Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File:                     bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier:          VEY9HD00gxJMHlBYk8t+M7VHGHcOBQVFNVpW4avplWs=
Subject key identifier:   F5:49:46:47:8D:F7:38:2B:92:E1:4B:CC:56:70:A8:D8:E6:B4:2C:9F
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer:       /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial:       0190471DB17D1978AA8210D8B3148D996A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number:          11E0
Signing time:             Sun 23 Jun 2024 22:00:46 +0000
Manifest this update:     Sun 23 Jun 2024 22:00:46 +0000
Manifest next update:     Mon 24 Jun 2024 22:00:46 +0000
Files and hashes:         1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: XoTtXeblrhzPjdFRdq/UM+3tTzvj0yulgpMQiZNftLU=)
                          2: iGvmj0LKrR3GKFYu3rlxdhs_WT8.roa (hash: r3XYWXbDkX+A9qPixByJiQ3ohgEvyg6CcUqSA1jUi+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:1d:b1:7d:19:78:aa:82:10:d8:b3:14:8d:99:6a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
        Validity
            Not Before: Jun 23 22:00:46 2024 GMT
            Not After : Jun 24 22:00:46 2024 GMT
        Subject: CN=f54946478df7382b92e14bcc5670a8d8e6b42c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:d7:ec:9b:12:0a:73:e8:ac:3b:5a:98:1f:
                    10:07:45:7a:8b:5b:6c:88:48:a7:a4:85:aa:be:a1:
                    50:44:23:67:24:f0:af:3a:a3:85:c6:cc:22:17:f4:
                    a5:23:42:df:7f:7c:4a:94:52:3c:0a:45:36:de:d0:
                    ba:75:41:57:bb:f0:83:a0:9c:b4:43:50:7d:c9:4d:
                    ec:fc:24:68:73:68:df:64:e8:f7:fc:7f:11:b4:81:
                    74:96:5b:8f:40:ed:9b:33:99:83:91:78:ac:56:21:
                    f6:c1:d2:32:e4:d0:23:2a:68:37:de:15:ec:2c:22:
                    5b:10:39:a3:29:a2:c7:50:a5:95:87:40:02:b5:f1:
                    49:9c:98:80:31:87:4a:21:3b:d3:0a:8e:b8:1c:0b:
                    85:73:39:37:d1:54:cf:9e:56:47:76:b6:6e:7a:e0:
                    ed:80:61:fa:bf:90:45:05:d5:b5:b5:05:5b:24:10:
                    b8:0d:8c:81:d4:7e:20:94:9b:ec:dd:8f:ea:6b:c0:
                    95:3d:ad:1a:c2:68:f5:2f:54:49:33:dc:3a:1a:d0:
                    98:7a:74:0d:05:85:3d:b7:39:ae:2d:06:b1:d4:0d:
                    c0:f8:a5:34:de:43:57:de:7e:37:31:07:67:a1:1c:
                    f0:cf:9c:16:b1:bb:eb:d7:3d:bb:2c:68:a7:be:f7:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:46:47:8D:F7:38:2B:92:E1:4B:CC:56:70:A8:D8:E6:B4:2C:9F
            X509v3 Authority Key Identifier:
                keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:46:b1:96:bb:1b:ee:b7:2f:f0:41:2f:71:69:d2:ff:3f:
         41:f4:c0:06:df:5a:09:be:c1:46:34:34:88:c8:20:dc:76:28:
         d0:a4:d6:e6:3a:ef:4a:bf:c9:b9:12:4a:3a:d6:4f:1e:9b:7c:
         c9:2e:6d:42:fa:70:fe:61:5f:40:89:12:64:9e:c6:7f:32:2a:
         59:1a:9b:9e:e8:63:6f:93:5c:fe:17:90:a6:d3:a0:09:a2:2b:
         72:c7:5c:06:bc:7a:7b:05:f9:63:e2:ae:0d:b7:23:20:6e:5c:
         11:60:35:46:e4:60:60:1e:16:c5:34:14:ae:ff:74:f6:49:97:
         3f:bb:46:3f:96:57:f0:74:cf:a2:93:6e:b4:59:39:c6:cf:22:
         2b:91:15:b7:bc:15:e8:b4:c1:8f:83:7c:b0:50:d6:fc:77:35:
         b0:58:4d:46:e5:04:93:74:63:51:0b:e6:a9:5f:b3:86:d3:d0:
         84:8c:bc:3b:0f:fa:49:7f:c9:0d:c6:cf:b6:2a:69:12:87:52:
         7a:ef:12:ad:18:88:dd:5b:98:5b:24:17:18:97:82:be:91:57:
         c6:d6:4b:d9:26:60:a3:b5:05:0c:38:55:b6:e1:a3:4c:cd:be:
         d9:0b:1a:0f:48:80:65:05:a4:84:bd:fa:7a:29:69:d8:0d:7c:
         68:44:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:15:06 2024 by rpki-client on console-ams.rpki-client.org