Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File:                     BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier:          L5CMlnAslbv6x4Rew9FjaL6V+44jPtGLYl/NFz11fiE=
Subject key identifier:   CF:F1:40:0C:24:DA:18:2B:81:A6:67:1A:A6:43:B9:DE:52:46:F3:A6
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer:       /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial:       018F57DD67BCAD4374979CF6F34E5E6FF8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number:          115D
Signing time:             Wed 08 May 2024 11:01:18 +0000
Manifest this update:     Wed 08 May 2024 11:01:18 +0000
Manifest next update:     Thu 09 May 2024 11:01:18 +0000
Files and hashes:         1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: XglvK+DK3smabB2vhNHQ3KXZnuf4Cc9Aw/vD5CsbYpE=)
                          2: zkiX-qKG36HzVecQXyksTqLIrW0.roa (hash: +eiHmZ0L9XXVWYdW4ydfyuSs4EPJlkYwkbTQPrlzNhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:67:bc:ad:43:74:97:9c:f6:f3:4e:5e:6f:f8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
        Validity
            Not Before: May  8 11:01:18 2024 GMT
            Not After : May  9 11:01:18 2024 GMT
        Subject: CN=cff1400c24da182b81a6671aa643b9de5246f3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:4c:42:a3:47:b5:b9:a9:d8:ed:99:97:c4:
                    46:6e:d1:b9:b1:d1:ea:88:50:66:fc:69:c4:1a:2c:
                    9f:dd:0a:be:09:bc:1b:4a:bb:62:51:1a:ce:ed:f7:
                    4f:b4:ec:5e:82:57:13:af:89:8b:5e:b6:9a:17:74:
                    3c:6b:c6:dd:ae:17:6b:90:fa:4c:12:bd:73:7e:7e:
                    88:b0:d4:74:83:0a:fe:32:11:dd:7a:98:33:5d:22:
                    f0:fc:16:4b:a1:38:d9:69:dc:ef:19:a2:99:2e:a1:
                    4b:27:f7:a0:fb:d3:3f:b6:ae:de:39:5f:5d:09:58:
                    f1:f7:e5:d7:c3:f4:f7:08:a1:b3:92:33:96:27:3d:
                    b0:0f:f2:43:60:c8:7b:16:64:61:2c:f4:a9:56:8a:
                    64:57:4d:6e:f9:2d:a7:88:94:8a:e1:f5:7c:4e:40:
                    cd:95:87:d4:3b:80:da:c0:28:01:03:95:6a:33:4f:
                    10:91:c8:69:1f:6f:31:8b:18:84:50:c9:4d:59:ca:
                    ad:82:b0:ef:73:5b:c1:a4:97:7b:46:1a:b8:17:fc:
                    50:ea:39:c8:08:fd:02:cb:de:ce:fc:cf:92:ac:ec:
                    8c:88:29:ae:c0:38:6d:82:bf:d6:08:6d:e0:85:eb:
                    a4:92:59:02:bf:34:b3:49:ca:c8:83:7d:1b:9c:9e:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:40:0C:24:DA:18:2B:81:A6:67:1A:A6:43:B9:DE:52:46:F3:A6
            X509v3 Authority Key Identifier:
                keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:b2:99:2e:e0:7d:06:1e:81:69:da:57:04:1a:68:6c:1f:
         c0:2d:5a:66:fe:be:b6:e5:8c:c9:b5:28:da:7b:c0:0e:71:a9:
         ad:e1:75:b4:34:ec:ea:c0:d2:a9:5d:72:24:83:b2:3a:11:cc:
         a1:92:d0:b0:7e:57:01:70:37:60:cb:5e:75:0f:9d:99:e7:55:
         89:e7:95:33:8e:fd:a4:26:6b:d2:c7:d0:1c:b6:95:d8:a2:67:
         1f:0c:05:8d:66:4d:f3:f8:5c:e6:79:53:12:f8:4f:91:a5:97:
         de:fe:fa:91:00:33:76:a3:fa:56:b4:05:91:d6:36:35:8f:11:
         ab:a1:31:bc:8f:3b:66:06:9a:59:00:a4:a7:ee:09:ad:a9:85:
         f1:ad:54:27:4c:3a:e8:28:dc:f4:fc:d6:cd:02:85:4a:73:db:
         7f:f7:26:69:51:78:b6:c0:8a:c9:cc:80:1a:5a:59:10:c2:71:
         a8:a0:c6:04:36:f6:f8:b3:6c:71:83:78:5f:87:43:d5:6a:cb:
         19:f4:fb:53:94:c1:76:98:ba:be:d7:41:7d:8d:b4:30:48:2c:
         b6:48:e0:9f:46:f8:44:1b:a8:4d:3e:da:3b:3a:51:c7:91:47:
         9e:ef:0e:65:ab:80:15:18:5a:76:0e:aa:fc:dd:48:7c:7b:40:
         19:f3:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:23:33 2024 by rpki-client on console-ams.rpki-client.org