Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File:                     BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier:          /RUPn3TtYDBq/sKG3D743PbXl4HlSVtOsdI0Y1J/390=
Subject key identifier:   99:24:74:8F:83:EA:49:6D:BF:32:DC:EC:2E:C0:DE:75:F5:F1:A9:6E
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer:       /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial:       01901DEAF957A02ED95FA43739CBDD54B424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:56 +0000
Files and hashes:         1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: jsHQYJnrXKch2wR0tYzimwiSNuLRUn3QkAW+OLX4cU0=)
                          2: Ja0E2j9mkM6PVVuAdcXg7GZ3Wpg.roa (hash: SV64UL3gXyAcRG28LBCtHfTjGIRkULxTGzNpsnKed8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f9:57:a0:2e:d9:5f:a4:37:39:cb:dd:54:b4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
        Validity
            Not Before: Jun 15 22:00:56 2024 GMT
            Not After : Jun 16 22:00:56 2024 GMT
        Subject: CN=9924748f83ea496dbf32dcec2ec0de75f5f1a96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:bc:28:09:38:2d:e3:8d:66:51:88:a0:54:
                    9c:c2:97:1e:ad:b0:bc:99:c9:70:67:ca:4d:d1:1f:
                    2d:64:b4:d6:61:08:35:57:0c:4e:ea:b6:f3:41:14:
                    0d:13:d9:b2:c8:16:05:1e:62:61:4f:7d:f6:cd:6b:
                    dd:7b:0b:db:7d:74:06:62:72:52:9a:8b:e3:0e:85:
                    01:71:59:52:ce:47:fa:ac:c4:bd:7e:66:4e:e8:77:
                    9d:61:c7:6e:d9:f7:7e:01:da:8e:97:74:60:d1:a0:
                    04:19:84:1a:67:90:80:3b:8c:6d:1a:ad:69:af:27:
                    de:df:b3:55:43:58:84:45:0b:9e:f9:88:9b:b5:15:
                    17:b6:ec:70:75:56:c0:c3:fe:41:94:d0:c7:ec:9c:
                    ac:c5:40:11:d7:b4:e1:9a:95:e9:aa:16:5c:09:82:
                    bf:0d:74:68:b9:19:59:d4:53:aa:9c:fa:1b:cc:ab:
                    e9:df:6b:e5:01:2d:7f:5d:8b:fd:00:31:21:4a:48:
                    08:ab:bf:4e:96:8a:0f:77:e9:d0:b6:cb:96:d6:ef:
                    fa:96:95:64:3d:6f:ba:79:9f:1f:4a:2d:5c:cb:d5:
                    08:99:eb:4a:bb:27:8c:74:68:e3:46:9e:f5:a9:07:
                    92:cb:eb:30:1e:7b:64:21:88:4b:a7:43:34:31:b6:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:74:8F:83:EA:49:6D:BF:32:DC:EC:2E:C0:DE:75:F5:F1:A9:6E
            X509v3 Authority Key Identifier:
                keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:45:e9:a4:f2:3f:1b:7b:39:51:f7:5d:11:b1:35:c7:db:
         3c:0b:3e:5b:87:25:c1:c7:ba:38:92:c0:0a:3d:ac:31:c8:02:
         18:0d:f2:94:10:14:fb:13:75:86:06:f9:e9:94:a7:f4:38:da:
         5b:24:f6:ce:b5:dd:6c:3d:ac:a0:90:e7:17:88:a1:7c:d6:bc:
         31:c6:3e:aa:6a:5d:b4:6d:89:93:41:78:2d:20:9d:bc:f7:67:
         f6:13:82:42:b1:c9:fc:f3:6f:a0:23:00:ea:25:e3:bc:54:b4:
         7a:38:d0:7a:97:cc:52:d4:d4:b6:fe:06:92:56:05:ad:ff:c3:
         63:80:5b:ff:87:b1:e6:79:e7:09:c2:c2:db:d9:c1:ef:ba:4b:
         07:5a:18:e0:4a:72:7c:47:14:c1:08:1e:af:e0:d5:81:b0:c8:
         35:d9:c1:c0:2f:3c:bc:96:20:f9:52:f2:5d:75:22:cb:ac:25:
         1b:5f:6c:ea:20:f8:d0:c2:71:58:f4:85:6f:76:b6:2c:62:1b:
         5f:21:88:8d:03:27:b2:40:c1:2a:0b:d8:8f:cb:9f:0d:2b:79:
         6b:b6:48:f1:24:41:1d:e2:ed:d5:9d:c3:d7:79:f1:0c:cb:e3:
         92:0e:7a:cb:ea:3a:8a:d2:06:05:86:fa:2d:bb:be:88:e5:a6:
         2b:1c:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:37 2024 by rpki-client on console-ams.rpki-client.org