Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          eDxeDIjfqJ2VkAtb5PXfMMMmZZJVAczZfTJCfY3nzPM=
Subject key identifier:   38:AF:C4:90:59:B8:7D:D5:B1:25:8E:A4:3C:97:E6:55:52:96:31:55
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       018F4D5A7C2858F1FEECD2F0EE6CD731414B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0748
Signing time:             Mon 06 May 2024 10:02:06 +0000
Manifest this update:     Mon 06 May 2024 10:02:06 +0000
Manifest next update:     Tue 07 May 2024 10:02:06 +0000
Files and hashes:         1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: 2wCMAN4QLMwzq7yZK/BqTVBnnotmbv0x32nmqoDJmcY=)
                          2: w3mN3ZqUlBV_Wf5qkfs4nBEp5vY.roa (hash: FFvI1nc3nPmb8RCgg17gmFotC7Aoiu8jeUZc12RyqmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:7c:28:58:f1:fe:ec:d2:f0:ee:6c:d7:31:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: May  6 10:02:06 2024 GMT
            Not After : May  7 10:02:06 2024 GMT
        Subject: CN=38afc49059b87dd5b1258ea43c97e65552963155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:58:37:d5:d7:be:99:3e:08:96:27:a3:84:
                    1a:7a:ff:96:8a:89:f4:bb:17:4c:3f:f7:e2:46:f9:
                    b2:a2:ad:d5:18:a3:85:16:17:c9:24:30:91:db:03:
                    bf:1f:48:db:61:49:81:fd:c7:4c:bb:ac:fb:f7:48:
                    9c:b6:1e:8d:c7:e6:df:e2:c6:d8:45:dd:09:00:75:
                    9f:51:a4:4b:74:d0:53:cd:de:bc:01:45:7b:6a:9e:
                    6a:22:cb:60:7e:79:09:59:c0:22:eb:5f:e0:78:1e:
                    5e:d4:4e:18:66:a7:58:35:f6:1c:73:bc:8f:39:12:
                    19:b2:dd:8c:c7:ca:bc:9b:80:3e:7f:cb:79:1c:d6:
                    e7:d3:f6:4a:b7:04:2f:2f:34:af:9f:d2:09:d4:52:
                    97:01:80:ec:54:c8:36:10:e6:eb:4b:c8:3f:0d:c8:
                    9c:81:41:45:90:46:c5:da:da:7c:00:c9:ff:a2:8c:
                    7e:58:43:2a:12:18:db:30:ed:82:46:64:f9:a7:73:
                    7c:cf:0e:f4:d6:29:a7:27:9d:ec:be:85:fb:9b:fa:
                    b1:ca:94:78:ea:00:45:cb:2d:da:e5:e9:8d:de:c8:
                    22:10:d6:60:8a:6d:85:b3:17:5a:e3:6d:b8:63:29:
                    2e:9c:40:dc:8e:98:7a:0a:b1:22:f5:3d:58:8b:b4:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AF:C4:90:59:B8:7D:D5:B1:25:8E:A4:3C:97:E6:55:52:96:31:55
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:34:12:be:8c:2b:5d:03:c7:2c:e9:97:a7:10:44:43:31:
         79:8e:df:03:66:1a:56:0e:49:e8:c6:bd:e7:c9:b8:02:e9:31:
         2b:86:fa:81:62:74:d5:c6:40:05:ec:76:3a:b9:d7:67:9c:3d:
         8d:15:e6:35:73:b1:2b:6c:53:72:dd:89:2e:52:8a:38:ef:f5:
         70:86:51:f4:c7:f6:00:3a:cb:8f:3e:18:8e:53:7f:fe:52:95:
         69:b5:1a:51:5f:a1:49:24:6d:b5:c9:18:1d:51:fc:df:5f:9f:
         56:71:68:71:aa:fc:98:21:01:5d:d3:0e:7c:ac:81:42:ae:c9:
         1f:aa:b8:77:6e:34:74:7f:79:2c:6a:72:26:6f:bb:3f:ef:ea:
         75:c1:ea:cc:6e:df:bd:37:9f:61:cb:fb:c1:b3:47:21:0c:89:
         c9:27:fa:d7:df:08:8b:98:d3:85:7f:fe:01:b7:8c:a7:69:d0:
         6f:f6:2f:03:81:ce:b3:21:e4:33:c3:a2:ec:3a:e1:0b:f2:de:
         e2:6a:4b:42:51:b7:4e:a2:3a:34:68:c2:2e:cf:4f:da:bf:50:
         a1:e5:55:c8:fc:34:65:df:60:10:91:26:1f:38:7a:44:aa:dc:
         cf:1c:a0:3a:b5:b2:10:17:e6:63:48:2b:80:ec:5d:2d:66:f9:
         5f:d7:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:53:34 2024 by rpki-client on console-ams.rpki-client.org