Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File:                     BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier:          q0K1JhVxgEhztAGarBY+DCPuV0F9fALYB2eLM1exjmI=
Subject key identifier:   9D:AD:7D:72:2D:66:82:8F:49:9B:02:95:91:37:E8:C3:B7:30:39:07
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       01903404E719DBF803A09E370B294A3FC72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 05:00:54 +0000
Manifest this update:     Thu 20 Jun 2024 05:00:54 +0000
Manifest next update:     Fri 21 Jun 2024 05:00:54 +0000
Files and hashes:         1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: mw9iuCOdWq8pqt7Fes6UlWYz8610kCM3PMl5jdoFozM=)
                          2: ecRfPCfI0bTrLdk922JII3s-JSg.roa (hash: HIy72fMoYgM2BoggSm1Y2fJqetI3V2cYvdMkSzVhhvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:04:e7:19:db:f8:03:a0:9e:37:0b:29:4a:3f:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: Jun 20 05:00:54 2024 GMT
            Not After : Jun 21 05:00:54 2024 GMT
        Subject: CN=9dad7d722d66828f499b02959137e8c3b7303907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:71:e0:88:59:31:29:ae:82:49:f2:18:8b:
                    f6:f5:32:84:f3:31:6e:78:ee:9b:9e:f8:37:7d:28:
                    33:74:15:b5:17:c3:78:2e:1f:09:55:9d:09:3e:ae:
                    e6:c1:31:e6:a7:85:0c:cc:3f:14:1a:f8:56:b6:8a:
                    4d:8c:1f:53:38:0e:63:9c:46:7a:44:90:0e:da:4c:
                    03:4b:58:0a:a6:1b:dd:3a:84:2b:ae:16:e8:b4:38:
                    ab:25:79:ad:97:b9:e4:1f:84:f2:19:5a:4e:93:58:
                    f5:06:dd:65:82:9d:6e:9c:d1:39:60:d5:9d:66:e1:
                    b4:5e:a3:33:3c:53:0c:94:8b:21:a6:50:e4:38:ec:
                    91:ed:4c:70:eb:5b:24:0f:af:e8:46:a8:1c:48:20:
                    20:ec:c5:90:ca:80:41:dc:65:bd:c3:87:60:2c:88:
                    24:4f:f6:56:d6:29:7d:00:bd:cf:4f:ab:39:41:e6:
                    71:c0:4a:2a:65:07:a5:8a:33:45:01:9c:5e:b3:d1:
                    aa:05:6d:7e:d2:e0:41:55:7b:54:16:7f:85:65:48:
                    f6:cd:65:99:5e:93:4c:ef:fd:af:2e:60:25:be:9f:
                    93:1e:22:20:19:ce:44:fe:cd:e7:5b:c1:5e:df:34:
                    8d:66:75:41:82:32:b4:69:73:14:b5:db:9f:9e:bd:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:7D:72:2D:66:82:8F:49:9B:02:95:91:37:E8:C3:B7:30:39:07
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:6f:61:7b:7d:aa:0d:5d:2b:df:50:d6:a7:7f:fe:d0:3d:
         b2:19:71:d6:c9:b1:b1:c4:ff:77:03:a3:93:99:a6:9f:f6:8d:
         36:9e:f5:35:4a:40:f4:6f:1d:aa:9b:72:4f:3c:21:08:b6:bd:
         5b:a7:1a:30:e1:08:a8:ad:20:e5:c3:00:6f:27:ec:73:52:7d:
         8b:3d:87:d6:9c:93:38:db:93:4c:db:ed:18:bb:74:1e:4d:de:
         bb:8b:6c:83:9c:56:ee:cf:a9:f4:48:8f:10:ba:ac:8c:8a:b2:
         da:81:da:ca:b2:5e:06:ff:91:cc:0d:a1:1f:00:51:1d:80:28:
         8f:11:6b:d7:39:4d:0c:64:72:d6:2c:71:c8:54:0b:05:f3:bb:
         b9:22:00:ff:14:df:12:9d:80:cb:72:90:f5:bc:ab:37:0d:8a:
         49:6e:2b:1c:68:63:d5:22:1f:b6:13:9c:24:0b:11:f7:1b:b7:
         99:a4:07:1a:0c:f3:37:57:7d:8f:33:7e:84:8d:1a:78:24:5c:
         38:07:3f:70:e3:f6:09:5f:68:58:5b:a4:07:ac:c2:90:ef:7f:
         0f:d7:4a:83:92:be:37:5e:32:cf:c6:3d:82:2c:ea:5b:3b:64:
         3c:54:2d:ca:68:3d:59:2a:61:9b:9b:53:f9:84:02:35:11:33:
         c5:61:66:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0BOcZ2/gDoJ43CylKP8cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0N2VlNzRhYzQ5MGUzMWYxZDQwNzY0ZjA5MjQxMWVlMjVl
YjE2NjUwHhcNMjQwNjIwMDUwMDU0WhcNMjQwNjIxMDUwMDU0WjAzMTEwLwYDVQQD
Eyg5ZGFkN2Q3MjJkNjY4MjhmNDk5YjAyOTU5MTM3ZThjM2I3MzAzOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbdx4IhZMSmugknyGIv29TKE8zFu
eO6bnvg3fSgzdBW1F8N4Lh8JVZ0JPq7mwTHmp4UMzD8UGvhWtopNjB9TOA5jnEZ6
RJAO2kwDS1gKphvdOoQrrhbotDirJXmtl7nkH4TyGVpOk1j1Bt1lgp1unNE5YNWd
ZuG0XqMzPFMMlIshplDkOOyR7Uxw61skD6/oRqgcSCAg7MWQyoBB3GW9w4dgLIgk
T/ZW1il9AL3PT6s5QeZxwEoqZQelijNFAZxes9GqBW1+0uBBVXtUFn+FZUj2zWWZ
XpNM7/2vLmAlvp+THiIgGc5E/s3nW8Fe3zSNZnVBgjK0aXMUtdufnr0IbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2tfXItZoKPSZsClZE36MO3MDkHMB8GA1UdIwQY
MBaAFAR+50rEkOMfHUB2TwkkEe4l6xZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgt
ZWE3ZjIxOGZkYjUwLzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xN2Y3NjktNTgzMy00ZjI2LTkzZjgtZWE3ZjIxOGZkYjUw
LzEvQkg3blNzU1E0eDhkUUhaUENTUVI3aVhyRm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/JvYXt9
qg1dK99Q1qd//tA9shlx1smxscT/dwOjk5mmn/aNNp71NUpA9G8dqptyTzwhCLa9
W6caMOEIqK0g5cMAbyfsc1J9iz2H1pyTONuTTNvtGLt0Hk3eu4tsg5xW7s+p9EiP
ELqsjIqy2oHayrJeBv+RzA2hHwBRHYAojxFr1zlNDGRy1ixxyFQLBfO7uSIA/xTf
Ep2Ay3KQ9byrNw2KSW4rHGhj1SIfthOcJAsR9xu3maQHGgzzN1d9jzN+hI0aeCRc
OAc/cOP2CV9oWFukB6zCkO9/D9dKg5K+N14yz8Y9gizqWztkPFQtymg9WSphm5tT
+YQCNREzxWFmNg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 12:21:36 2024 by rpki-client on console-fra.rpki-client.org