad:61:69:e7:01:4f:71:75:2b:f1:0a:
                    6d:8d:3f:df:a4:76:36:f6:46:6c:7d:2a:de:25:d2:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:12:B9:61:C3:C6:4D:2B:B9:50:5B:CF:33:EB:EB:05:A8:4F:9A
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:7b:e1:85:d4:3f:15:ec:8b:38:ff:f1:a8:56:e7:ca:90:
         dd:d4:5e:58:ab:36:27:bc:67:9b:a4:6f:1a:cf:8d:00:f0:99:
         f6:2c:71:bf:4d:55:e8:45:29:ff:c4:a7:66:ca:f9:dd:2b:06:
         38:ba:33:5a:2a:ec:b4:39:1b:7d:f2:8b:c0:14:2e:c4:f8:5e:
         15:f1:03:d9:4d:b4:b9:36:f0:0f:3e:24:0a:e7:f2:89:27:14:
         38:27:de:a6:39:f8:d5:bf:eb:e1:d4:1c:03:1b:6f:b9:cf:29:
         a3:f6:1c:11:c6:c4:cb:5b:7d:34:e6:9d:a7:7d:e5:50:9d:df:
         d3:94:73:0f:d3:99:8e:c0:eb:01:0f:6a:1f:03:12:e3:0e:ed:
         07:cd:5f:e3:bc:a8:a1:48:5e:48:7c:ae:d8:52:3e:c4:f0:50:
         4d:17:14:25:4d:3a:59:5b:95:47:48:03:f8:e7:2a:0d:94:3c:
         80:91:75:6b:1a:c5:68:da:5c:35:13:a4:9a:07:6f:ed:d1:88:
         c8:04:12:b7:ad:92:35:7f:44:42:ba:f6:67:7b:22:e1:68:06:
         3b:fd:f1:10:1c:85:1c:c0:c4:51:e6:2e:df:97:ca:e3:8c:5e:
         a5:e1:9b:a3:2a:3b:cc:c9:5d:60:86:4a:a2:26:b2:6b:2c:eb:
         df:0e:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:23:59 2024 by rpki-client on console-fra.rpki-client.org