Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File:                     bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier:          eJeLcRDhTIridMyPstQi9URJM9R868mX1aHNGjbNXDA=
Subject key identifier:   D3:8A:CD:52:45:A3:08:CB:D7:78:B7:01:01:67:3E:3A:FE:F6:0B:36
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer:       /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial:       01901BFC4A7E0C23D368A7E001133F09CD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number:          C5
Signing time:             Sat 15 Jun 2024 13:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:36 +0000
Files and hashes:         1: b7bfBcqxRrYOaQxCTmy3DpTNoko.roa (hash: ANIeA+s4i+JCxAPf3Wv/85cf5FnhBGArKOdjsGDqmRw=)
                          2: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: EFXx3WNss86CczYZOk5mnOpDRHUrwE4dSbnPrEHSlfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:4a:7e:0c:23:d3:68:a7:e0:01:13:3f:09:cd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
        Validity
            Not Before: Jun 15 13:00:36 2024 GMT
            Not After : Jun 16 13:00:36 2024 GMT
        Subject: CN=d38acd5245a308cbd778b70101673e3afef60b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:b3:a5:13:59:e0:e3:3b:29:f2:40:f7:93:
                    91:52:fe:53:ff:4e:0f:63:2f:20:b6:40:5f:e8:75:
                    ba:8b:a7:84:d2:64:1b:2d:c2:12:0e:e5:53:1d:64:
                    bf:bb:c8:3a:a1:d4:45:c8:00:2f:c8:99:06:9c:7a:
                    62:4d:8d:1b:0a:6c:63:63:f7:0f:74:d7:81:d9:94:
                    a6:b6:e9:fb:48:a5:e2:70:b8:56:9f:48:0e:53:46:
                    08:32:bc:02:67:e3:25:62:3d:10:0b:23:e7:32:b1:
                    c3:f1:64:bf:d1:fd:84:7f:59:d3:65:87:e8:61:a4:
                    7a:db:1d:37:11:b7:dc:22:94:63:cc:b7:a4:42:e8:
                    a4:08:45:87:1c:5a:6e:d6:db:be:af:fb:b4:3b:4f:
                    27:2a:33:1e:e2:a1:9e:9d:c0:8f:cb:eb:67:12:d5:
                    e2:18:f4:0e:9a:67:bc:95:1e:a2:46:52:08:fa:24:
                    f3:d7:65:dd:67:86:da:02:56:8e:2f:2a:d4:61:d9:
                    64:a3:e1:66:09:22:e0:03:01:d2:c5:d5:49:40:00:
                    28:73:d2:0c:bd:0f:27:80:83:78:92:68:a4:7f:55:
                    da:9b:e2:15:4a:51:2a:e3:56:c9:88:3a:43:77:0d:
                    05:a2:69:41:8a:33:09:1d:13:da:6c:55:9d:0f:e1:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8A:CD:52:45:A3:08:CB:D7:78:B7:01:01:67:3E:3A:FE:F6:0B:36
            X509v3 Authority Key Identifier:
                keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:8d:3c:bb:af:75:37:24:e7:0b:2d:53:e7:d8:cd:eb:9b:
         18:79:b3:8f:66:bb:99:1d:82:eb:5a:ff:6b:31:b5:69:94:80:
         3c:c1:0f:24:7c:55:0f:ba:fe:e3:2c:cf:51:41:e1:56:ed:8b:
         04:ec:84:c1:89:ac:2d:a9:d1:57:57:c3:9a:b3:4d:86:6e:3e:
         a7:90:f6:5c:83:c0:27:68:45:5c:8b:a8:e6:8e:04:d4:6d:09:
         0c:54:7a:ff:8b:6e:8b:3a:b4:28:c6:91:82:f2:15:76:b3:3f:
         08:fa:05:62:5a:40:4d:c0:4f:a4:b0:57:83:a4:08:77:78:11:
         af:1a:99:98:4f:d5:10:3e:f5:84:88:3b:c0:f9:7f:be:59:36:
         f8:f5:24:5c:1e:b0:83:38:74:4a:12:f7:69:e9:98:0d:27:54:
         73:0e:b2:7d:08:fd:bd:31:5e:a3:49:ae:21:d4:fc:92:32:05:
         22:dc:a4:85:07:b8:f1:07:96:33:ca:77:8b:90:2b:4d:f5:23:
         d0:bd:63:ac:5d:3e:a5:cd:1f:43:c2:bf:e7:ca:43:6b:4c:d1:
         f2:d0:2f:86:1b:a3:92:e9:34:46:c7:46:aa:c6:15:06:99:1b:
         a1:c7:90:74:98:93:a8:0b:a9:6f:7a:42:5a:11:24:39:ff:9f:
         07:29:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:07:27 2024 by rpki-client on console-ams.rpki-client.org