Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File:                     BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier:          aqbyrqt+pUl8Bel3WLis+o2bmFQgJ46E0ClKhDlfCV0=
Subject key identifier:   D9:0C:6A:56:81:47:4E:6F:67:06:20:8F:A4:B6:30:87:3B:D7:89:17
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer:       /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial:       0193568A0505126D71927BD575C81C34EA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number:          0839
Signing time:             Sat 23 Nov 2024 01:01:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:46 +0000
Files and hashes:         1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: 6A9ZxrRBmuBS/9uPKvZD24q3FV5cD8GxBZcG5N9eAe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:05:05:12:6d:71:92:7b:d5:75:c8:1c:34:ea:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
        Validity
            Not Before: Nov 23 01:01:46 2024 GMT
            Not After : Nov 24 01:01:46 2024 GMT
        Subject: CN=d90c6a5681474e6f6706208fa4b630873bd78917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:68:ee:51:d2:f2:f7:35:da:c8:66:be:49:
                    a9:11:b0:2e:3a:c9:36:33:06:ed:bf:59:bf:46:71:
                    14:ff:30:15:8b:25:15:b5:0a:46:01:ef:d8:1e:59:
                    75:4d:b5:ed:c1:8c:4a:8c:6a:a3:d3:ef:7d:dc:61:
                    d2:51:aa:d4:56:23:9c:95:be:ee:a7:f3:bd:d8:d7:
                    27:5a:b1:ff:7a:55:2e:cb:57:1c:47:91:cb:88:7b:
                    d0:6f:e3:09:82:9f:02:d4:c4:a9:12:fb:a4:47:ea:
                    c4:d2:72:b5:44:ec:7e:fc:fa:5f:bf:53:af:9a:3e:
                    31:80:11:fe:96:5e:e7:df:52:41:bc:1e:1c:58:67:
                    56:e0:c5:2e:52:f1:c7:ba:a2:80:78:e6:5b:c2:55:
                    68:97:68:b0:ee:91:47:f2:23:cb:4c:6e:bf:1d:ee:
                    4a:34:2d:fd:c3:42:81:51:e1:3c:2b:f3:de:70:e9:
                    cf:17:ce:43:68:ec:e6:d9:3e:d7:2e:de:c2:35:ac:
                    a6:49:b6:5d:7d:ad:a8:41:24:8b:cf:df:d3:63:07:
                    d0:24:45:e9:40:b2:ab:09:13:b5:a5:47:74:41:cd:
                    0b:e7:da:d9:8d:ba:c6:ed:52:3c:d9:0b:02:04:08:
                    e8:fa:d9:f2:aa:8b:5f:6a:9f:45:e8:87:0c:50:44:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0C:6A:56:81:47:4E:6F:67:06:20:8F:A4:B6:30:87:3B:D7:89:17
            X509v3 Authority Key Identifier:
                keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:1d:97:0a:03:59:6c:8d:39:39:cc:97:a9:d3:fb:05:c8:
         7a:39:62:1c:da:df:44:0e:6f:da:71:68:e8:89:e8:d3:b4:8c:
         d2:7b:74:87:a1:e6:57:f3:92:3a:0d:ba:a0:fc:e5:d6:2c:c7:
         06:d4:24:6d:99:c8:4d:53:3b:ee:1e:3b:95:7f:e0:2a:cc:45:
         4a:e0:bb:d5:a4:2d:33:c1:1b:cb:ba:77:59:eb:3e:4f:66:b2:
         4e:e0:17:56:d9:f7:0a:16:e4:c6:29:f6:86:e6:32:16:2c:79:
         ef:51:1c:68:c9:1c:ea:71:0e:cf:e2:4d:3a:17:b5:64:b4:6a:
         fd:9e:4d:aa:0a:17:7a:f7:ce:96:71:8a:65:46:a0:76:5a:f5:
         f6:b4:b0:ce:f1:d0:c5:ff:7d:51:c4:41:b9:b3:f3:99:a5:0b:
         e4:98:a3:c3:b7:5b:2b:36:da:26:0e:56:2e:57:ea:ee:8d:ed:
         b9:04:b3:d4:2b:e3:0a:ed:2c:54:f7:fa:da:71:c0:fe:88:b3:
         1c:80:d0:9c:00:12:16:65:f9:3c:b0:37:f9:13:6b:82:4c:a8:
         35:54:57:28:60:16:63:4e:6b:4b:24:f2:67:00:97:9c:37:73:
         0a:1d:39:5b:f6:81:e6:4f:79:a2:04:bf:7f:2a:c3:2b:ea:ca:
         5c:31:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:58 2024 by rpki-client on console-fra.rpki-client.org