Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File:                     bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier:          FKQKusYu4ONUOXvgHR1iqn09kE8/jIBUCm/JuEQwT1Y=
Subject key identifier:   36:DC:D4:27:6A:4D:82:C9:C4:D2:B9:29:D1:54:5F:05:8F:6E:32:63
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer:       /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial:       01901DED40F4124EC7833536A0E03AEA8EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number:          033F
Signing time:             Sat 15 Jun 2024 22:03:26 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:26 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:26 +0000
Files and hashes:         1: NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa (hash: D+hqSc9AGs8/0rb1PIJWbIlCilWv4UaD3CRAWBCX26Q=)
                          2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: oVRGRBrVVqJwnc8/XBZqdyauulfGQ3wLDw/+D/PFkfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:40:f4:12:4e:c7:83:35:36:a0:e0:3a:ea:8e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
        Validity
            Not Before: Jun 15 22:03:26 2024 GMT
            Not After : Jun 16 22:03:26 2024 GMT
        Subject: CN=36dcd4276a4d82c9c4d2b929d1545f058f6e3263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:03:3b:e0:10:6a:c0:54:7f:0c:05:4d:77:
                    54:ec:9a:fe:18:b4:ef:a6:1f:bd:99:43:c9:21:13:
                    e7:34:41:5f:c3:70:13:1e:3f:b0:b4:a9:57:b7:11:
                    a8:fd:f2:24:10:fa:a3:17:23:0f:0c:d1:c8:d0:8c:
                    53:72:a4:91:56:23:d9:ea:10:9a:ce:48:b8:50:9d:
                    e5:dd:09:17:47:4a:16:49:ee:ce:bf:57:a6:c1:87:
                    c3:01:de:31:c8:63:50:5e:ed:79:2a:ad:d3:37:24:
                    25:ef:9b:bb:01:e5:d2:aa:38:e4:31:b0:23:49:0f:
                    ed:0a:b1:71:6a:b5:1d:02:54:81:92:4e:c9:d5:99:
                    c2:29:57:0f:5e:55:5a:c0:69:18:60:1d:d6:8b:65:
                    96:93:2b:9e:e4:f1:da:c3:d7:6f:cf:09:0d:9e:c1:
                    23:2c:60:34:8e:8f:f2:34:b5:ab:67:c0:08:bf:af:
                    24:19:2c:9e:16:6f:00:cf:fa:db:f9:3a:a3:24:93:
                    e8:3d:b5:5e:24:48:b2:c4:98:44:21:80:fa:57:b8:
                    ea:64:71:65:4d:02:24:f6:92:b9:c1:cc:b3:a7:7c:
                    df:2e:96:cc:de:6a:72:32:ce:71:d0:f7:ca:13:ae:
                    fe:20:75:77:4b:c4:a0:0f:6f:59:f0:40:8b:3b:c7:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DC:D4:27:6A:4D:82:C9:C4:D2:B9:29:D1:54:5F:05:8F:6E:32:63
            X509v3 Authority Key Identifier:
                keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:fd:c9:1b:47:d3:38:1f:d5:41:3c:e9:e3:7a:83:84:1b:
         eb:d2:84:ba:a3:89:a2:bf:1d:ef:8d:a3:06:a7:29:56:22:16:
         bb:ec:9d:10:94:4d:e2:f9:d8:aa:c6:80:de:fa:78:0a:a5:39:
         31:17:4d:16:62:34:59:44:27:23:20:cb:2c:08:ae:73:fe:88:
         a5:59:2c:6f:32:70:a8:03:2e:4f:85:a2:51:f2:9b:5f:84:ba:
         c7:df:11:5d:68:3b:a2:b3:f1:79:9c:08:9d:76:a2:2c:ce:bd:
         45:bd:2e:43:b7:07:80:61:7d:7c:ab:20:ab:ce:c1:7f:2d:e4:
         97:87:d7:2e:37:78:ec:ed:4a:39:6f:85:57:ca:c3:96:75:9b:
         a7:96:28:76:98:20:48:03:f0:c0:67:59:ce:ee:9c:79:c4:df:
         b0:a6:69:78:a3:b6:2a:3d:66:50:41:5c:90:d0:35:7a:6a:7c:
         2c:cc:42:9e:77:4e:f8:9e:46:f6:24:7e:53:b4:30:56:a4:04:
         de:48:19:86:19:c7:a3:8a:25:8a:16:2a:66:89:52:f4:de:b2:
         4f:26:cb:3e:3c:a4:16:7e:c5:c1:16:73:88:68:0b:69:14:45:
         5d:17:8a:4f:87:df:dc:72:a2:ec:63:3f:db:0a:d9:e2:6c:9e:
         09:b1:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:01:20 2024 by rpki-client on console-fra.rpki-client.org