Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          18WLxTIjDwhv/fHNMxV907DzS62gmSC8pI9ZicHWH1I=
Subject key identifier:   97:48:57:A1:56:D6:6E:2E:32:9E:1F:58:DC:84:46:07:C3:EE:16:77
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       018F57049C01074F7D075D802D39849E5F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          0CEF
Signing time:             Wed 08 May 2024 07:04:30 +0000
Manifest this update:     Wed 08 May 2024 07:04:30 +0000
Manifest next update:     Thu 09 May 2024 07:04:30 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: L6JdVK7XbKlfmXNC0vtDzWiKTsEKQGhQM+W8nNcVNC8=)
                          2: VxDiFtAsxhBCLmbbvBbFf_-C9Lw.roa (hash: pR9B73mBNQFOUZLB9e4rw20Ts1DCg9l5+xzR4pK8bS0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:04:9c:01:07:4f:7d:07:5d:80:2d:39:84:9e:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: May  8 07:04:30 2024 GMT
            Not After : May  9 07:04:30 2024 GMT
        Subject: CN=974857a156d66e2e329e1f58dc844607c3ee1677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:89:20:31:db:4e:62:fb:0b:36:ee:85:1f:
                    1c:d3:1d:32:ce:2e:48:c7:eb:f1:dc:f5:7d:8a:9f:
                    9e:36:c1:b4:d9:0d:fc:3a:be:7d:7b:31:97:0f:a9:
                    34:e0:47:64:91:58:d0:f9:e9:79:76:25:a3:7f:43:
                    bc:6a:eb:f4:e7:a3:57:57:62:d5:b4:ef:40:76:57:
                    3e:47:98:08:e6:d2:f1:7c:0f:5b:06:82:93:ea:3e:
                    06:03:8e:42:d6:18:d2:41:43:51:9f:26:77:be:7e:
                    9d:0b:08:a8:22:65:75:59:ab:4f:0e:af:2c:d0:42:
                    de:d2:fa:5f:c7:fe:07:04:15:5a:ac:7d:2e:9b:a5:
                    42:76:45:1b:d2:0a:11:52:12:83:d3:5d:c3:c4:f7:
                    25:7c:2f:9a:dd:2a:39:80:1e:15:85:4d:bb:bb:95:
                    ac:f1:0a:b9:ad:e3:8b:db:fb:a3:6f:4d:57:45:db:
                    f4:55:e3:77:94:d2:29:2a:f1:dd:17:24:9d:5d:d0:
                    20:c5:98:11:51:6d:45:d3:d7:57:16:b6:85:e2:87:
                    65:d6:8d:2c:0d:b7:92:c1:5f:cc:8d:42:7a:9c:39:
                    70:98:04:a5:95:f6:87:a5:04:d9:40:94:26:7e:b6:
                    ac:c2:eb:5d:66:af:de:2e:a1:f5:e2:57:5e:30:bc:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:57:A1:56:D6:6E:2E:32:9E:1F:58:DC:84:46:07:C3:EE:16:77
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:33:f6:4d:70:7d:11:26:71:fa:61:d9:e0:cb:bc:20:b1:
         c6:67:8e:62:fa:74:0d:a4:a5:cd:b5:1f:64:47:29:f2:b8:d1:
         2e:97:b9:4f:4d:47:c2:14:ce:54:39:e1:e7:54:c6:4f:02:80:
         ac:40:f7:34:e8:e7:3a:62:bf:5f:53:43:9b:ec:5c:87:e0:e2:
         38:91:04:ec:06:75:21:1f:d0:92:27:c2:23:1c:67:99:97:d2:
         ae:8e:df:8e:af:5f:55:33:a6:99:71:0b:25:ae:ae:c7:2c:64:
         d2:d6:84:a6:a9:4b:a7:5c:b5:7b:1a:a0:88:4d:3e:63:07:b4:
         46:16:aa:ca:25:b5:54:ca:0b:c1:5f:23:38:30:2a:a4:4b:73:
         54:5f:2e:ba:62:50:5d:0c:d9:1d:6e:94:5c:bc:45:02:b2:43:
         aa:bd:9c:98:b3:db:52:50:23:0d:c5:b1:f2:6e:dd:59:f7:99:
         d1:8d:a4:c6:14:03:73:8f:ce:29:a6:5e:49:0a:da:5d:af:8e:
         11:71:aa:22:07:e4:28:1c:a3:e2:4d:f1:49:bc:01:d1:0f:63:
         3b:e8:f6:54:04:41:ec:a0:73:c1:2f:27:b7:1d:a0:51:f5:66:
         09:c3:9f:43:fc:7d:f6:ac:6c:a4:2d:19:35:9e:9a:d0:da:63:
         3c:d6:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:24:15 2024 by rpki-client on console-fra.rpki-client.org