Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File:                     BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier:          kYQVaxBG32LnvBriVCUxegLkKd/JX08b4pGWKPJdWyo=
Subject key identifier:   9E:A2:D9:F9:13:5A:8C:BD:7B:6D:D4:DE:D8:49:A0:8E:3E:F9:76:4C
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer:       /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial:       01901F348758574B10B7557E045F04F4A185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 04:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:54 +0000
Files and hashes:         1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: 1VPwdV7hqSBlqp0/xf24mNydoWdb1/QtnGGbXQR9b34=)
                          2: DJ3xsn4AGyOFLwibFH0SEtAtTTo.roa (hash: JIDzI5yhJyTqILByfLdhhO+DDMBoWyksm2EDpkJAl4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:87:58:57:4b:10:b7:55:7e:04:5f:04:f4:a1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
        Validity
            Not Before: Jun 16 04:00:54 2024 GMT
            Not After : Jun 17 04:00:54 2024 GMT
        Subject: CN=9ea2d9f9135a8cbd7b6dd4ded849a08e3ef9764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:2a:b7:a2:d2:80:6e:15:6d:16:89:14:91:
                    57:59:9d:6b:94:a0:d2:dc:86:ad:20:09:20:38:f8:
                    9c:0a:1b:63:47:b1:73:d3:bb:67:fa:d7:45:f2:51:
                    4d:4a:d3:ff:cc:3b:b8:f8:d6:b0:56:e9:82:02:70:
                    f1:1a:c3:58:a0:7a:21:dc:cf:d1:14:46:78:bd:ae:
                    66:de:e0:24:af:20:08:10:5b:a7:61:a0:fd:8f:ae:
                    24:ea:19:b0:4d:81:25:b7:79:b0:ea:00:42:a6:f5:
                    e7:d1:bc:4c:46:1a:d8:e5:f2:37:95:56:5e:8c:c9:
                    57:77:9a:e5:a0:68:04:11:e4:1a:83:4d:61:7b:b6:
                    59:7a:14:43:f8:75:26:86:8a:88:ed:2e:52:e9:98:
                    7c:78:14:c8:72:d5:3b:ae:cc:4b:03:c6:d0:b9:c8:
                    8f:80:5b:b7:db:c7:81:00:4f:a7:43:84:b8:98:39:
                    f2:0d:a4:b3:b1:a9:dc:65:53:36:99:bd:ba:18:52:
                    9b:a3:50:5a:84:b7:d5:72:0b:57:15:5e:dc:5c:7f:
                    39:c5:58:75:ac:2d:20:d2:17:70:d1:3a:e1:b4:b3:
                    c5:24:eb:e7:48:b0:c7:f6:cd:ed:bd:de:7c:33:06:
                    e2:e0:6b:f7:17:33:ac:89:17:83:6a:cc:63:56:26:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:D9:F9:13:5A:8C:BD:7B:6D:D4:DE:D8:49:A0:8E:3E:F9:76:4C
            X509v3 Authority Key Identifier:
                keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:87:c4:15:ba:62:7f:bc:d8:39:17:34:a9:03:02:73:fe:c2:
         48:15:f4:f6:1f:de:75:28:ca:e6:d0:41:53:61:28:ff:12:65:
         11:8f:c4:d8:dd:85:1b:e4:1c:84:ff:81:c6:fa:a4:26:54:be:
         f4:67:8e:13:6f:0f:fe:21:9b:21:e3:96:50:93:75:e8:71:cb:
         01:99:3e:56:7d:c9:f7:f9:13:3f:15:3c:ff:a5:ce:ce:e3:c8:
         57:ff:2e:08:46:16:dd:7a:e3:1e:76:7b:72:cd:66:a8:04:62:
         d5:b1:d5:e5:01:64:f7:ba:12:64:3d:16:dc:bc:58:28:86:c5:
         d2:ff:ca:64:11:0e:e7:49:d2:0b:30:2f:f5:34:b2:5c:d5:e8:
         5a:bc:55:d0:23:20:66:8b:97:e4:a0:dd:8a:1b:16:c8:2d:7e:
         40:5d:81:cd:19:20:74:6a:0d:1f:13:2c:fb:d3:8d:20:d5:97:
         62:dc:07:22:f3:16:16:9f:45:73:15:a8:59:44:90:c9:63:46:
         31:45:d6:ba:e3:f8:f8:95:40:9a:5e:cc:55:83:6b:43:b3:af:
         b6:fd:c3:9b:0f:66:fe:62:57:4d:81:7d:61:e7:d0:19:d1:99:
         7a:79:5d:94:60:d0:36:ce:c8:10:02:cc:be:ef:da:59:a4:6c:
         a5:db:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:10 2024 by rpki-client on console-ams.rpki-client.org