Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
File:                     bvV-1OLX9TRwswI1N3vq3XvThA0.mft (raw, json)
Hash identifier:          LybFmXnKYDAW9dWuP8w+BxH/u8FOoWla1SrEGxAvzIw=
Subject key identifier:   40:43:DA:6C:04:72:A9:E0:6B:DB:4C:5D:28:07:1D:3F:96:97:85:75
Authority key identifier: 6E:F5:7E:D4:E2:D7:F5:34:70:B3:02:35:37:7B:EA:DD:7B:D3:84:0D
Certificate issuer:       /CN=6ef57ed4e2d7f53470b30235377beadd7bd3840d
Certificate serial:       01901DEAF3AA9C2E6556F0D98559308A2846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvV-1OLX9TRwswI1N3vq3XvThA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
Manifest number:          0199
Signing time:             Sat 15 Jun 2024 22:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:55 +0000
Files and hashes:         1: bvV-1OLX9TRwswI1N3vq3XvThA0.crl (hash: NQTgcMIXnmPdl4sDaGYWHHwouMgPxrOXOxoer3F0mf8=)
                          2: kwmHCOVj5VKcziHoTO7vndowLxo.roa (hash: pNxDiKfzGJ1BH+M3vfWDxbeVSyMAGlYEcbifNmON/p0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvV-1OLX9TRwswI1N3vq3XvThA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f3:aa:9c:2e:65:56:f0:d9:85:59:30:8a:28:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef57ed4e2d7f53470b30235377beadd7bd3840d
        Validity
            Not Before: Jun 15 22:00:55 2024 GMT
            Not After : Jun 16 22:00:55 2024 GMT
        Subject: CN=4043da6c0472a9e06bdb4c5d28071d3f96978575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:fe:46:15:7c:cd:5a:3e:fb:0f:7c:74:bc:
                    91:3c:dd:6d:44:ad:93:45:de:2a:34:2f:f1:26:3f:
                    37:4b:3f:5f:51:c9:55:9b:3a:57:be:44:3a:62:75:
                    e6:5c:31:34:7e:21:b8:fd:13:5f:44:11:e6:9d:44:
                    50:6d:c7:0b:ec:0e:82:0e:86:56:55:ad:68:e0:81:
                    ce:2c:0c:65:6f:b4:16:96:23:13:2e:9a:61:fe:c5:
                    92:15:aa:b7:d0:62:8b:91:b3:8f:cd:8f:e6:98:7a:
                    63:a7:19:f2:54:4d:8f:70:f3:79:fe:74:de:7a:cc:
                    c2:7b:69:20:0c:89:ac:14:f5:66:a0:0e:93:4a:5f:
                    3f:3c:95:79:f5:33:5b:08:42:19:3e:84:7e:2b:02:
                    77:f8:ec:ab:ae:ec:bf:ec:c5:67:80:60:d0:ef:4b:
                    35:5c:bc:3f:a1:86:01:19:76:2f:05:8c:a4:6a:c1:
                    56:ab:a2:32:84:9d:a6:25:71:f2:5f:11:c4:a8:54:
                    7c:b6:d7:f3:90:ba:70:0f:b6:20:99:07:69:25:24:
                    76:f8:a3:4b:88:08:5c:e4:cc:93:e0:13:33:9d:43:
                    6f:86:bc:10:a4:2c:d6:a0:43:af:b0:0e:e5:ac:c8:
                    17:3b:2c:df:e2:83:7e:83:5a:72:8d:1d:b7:61:a3:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:DA:6C:04:72:A9:E0:6B:DB:4C:5D:28:07:1D:3F:96:97:85:75
            X509v3 Authority Key Identifier:
                keyid:6E:F5:7E:D4:E2:D7:F5:34:70:B3:02:35:37:7B:EA:DD:7B:D3:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvV-1OLX9TRwswI1N3vq3XvThA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:75:af:b5:3a:37:36:ec:77:e9:14:c8:9a:d5:c3:b8:11:27:
         c6:88:5d:dc:3c:6a:7e:02:21:77:54:f4:d8:03:5d:c6:0f:28:
         de:e0:15:87:e7:13:2b:59:f0:b0:76:b5:c6:07:6c:37:3e:fb:
         3e:88:95:e5:1d:9c:d3:23:f2:4d:b6:b9:bd:02:28:58:4d:1e:
         a6:54:55:bc:ba:db:68:ce:b6:20:94:ac:6a:09:e7:4e:27:d0:
         f8:ab:6a:89:bb:eb:c9:9d:1f:78:b3:24:11:16:a0:d7:e3:69:
         67:0f:07:76:6f:d2:48:db:43:ff:85:3c:c9:9a:32:6c:80:e8:
         b3:71:31:44:e7:ce:e2:22:a2:a7:2a:24:35:b5:ea:76:b6:f9:
         92:4c:1b:6b:0f:3d:bd:04:1e:d9:4d:e6:4a:f6:b0:c2:d9:c9:
         f0:e5:d4:c5:dc:d0:95:7e:0d:34:9f:5e:d9:d2:04:fc:94:57:
         d8:3c:51:0f:68:fa:7d:54:79:5e:2e:89:25:cb:75:55:44:da:
         92:2e:d8:4d:0a:66:05:4f:db:ef:28:6d:5a:c7:d8:0e:be:46:
         49:2e:6e:c1:56:c0:76:f9:a0:49:a2:57:7a:31:7c:2c:16:f3:
         27:fe:20:08:b4:f4:fe:42:90:ef:64:9e:33:ea:49:fe:ad:d0:
         00:26:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:18 2024 by rpki-client on console-ams.rpki-client.org