Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File:                     BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier:          wEfl438/Sq7wvQn0CvR3kvk94XmgHkmxzRme3Q047hY=
Subject key identifier:   57:E7:11:93:82:CD:2B:1B:AF:80:D3:01:24:62:14:67:9F:87:A6:02
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer:       /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial:       019369D8A0C9AA51BFBC8955D6C02FFCD33A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number:          104C
Signing time:             Tue 26 Nov 2024 19:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:24 +0000
Files and hashes:         1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: bWFlShZ0ztiT70Xebltmb5P9U+64gSAZkebwi/knrWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:a0:c9:aa:51:bf:bc:89:55:d6:c0:2f:fc:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
        Validity
            Not Before: Nov 26 19:00:24 2024 GMT
            Not After : Nov 27 19:00:24 2024 GMT
        Subject: CN=57e7119382cd2b1baf80d301246214679f87a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:83:8a:fa:5d:4c:ea:71:bf:ba:ef:47:35:
                    91:e7:1b:eb:33:c2:19:67:26:ba:7b:54:f7:b9:f2:
                    94:1c:32:46:15:bd:4a:32:a1:b2:05:b2:bb:43:f4:
                    56:05:cb:b6:47:20:71:ab:a9:89:57:62:01:7a:f5:
                    cd:95:9a:0e:dc:c5:1d:93:25:30:96:15:67:60:6c:
                    11:4f:b1:91:b3:ec:0e:c4:96:67:a1:6d:db:d9:c2:
                    b6:d9:52:45:cd:d5:5d:7d:69:b7:32:9b:2e:65:be:
                    3e:16:0f:bf:8c:91:1c:f3:b1:37:87:e3:8d:c8:9c:
                    8f:ae:c8:93:69:ce:7f:74:4e:fa:94:61:a4:b3:3d:
                    f0:4b:1e:c1:37:f1:ca:c5:f6:44:7f:27:53:f4:a6:
                    13:bb:00:b2:af:61:bc:d3:81:44:6c:72:19:83:20:
                    ac:a3:82:b9:00:70:02:5f:69:26:d2:58:6b:29:ac:
                    84:2e:33:87:e3:a3:33:64:67:bc:42:fa:3c:0f:52:
                    c8:13:b9:39:18:f6:e6:28:54:8d:53:7e:20:a1:fe:
                    31:fa:8f:8e:13:2d:55:e4:2e:e5:f9:55:ff:44:6c:
                    b2:38:9b:0a:4b:f3:92:76:82:76:4b:cc:1b:98:82:
                    3d:3b:cf:93:22:cd:62:4f:b1:af:78:22:3e:fb:1a:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:11:93:82:CD:2B:1B:AF:80:D3:01:24:62:14:67:9F:87:A6:02
            X509v3 Authority Key Identifier:
                keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:48:9c:b3:41:c9:78:e1:90:fa:1a:ae:f9:50:87:5e:92:
         ed:d6:48:ed:69:62:08:3f:71:54:3f:75:86:fc:a2:22:14:30:
         d5:14:03:e9:e0:84:60:15:33:39:c2:19:6a:ab:f7:f3:01:84:
         1b:5f:83:1c:b1:a2:f0:24:60:0c:2e:51:ad:cb:a8:a3:7d:8a:
         23:0f:10:75:22:97:a0:03:fe:74:b5:2c:9d:16:87:e4:a2:21:
         de:0b:98:71:e6:88:fd:90:f9:c3:1e:ed:16:2b:9c:95:d1:d4:
         b8:6d:6c:b0:b9:86:d2:5f:ff:f3:1b:f5:2c:52:d6:de:42:e6:
         6b:8f:2f:46:fa:0a:72:4b:64:9f:36:64:41:6e:da:c4:a4:b8:
         a2:b4:2b:2b:af:c7:da:c5:9c:92:69:39:bc:be:27:17:d1:dd:
         24:86:8b:e3:23:1c:1c:f7:61:ef:7e:24:46:58:59:88:f5:32:
         1d:09:e7:18:0b:90:7f:b4:f5:e1:3a:5c:b5:2a:85:d5:35:0a:
         57:48:b6:14:08:19:d3:0d:c9:23:08:54:53:87:cc:69:70:d5:
         15:14:1c:d5:28:28:c6:5f:46:3e:ce:85:23:c3:e2:62:81:ec:
         08:72:1c:fc:69:19:12:8a:22:04:0c:6d:b3:08:d5:d2:b0:89:
         ba:6b:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----