Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
File:                     BNm8gopWawavTXZd-12lvB12xyU.mft (raw, json)
Hash identifier:          2BS1MzFyjFuZB9+/QC6/QrKpSl7c4sTV7/yrGgehH8E=
Subject key identifier:   D8:2B:A9:4E:85:4D:CD:3B:AD:49:BA:5E:BD:04:29:D9:08:18:F0:05
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Certificate issuer:       /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial:       019052EB19EC4C5704289EC2538C9A577BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
Manifest number:          11E8
Signing time:             Wed 26 Jun 2024 05:00:57 +0000
Manifest this update:     Wed 26 Jun 2024 05:00:57 +0000
Manifest next update:     Thu 27 Jun 2024 05:00:57 +0000
Files and hashes:         1: BNm8gopWawavTXZd-12lvB12xyU.crl (hash: r4XabM/1K965AETn0uhGUcD6a5R8W5dA5/LqJAtdSNE=)
                          2: Wpa4hmGqaI75gZiUQXOgoxJKZrQ.roa (hash: u7n3bJbHGTqr0/m/Ag4/bTGdmq3uszY3dE70PEf9ZhI=)
                          3: aUSq-9K3ujFNcRXkWnCi3W4gXW8.roa (hash: BNzJhKbmfLeOAF3MagJXg5zn41TpVnVJhq41HBQaNO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:eb:19:ec:4c:57:04:28:9e:c2:53:8c:9a:57:7b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
        Validity
            Not Before: Jun 26 05:00:57 2024 GMT
            Not After : Jun 27 05:00:57 2024 GMT
        Subject: CN=d82ba94e854dcd3bad49ba5ebd0429d90818f005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ff:88:7d:7b:ad:2c:7b:b0:f7:29:7a:2d:12:
                    eb:27:7f:b8:43:7a:c6:9a:d5:2f:b6:a1:1c:81:12:
                    3f:e0:84:63:5c:e1:3e:67:98:33:fd:66:3c:aa:18:
                    c8:a5:aa:92:e9:e7:e5:12:28:e4:d8:a9:28:cb:58:
                    04:7b:9f:b9:a6:45:88:13:1d:02:34:33:48:9c:96:
                    49:7a:e4:38:24:f3:09:ce:1b:95:21:04:a7:22:43:
                    1a:26:51:43:81:60:ff:87:94:0a:ce:00:f6:ea:4f:
                    41:95:48:71:0e:62:a3:31:71:bd:b4:97:db:b7:8d:
                    94:99:96:27:e7:2e:38:fe:0b:2c:0c:be:5b:9f:9f:
                    e3:3a:12:01:35:9e:40:0f:f0:1e:00:28:77:78:38:
                    3c:e0:0d:8b:66:6f:2c:51:c2:3d:7c:83:16:bf:53:
                    50:3f:40:2c:12:db:e5:93:06:1b:8c:6e:9a:26:f0:
                    b6:3c:48:cd:8f:15:bc:46:4e:0b:ba:c7:8f:5d:fc:
                    15:47:0f:09:95:88:75:d5:dc:0a:f7:1e:8f:f6:b6:
                    00:b3:77:58:27:e8:bd:aa:63:39:5e:d8:1f:23:4b:
                    2a:52:26:f4:72:5f:ab:03:bc:f7:e0:e1:a7:32:1f:
                    2c:8e:1f:10:fa:5f:ff:ae:6d:77:ee:b8:9b:42:bf:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:A9:4E:85:4D:CD:3B:AD:49:BA:5E:BD:04:29:D9:08:18:F0:05
            X509v3 Authority Key Identifier:
                keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:2f:f9:09:f1:cc:49:14:49:b1:54:ae:e8:97:fb:db:b9:9e:
         1c:96:ba:ae:94:38:4d:21:51:2f:c6:53:62:78:76:e8:40:ce:
         0c:70:7d:39:80:c0:4e:60:14:d7:7e:96:a9:fc:f8:13:1b:5d:
         89:32:19:9e:73:b2:4f:f4:39:0c:21:a1:cc:ff:91:a2:c5:72:
         e6:c2:ec:35:f9:fd:49:e8:36:60:62:0b:2e:37:84:0f:9e:d8:
         eb:c8:22:f9:aa:41:bf:30:03:b6:05:e4:5c:10:1d:96:ac:b5:
         8d:c7:5b:c8:d9:23:c9:da:6d:ed:a5:47:c6:c1:f3:f4:f6:01:
         fd:27:5f:cd:b8:ae:03:4d:0e:06:75:1f:93:b0:7c:57:f1:72:
         b3:3f:fa:b6:6c:6a:1f:3e:07:2c:68:a3:18:d1:52:7d:49:c5:
         86:25:7a:4e:8d:65:e1:83:3a:d6:89:64:e4:95:96:02:92:f5:
         ce:b9:8e:7c:4d:04:5b:90:fc:44:41:ae:48:22:f9:c3:f1:51:
         ce:69:72:70:79:b3:79:72:fa:cc:08:86:cb:1e:43:77:de:5f:
         b3:6b:d8:90:1d:dc:fc:07:fd:d1:e0:84:65:08:52:15:7b:39:
         10:ad:4b:43:aa:d6:8a:b5:6f:29:c1:c4:ec:a4:c8:ca:0c:fd:
         e2:4b:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:36:27 2024 by rpki-client on console.sobornost.net