Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          YmsyqUwrh6BfStjala0HsmaneE+z0JcdChgtIGdUGaU=
Subject key identifier:   47:7C:E3:72:49:87:B5:FE:76:93:93:0E:01:34:79:08:31:B7:DC:B9
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       0193568A6D82FB9229E7D809CEADDB9789CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 01:02:12 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:12 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:12 +0000
Files and hashes:         1: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: NTuXt8csy+QQNjNQY1AB6zeH7i2XG+Ni+IyZytjQ4tI=)
                          2: JVocQaz43ru0EgnrxVAQfCmXIac.roa (hash: na0YmFEXnbPtyx2psP2QATfD8DCAdLNOIEHuqoBIfB0=)
                          3: VT2fxTxcc_X8MZ3Enklz8A5h5Ok.roa (hash: vpm7uOalBspuo3QrmOpYM/t7oKsNQDdetCbc2VKz8eo=)
                          4: WWAxwrjQNnyuI0Xk0vwDaJRcK8k.roa (hash: oE3MOzEkpbtkz1iLRJ1zRCK0Yrj8orhtWDfIlKaZU/w=)
                          5: ZoBeeykcYxeuEegep5khwL1bLRw.roa (hash: XgvSLLNyl1zbXSh11UADEaDdAtVhFV0isfP6sMpXICw=)
                          6: ifGG_QLeIRSTklFn12GeN6QX8zM.roa (hash: IsT/fjhFqX6M446oO3ckjUumf+0TsLGHVCGSBjDuHTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:6d:82:fb:92:29:e7:d8:09:ce:ad:db:97:89:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Nov 23 01:02:12 2024 GMT
            Not After : Nov 24 01:02:12 2024 GMT
        Subject: CN=477ce3724987b5fe7693930e0134790831b7dcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:03:a2:b1:56:a0:34:84:f0:7f:e3:ef:50:
                    76:46:9d:be:13:f2:08:83:33:d0:90:89:36:a7:bb:
                    8f:ec:4e:36:d1:f3:ee:cf:25:4f:50:06:9a:a6:b5:
                    72:8e:be:78:ec:4c:6c:60:c4:ab:08:24:b1:a1:02:
                    ed:c1:48:bc:52:31:2a:43:31:62:95:b4:57:79:86:
                    a0:fc:a9:6d:49:24:21:72:c0:75:a6:7f:a3:0c:37:
                    d5:d8:37:78:59:6a:d8:89:fa:5a:9f:cf:71:c4:3b:
                    5a:66:78:b3:96:56:e2:52:fa:8f:ab:2b:54:dd:6b:
                    bf:59:e2:e8:1f:b6:ac:bf:40:e7:16:b7:8c:d8:b3:
                    77:59:9e:57:d7:fb:45:13:9f:09:68:51:0a:1e:76:
                    51:ab:ac:64:1e:05:b2:a7:8d:3e:6b:46:a9:27:2f:
                    70:c2:8a:e3:31:92:a0:35:e8:e6:eb:5d:45:02:0f:
                    db:d3:86:50:8a:49:aa:55:eb:80:bd:59:93:bf:5b:
                    e2:b9:8d:28:fe:ad:c8:5f:bb:26:d3:10:a3:2e:f6:
                    f2:5b:e0:f2:5b:de:ac:5e:f5:30:dd:94:fe:f1:c9:
                    2c:16:1e:29:a9:09:18:e7:09:99:04:88:4a:6b:d6:
                    31:0f:87:43:53:30:63:9b:46:75:9c:56:9a:fa:f6:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:E3:72:49:87:B5:FE:76:93:93:0E:01:34:79:08:31:B7:DC:B9
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:75:63:0c:65:7d:ed:79:93:25:4e:1b:40:86:70:36:ae:
         0f:69:83:58:ba:8c:c9:8b:25:ca:83:23:91:e9:12:03:69:b2:
         e7:d5:85:1a:bd:68:ca:c0:63:c1:81:92:46:d6:ad:42:b7:c7:
         ef:a3:08:fb:9a:4c:0d:aa:62:4c:ea:5d:23:57:fa:6c:ae:55:
         0a:df:cd:ed:82:ff:ce:67:ec:81:71:2a:e1:9e:0f:71:02:f3:
         c1:bf:f6:c6:cd:c2:3d:3c:33:7b:dd:76:76:18:7b:ba:26:51:
         18:e2:cf:3b:e2:d6:cb:2f:26:e9:84:b6:2e:55:c7:12:54:09:
         c5:41:36:3d:d5:ac:11:c8:64:c8:6c:fa:5d:aa:55:0c:0d:19:
         fc:3f:d4:6e:07:db:99:35:2d:6f:a3:b7:49:a5:c4:a5:31:a3:
         04:10:37:a3:62:35:f5:c0:55:0c:92:a2:79:34:ba:56:56:8d:
         e1:59:b0:0a:d5:0f:85:86:52:e3:bc:2f:13:f5:be:bc:a2:0e:
         2f:ab:10:4d:92:e4:18:46:cc:ff:24:0a:0c:2c:e2:b4:43:ba:
         09:7a:22:23:da:3c:c7:8d:d0:5a:4e:fa:02:20:23:67:ff:4e:
         aa:d7:1a:ff:05:eb:f6:90:76:a2:60:fb:2b:c2:29:f4:6e:0e:
         cf:65:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:26 2024 by rpki-client on console-fra.rpki-client.org