Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File:                     blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier:          BskMCq0HlxtnP7xIIYFRG+H1beEr28rSVGqq47pPQiw=
Subject key identifier:   7D:51:F0:D4:55:78:E3:8F:65:B0:F7:30:44:A1:24:DF:6E:88:34:CB
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer:       /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial:       018F874B0E4BD054F6F2B7CBD382B17E4B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number:          02A5
Signing time:             Fri 17 May 2024 16:03:14 +0000
Manifest this update:     Fri 17 May 2024 16:03:14 +0000
Manifest next update:     Sat 18 May 2024 16:03:14 +0000
Files and hashes:         1: P4_gDfMkjCoId6HlRxGThmjH5o4.roa (hash: l6ir1kbZfekZw0MvDDfiUi5Dk4qFevBBsZoXjcIdClQ=)
                          2: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: kN+mLTJzDMv6HXoDOeN+soUq+rP/DIC0stAnGsJux7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0e:4b:d0:54:f6:f2:b7:cb:d3:82:b1:7e:4b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
        Validity
            Not Before: May 17 16:03:14 2024 GMT
            Not After : May 18 16:03:14 2024 GMT
        Subject: CN=7d51f0d45578e38f65b0f73044a124df6e8834cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:b4:04:a2:01:5c:cf:f9:6e:0d:71:53:2d:
                    9c:ea:69:74:d1:1b:62:23:d0:4a:37:7c:40:4e:c5:
                    c3:1b:b0:e6:11:82:c0:a8:be:5a:a1:39:dc:63:d9:
                    08:05:26:6e:a9:b0:b8:f9:7c:55:ba:a3:0d:a4:d6:
                    cf:4f:fa:83:95:6c:6f:25:3d:79:39:88:08:73:3b:
                    a4:41:96:3a:e1:94:de:60:53:2e:d9:25:85:99:25:
                    d8:4c:19:da:d5:a9:92:67:25:ea:25:08:d7:ac:f9:
                    9c:e2:5b:68:41:69:8a:ea:8d:1d:81:cc:91:1c:34:
                    d4:ec:4c:0f:e4:91:1b:6d:8d:0b:b7:70:ed:06:68:
                    07:ef:ea:f4:19:6e:f8:0d:e9:e1:7f:88:f4:17:c9:
                    b0:65:dd:17:25:a1:2e:7d:76:6f:2a:af:18:5b:45:
                    c9:81:fc:64:f0:77:dd:b6:78:c3:a0:ed:58:cd:52:
                    5e:16:9c:0d:e0:64:73:6b:d2:71:67:f2:f1:42:5a:
                    33:55:e6:87:fe:47:8f:f0:31:85:c9:69:ef:db:02:
                    e3:ec:3a:9d:d8:df:31:31:62:58:30:ba:ab:26:36:
                    f2:ac:53:d0:40:e6:20:f5:13:0d:ed:de:d8:f9:ab:
                    89:2a:92:d8:7a:b8:6e:8d:2e:6e:61:cf:f5:f1:ec:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:F0:D4:55:78:E3:8F:65:B0:F7:30:44:A1:24:DF:6E:88:34:CB
            X509v3 Authority Key Identifier:
                keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:61:d3:26:cd:97:38:4c:3a:5e:21:08:d6:3c:f9:b1:ca:57:
         ab:6b:15:06:b3:62:60:c6:24:31:bf:56:13:c1:83:95:5b:44:
         fa:e1:2b:0d:e3:51:21:f3:65:72:c7:59:18:b5:9c:b6:bc:6e:
         05:1f:96:98:54:61:65:a1:6e:e0:d6:a2:18:7e:45:ab:ca:bc:
         b8:a8:ba:fc:4b:b7:d3:25:29:5d:7e:c0:d3:82:9e:fc:73:eb:
         da:14:24:72:5f:36:63:76:af:32:88:6c:8a:22:5c:fa:90:45:
         38:1b:73:16:f7:50:d9:d8:ec:72:f2:74:59:cb:0e:a1:b8:a6:
         be:16:6c:b2:6f:64:b3:80:fb:55:a2:68:dd:72:14:20:7e:1f:
         a3:2a:84:71:74:65:f1:11:b1:2e:01:9e:e6:57:41:3b:49:76:
         6d:d6:d7:d4:e7:78:7c:20:43:66:ac:d0:92:a8:cd:bd:cb:3b:
         85:87:79:84:7c:0d:45:6a:38:1b:58:06:6a:17:1c:ac:5a:16:
         72:fd:e7:09:95:88:2a:7f:fa:d7:c1:f2:73:17:8c:5f:36:38:
         43:04:7e:c9:bd:54:8b:03:a1:d5:0e:4d:b0:6b:c6:b9:0b:d0:
         6a:6d:ea:d7:7d:0c:c2:c4:af:7f:d0:8f:04:69:2e:5a:8c:2e:
         d9:72:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:35 2024 by rpki-client on console-ams.rpki-client.org