Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          1h3hjD4m1NLmTlw9llgStvzE4vT3KAlWpoMKL/zVhDw=
Subject key identifier:   F3:98:0C:DE:80:D0:11:B8:15:07:21:AF:8A:49:05:D3:40:9B:83:ED
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       018F45A276FBE7D1C6077829FF55F583EEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          03BA
Signing time:             Sat 04 May 2024 22:03:46 +0000
Manifest this update:     Sat 04 May 2024 22:03:46 +0000
Manifest next update:     Sun 05 May 2024 22:03:46 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: CD+bzr1QqJEHNM79QoEeM/4rTLHfMl9T4fNi+j0Mt5I=)
                          2: HLVapS_AKek3POm0fo-8BW-p8FI.roa (hash: p1vlpQiWzZgoA3lWGy/XVGgxryH5/dxtzNAa9n5MlrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:76:fb:e7:d1:c6:07:78:29:ff:55:f5:83:ee:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: May  4 22:03:46 2024 GMT
            Not After : May  5 22:03:46 2024 GMT
        Subject: CN=f3980cde80d011b8150721af8a4905d3409b83ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:f0:ed:87:3a:71:e2:83:72:7e:d4:2a:c3:
                    d9:cb:36:54:8c:03:43:15:bb:af:f2:c6:7d:7d:22:
                    5b:45:7c:8b:a0:87:72:4b:43:7e:24:43:26:bf:75:
                    90:8a:dd:63:5c:42:43:98:7b:85:09:bb:46:27:46:
                    33:bb:c4:4f:8d:97:09:79:96:57:d9:bc:19:1b:b4:
                    87:e5:6c:fe:a4:ed:95:d6:fd:cf:2c:b8:ac:ff:ae:
                    9b:31:94:55:21:09:56:39:09:2e:c5:e2:12:de:38:
                    13:3f:40:37:48:97:38:01:cd:96:4e:35:0d:90:5b:
                    5d:52:c5:58:c1:18:2b:8f:29:de:54:1d:4c:29:13:
                    4a:bc:2f:a9:9e:d2:ab:87:09:a1:18:35:e7:4a:33:
                    2a:ca:38:53:46:b4:28:99:3c:34:be:df:2a:7b:c6:
                    60:fa:ef:37:d6:fe:79:f6:7e:ff:b5:fc:45:34:75:
                    c3:01:5d:f5:7f:78:0f:2d:35:d6:4c:f6:d0:44:82:
                    61:5e:f0:69:cf:86:93:5c:de:a3:ff:0e:31:14:e6:
                    01:f9:1b:0d:a7:ba:5a:60:72:fa:0d:10:6b:e2:a4:
                    b8:87:28:1c:cc:21:de:a9:14:e6:fa:f3:e1:e3:9f:
                    49:25:62:0a:fe:c0:03:90:6b:52:8c:61:2a:9c:98:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:0C:DE:80:D0:11:B8:15:07:21:AF:8A:49:05:D3:40:9B:83:ED
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:7e:04:4e:27:65:6a:4b:7f:83:74:80:b3:50:72:34:c6:
         aa:f5:aa:e0:0a:f4:c8:9e:cc:6f:c5:e4:98:27:75:34:0b:dc:
         1d:89:2d:78:7e:cd:c2:76:22:59:81:13:4d:42:94:15:37:9b:
         03:9e:1c:f8:af:1f:60:52:c9:be:55:00:83:d8:9c:34:27:ea:
         46:42:6d:3b:cc:42:3c:69:83:56:fd:33:cf:7e:cf:55:f2:59:
         a5:ef:3b:72:cf:23:08:a3:76:c1:c5:5d:47:15:f6:5b:5e:f6:
         99:f6:df:89:98:4e:25:6e:1a:b7:f6:ab:12:6d:d3:f8:54:b6:
         79:ea:93:cc:eb:9e:a0:62:16:0f:25:6b:9e:f9:73:08:18:c1:
         9f:e4:de:84:db:c8:50:ce:49:6a:b2:ae:30:46:38:d5:b9:10:
         62:75:b5:a2:a6:bc:ca:b7:c8:d1:de:c2:f1:71:8c:ca:a7:81:
         f5:eb:19:9c:25:ad:45:fa:4f:7c:15:b1:5f:3c:85:cc:6c:16:
         a7:87:b7:a9:79:28:bd:ce:70:c2:a2:da:25:ef:da:d9:16:63:
         ba:aa:99:82:b4:d8:f8:b8:44:ac:d7:cb:42:30:78:e0:9d:49:
         5e:85:79:c0:5e:2a:10:59:e3:32:ed:f8:91:99:8b:31:c7:21:
         5f:0b:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:39:01 2024 by rpki-client on console-fra.rpki-client.org