Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File:                     BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier:          RPmG2Dm9kc49pzDsZs4nA1pTPjOLUGxGh3IjRyeHCFE=
Subject key identifier:   C2:91:E0:F7:BD:34:F8:D1:69:2D:BF:E7:C3:89:19:C3:C5:AA:6D:45
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer:       /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial:       019048D56AAAFCB3603C3F8CB26238E0ED32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number:          0F7B
Signing time:             Mon 24 Jun 2024 06:01:04 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:04 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:04 +0000
Files and hashes:         1: 8qU7M4m9vxjo4oUSOHxJVSck8Bo.roa (hash: a/sD4tvZZrPEJFSdRsLEkqZGJyxxp7ccYHoZ/bSz4Tk=)
                          2: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: +3y0Ofdl8cJi5mGskOwX9Zalf7k81ihua6arDOo32ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:6a:aa:fc:b3:60:3c:3f:8c:b2:62:38:e0:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
        Validity
            Not Before: Jun 24 06:01:04 2024 GMT
            Not After : Jun 25 06:01:04 2024 GMT
        Subject: CN=c291e0f7bd34f8d1692dbfe7c38919c3c5aa6d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:66:48:6a:46:0e:33:ef:a4:af:7c:1a:12:
                    27:26:0d:b5:b0:d6:7d:6d:ba:0d:00:b5:60:17:e4:
                    87:bb:c7:8f:c9:34:4b:aa:70:54:a6:4b:e5:3b:e3:
                    2d:0f:16:ab:78:47:f0:e5:02:91:de:f3:75:8b:a2:
                    37:b1:65:1e:2b:28:ee:f3:3b:03:5d:07:86:16:9f:
                    e1:33:4b:1c:0c:df:dd:d8:f1:83:11:8b:d9:c6:9e:
                    b5:63:f4:a2:7f:db:6c:7f:2a:ee:07:89:d7:93:8b:
                    a6:ad:02:a1:a2:13:e4:0c:ac:0a:8b:5c:a2:cd:de:
                    2f:e3:f9:53:85:8a:9a:a6:1c:c2:f1:57:18:d2:a6:
                    e5:63:1f:ba:f1:c9:ce:a9:1f:44:df:30:56:30:90:
                    19:1b:f7:6e:25:60:de:14:33:b8:4e:6c:7a:c0:17:
                    7d:1a:ea:67:29:f1:c9:3a:c8:66:ff:0f:a4:75:73:
                    05:a3:11:af:bf:c8:6a:3d:a4:af:ad:7a:d9:e0:f4:
                    54:43:2c:4a:35:83:1f:c6:25:a4:1b:d8:d0:3a:02:
                    ac:da:3f:1d:1a:87:a2:43:33:ec:e2:86:c4:bc:6d:
                    77:13:1f:ae:67:7c:a6:17:c3:1a:83:f3:6e:78:be:
                    64:12:58:af:6d:aa:6e:b3:74:53:a3:8c:8b:22:4f:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:E0:F7:BD:34:F8:D1:69:2D:BF:E7:C3:89:19:C3:C5:AA:6D:45
            X509v3 Authority Key Identifier:
                keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:51:40:99:31:54:04:9f:ac:03:e4:1f:fb:78:9f:c6:07:
         92:4c:63:27:29:5f:36:49:59:ff:7d:77:74:18:c2:33:79:15:
         09:e8:00:0c:00:fc:1a:b4:71:77:48:4e:db:8b:11:86:bd:7e:
         5c:f3:d1:1e:8c:81:f7:84:c8:cd:15:21:58:0c:5f:98:b4:f7:
         9b:55:4e:57:e4:da:1c:d5:91:fb:07:a2:d4:40:3b:d7:5c:e0:
         c2:90:10:c9:a1:d6:41:7d:9c:2a:56:53:2c:7e:62:0c:d1:d5:
         de:89:f0:06:64:8c:d7:68:3d:37:52:41:fa:e5:67:11:7e:08:
         20:78:cc:64:bd:6d:d2:63:a9:9b:c0:39:2d:ab:0e:8a:22:1b:
         69:bd:6f:4c:98:07:58:07:99:dc:c7:40:64:0b:4d:03:78:d0:
         59:42:18:18:7d:14:f2:4f:6a:bc:1b:ac:39:3b:f9:08:80:ab:
         d6:0b:07:49:47:71:20:70:bc:aa:5b:ff:8c:ad:5a:85:d9:ca:
         2e:e4:23:ce:54:b3:43:28:a6:6e:62:20:c5:32:13:e3:ae:63:
         d2:d2:7c:c9:59:66:77:98:4b:dd:9d:e6:cb:f5:67:8c:b0:82:
         49:7e:64:fc:19:5b:f4:6e:a8:7a:59:b7:87:ca:08:68:00:7b:
         45:ad:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:43:53 2024 by rpki-client on console-fra.rpki-client.org