Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File:                     bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier:          0UfgX0mj1NR0UY7YCX6GOgY2m2wDJXBGuIdtBswDrfQ=
Subject key identifier:   D8:57:38:33:76:7A:4F:E7:44:D6:5F:CF:77:07:56:11:B5:A8:BD:43
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer:       /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial:       018F877F4C22A5A01724FE569420BFFFDF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number:          0130
Signing time:             Fri 17 May 2024 17:00:17 +0000
Manifest this update:     Fri 17 May 2024 17:00:17 +0000
Manifest next update:     Sat 18 May 2024 17:00:17 +0000
Files and hashes:         1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: VOKncAbIViymxJHcmJMvLjpS8oZ3oiNY4aLddkB5/Kw=)
                          2: oiVF5VSk_xnRYuv6VQGND_rgH14.roa (hash: /NnAcnSeAPwVnb3WvC5kC8Q29h7iaHWEWXwyESJ2HEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4c:22:a5:a0:17:24:fe:56:94:20:bf:ff:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
        Validity
            Not Before: May 17 17:00:17 2024 GMT
            Not After : May 18 17:00:17 2024 GMT
        Subject: CN=d8573833767a4fe744d65fcf77075611b5a8bd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8c:a8:6b:58:f0:20:32:3f:69:e4:f1:5d:aa:
                    63:92:da:5b:65:55:e5:96:3b:7c:79:e5:93:23:d5:
                    ec:76:86:3b:9a:2b:72:d0:2e:b3:87:30:79:60:30:
                    f4:30:d7:c7:48:98:e2:f3:24:d9:39:b8:9f:6a:92:
                    2c:38:1f:7a:ae:d9:94:97:ad:b7:1a:bd:5f:e7:f8:
                    df:4d:4a:cf:9b:f4:fc:af:98:99:b6:19:b2:cb:2c:
                    75:bc:9a:95:a5:c9:f8:de:9e:0d:88:fe:2a:4a:06:
                    bb:73:de:7b:83:ac:a3:cb:26:40:3c:9a:e6:5e:ab:
                    4d:33:79:38:44:ac:c4:67:38:09:ef:a8:15:2e:e8:
                    ea:af:aa:48:b6:86:7e:ae:55:10:13:3f:b1:4e:e1:
                    db:0a:e4:a0:9a:58:ac:85:66:fa:e7:0b:6c:df:07:
                    e6:99:ac:7b:da:f9:f9:c1:f0:b9:8d:a0:e6:70:5a:
                    76:ca:7a:71:64:af:4f:f9:a2:f6:1b:eb:26:6e:eb:
                    3f:ae:19:c3:a7:e3:00:0f:ed:f0:44:52:8b:0f:fc:
                    48:d4:19:ce:90:7e:1d:e1:bf:e1:25:21:1d:bd:84:
                    bf:e6:5f:f1:eb:ee:70:4e:1e:ed:f9:b4:e7:fd:d1:
                    9d:ac:f8:6a:17:ac:d7:bd:86:fb:3a:49:4f:6f:a7:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:38:33:76:7A:4F:E7:44:D6:5F:CF:77:07:56:11:B5:A8:BD:43
            X509v3 Authority Key Identifier:
                keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:35:f4:d4:33:fa:6b:d8:1c:e7:55:a4:2a:db:b5:2f:34:
         00:ca:a7:ec:a0:b3:45:87:7f:82:ef:1b:96:9a:a0:56:0c:bb:
         59:dd:88:0e:82:69:91:ec:4f:e3:d3:1a:a7:fe:ce:56:01:da:
         da:dc:68:9a:e1:02:eb:90:40:ba:61:2f:e9:e7:28:73:73:83:
         0e:36:2b:58:f4:b8:f1:71:a2:42:fe:5f:a6:46:5f:da:a6:21:
         dd:82:01:e5:c6:68:f2:da:fb:89:91:e0:02:99:6a:7a:3f:e0:
         aa:b1:d5:fe:54:1d:15:f3:9f:41:99:47:12:e0:16:d2:ec:c2:
         5a:b8:b5:65:bc:8d:36:be:10:65:d5:df:96:d8:10:7b:37:85:
         ee:d8:ea:f5:a8:97:22:f1:10:3a:17:79:cf:f2:67:91:43:9a:
         3f:cb:dd:e7:4d:d8:e3:dc:57:64:e6:30:9f:97:8b:f4:af:45:
         9b:33:45:d5:00:4b:c8:a9:a0:54:fe:bc:83:b7:21:31:3b:e5:
         93:c2:55:c0:83:42:0a:da:96:35:06:4a:77:45:3b:dc:75:c7:
         c7:e2:36:03:aa:78:c9:65:d7:40:f5:04:92:0d:3d:77:d5:fa:
         9a:b0:f0:dc:86:1c:7a:6b:e7:89:14:fe:d7:a0:16:76:fb:c7:
         f3:0f:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:08 2024 by rpki-client on console-fra.rpki-client.org