Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File:                     BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier:          saYUiGD8T8TiqVzIeXZ+Q47ymYzzOLURbxAYRndz1Ak=
Subject key identifier:   DF:A0:08:62:66:67:A6:9E:D7:79:23:70:2A:C5:60:27:0F:0C:4D:5D
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer:       /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial:       019047C3104C17203DC7367397161484A4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number:          11DD
Signing time:             Mon 24 Jun 2024 01:01:24 +0000
Manifest this update:     Mon 24 Jun 2024 01:01:24 +0000
Manifest next update:     Tue 25 Jun 2024 01:01:24 +0000
Files and hashes:         1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: i2pbn15O1uwMmRsndiI4IXLVz5g7xMh6s/PzX4qjVl4=)
                          2: DJ3xsn4AGyOFLwibFH0SEtAtTTo.roa (hash: JIDzI5yhJyTqILByfLdhhO+DDMBoWyksm2EDpkJAl4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:c3:10:4c:17:20:3d:c7:36:73:97:16:14:84:a4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
        Validity
            Not Before: Jun 24 01:01:24 2024 GMT
            Not After : Jun 25 01:01:24 2024 GMT
        Subject: CN=dfa008626667a69ed77923702ac560270f0c4d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:97:d8:58:87:f5:d3:fc:3c:04:0f:35:fd:
                    29:d9:df:87:dc:fe:df:d8:dd:56:10:5f:44:01:f3:
                    36:a9:f0:5c:74:67:a4:e4:ac:93:a9:d4:16:e4:e3:
                    ea:cc:6b:06:91:0f:ad:1a:ad:b4:78:22:b3:94:66:
                    fd:a1:3d:ff:8b:26:14:6f:86:b6:8f:5b:7e:8c:44:
                    58:11:5a:45:96:d6:76:96:74:4e:61:cc:01:7a:54:
                    3b:ae:b5:07:9c:4e:68:2e:04:77:cf:b4:e9:5d:fc:
                    e9:b6:f0:7e:30:2a:01:a3:ce:b0:0e:07:45:55:fd:
                    f8:1c:a4:5e:30:00:51:d5:67:b6:de:4e:c2:47:8c:
                    c3:b5:13:3e:4e:9a:36:f9:c1:36:17:d1:f4:c4:d5:
                    53:61:3d:2c:5a:be:dd:f1:38:02:33:2c:41:0d:c0:
                    d2:a7:13:5a:c9:5b:63:66:44:9f:0a:c4:d5:70:da:
                    dd:1c:83:66:53:61:1e:f9:73:4f:62:f9:d0:89:63:
                    a0:95:c0:e7:92:ff:65:52:59:32:88:7e:d9:7a:9c:
                    98:04:d5:06:bd:b3:c1:3e:b3:93:94:2b:42:59:cd:
                    15:ba:f6:2d:da:86:bc:b4:c1:59:43:2b:f2:9f:37:
                    7d:b6:99:41:3b:11:cd:b0:53:42:a7:34:a5:15:d6:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A0:08:62:66:67:A6:9E:D7:79:23:70:2A:C5:60:27:0F:0C:4D:5D
            X509v3 Authority Key Identifier:
                keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:29:90:5a:38:d6:95:a7:e3:6b:67:7e:07:f2:0d:d0:90:e4:
         82:35:68:6c:43:72:0d:95:d9:92:6e:f4:b4:b2:37:45:19:c6:
         9a:ac:da:02:59:51:44:cf:96:d2:23:f9:d9:74:d7:a8:d7:6f:
         7e:15:46:72:f2:76:0d:5d:68:ed:62:60:60:66:af:55:54:e4:
         11:2c:3e:7d:5b:4f:36:a4:bd:cc:8e:32:38:4c:48:6d:f2:21:
         4a:e8:54:29:6a:e8:50:af:7f:8e:1d:45:76:41:96:20:6e:e9:
         e4:e8:fa:81:59:58:47:58:c0:9f:ff:f8:21:a7:d1:89:89:ac:
         f1:95:fe:bd:b0:d8:ba:a1:18:21:29:a3:69:4b:5b:3e:48:c4:
         2e:79:21:ad:6a:ab:d1:38:65:b0:f0:a0:e9:34:0b:4f:4c:3f:
         f2:a1:ee:ad:4c:bc:27:da:b5:7d:f8:e9:2e:6e:50:ee:b0:7e:
         c2:07:04:34:df:52:04:e8:74:86:b2:da:93:ba:86:16:c5:4c:
         24:ae:57:0b:15:22:1a:44:02:08:b8:13:c7:5c:47:42:41:25:
         9b:27:7f:8c:0a:90:28:e3:d4:f1:9f:22:4a:06:ce:9f:08:d8:
         c2:b5:1c:a5:10:3a:30:8c:9a:a1:de:f1:33:4e:7b:cf:7c:d9:
         9e:ba:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:51:52 2024 by rpki-client on console-fra.rpki-client.org