Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          3Sw6rNMUU00m00nZy1LDDpRTqkK68qvLO5ZyOk4CIow=
Subject key identifier:   00:3B:28:A3:F8:DC:E9:F4:F9:46:B4:A6:1E:8D:15:F4:DC:9D:46:20
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       0193568B2DABAD440092AD07E893B3E72519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          0693
Signing time:             Sat 23 Nov 2024 01:03:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:01 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: WHXoAjjkQtsBB4GoCNW7HeiSHrxHSz8/6haIiLjQzdg=)
                          2: vYX_vvdRNRPkWMX35Gz8yeM-s9E.roa (hash: KL7cFjaktApytasQS3MfXHfYS6b2/m7dxHJCx2dYW00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:2d:ab:ad:44:00:92:ad:07:e8:93:b3:e7:25:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: Nov 23 01:03:01 2024 GMT
            Not After : Nov 24 01:03:01 2024 GMT
        Subject: CN=003b28a3f8dce9f4f946b4a61e8d15f4dc9d4620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:ef:cc:14:e6:0b:76:dd:a5:f2:1d:d5:b6:
                    30:33:8f:d2:d1:d3:67:ae:d3:73:55:10:f7:2a:02:
                    56:90:4f:7a:b7:0d:be:a5:14:a1:3a:66:8b:36:38:
                    8b:d3:00:68:2e:4b:c3:57:76:53:65:bd:71:c8:b6:
                    36:d5:34:51:80:b2:4e:87:2d:5c:3f:ae:19:df:58:
                    f5:a5:21:29:20:75:8b:0f:23:45:b6:e8:3c:84:70:
                    60:2e:eb:b3:2c:52:96:7b:f8:98:74:9e:6c:bd:a3:
                    cd:95:72:c2:f1:23:db:9a:d0:1c:0f:5d:2d:9c:09:
                    cc:74:fe:f9:20:7e:04:ae:40:af:42:9b:74:66:4a:
                    5d:72:da:d3:82:22:a0:ca:4e:9e:fd:9d:2b:62:c6:
                    9a:cb:e6:1d:56:b5:f4:cf:a8:31:d6:b9:02:c2:2d:
                    21:28:1a:29:db:b5:32:48:2f:aa:1b:cf:79:74:dc:
                    d6:04:11:e2:22:a1:9b:bb:ef:8b:b3:09:c7:97:99:
                    15:07:c4:5b:b7:76:a9:a7:e7:ac:63:d2:64:36:e2:
                    c8:2c:e9:93:85:71:a2:e5:12:77:db:5e:99:75:92:
                    20:7c:d7:d2:1b:dc:db:7b:e7:dc:c2:0e:ad:bf:24:
                    f1:db:ff:18:c0:5d:a6:ae:e7:a4:4d:62:bd:44:08:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3B:28:A3:F8:DC:E9:F4:F9:46:B4:A6:1E:8D:15:F4:DC:9D:46:20
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:75:c5:a6:cd:a8:20:4e:41:5f:cc:1b:77:88:d3:d9:d8:
         ef:46:ee:5b:cc:75:f8:56:f7:a4:7a:d8:76:1c:f5:b9:94:8a:
         28:7a:88:a9:8f:36:0a:79:0b:e2:93:a6:b9:03:bc:b6:c2:4c:
         8a:11:d1:c5:35:f2:d2:1e:0f:cc:d6:2f:0f:45:74:0f:88:65:
         1e:1d:be:08:c6:20:46:49:37:07:28:36:ca:f1:f1:5e:3f:8a:
         55:c1:07:1e:df:14:eb:78:f6:ef:5a:dc:38:15:00:1b:25:b8:
         61:75:70:36:57:f8:e0:ab:49:60:5a:6c:ca:a3:58:cf:86:0a:
         52:43:71:6f:e0:95:97:79:ac:20:ac:5b:ab:5c:94:dc:52:f3:
         49:b4:20:c2:22:c0:e0:d5:cc:8e:df:39:8d:25:09:2e:1c:5d:
         56:ee:e8:4e:09:88:00:5a:d0:e2:2b:e7:d6:61:b2:5d:04:97:
         31:46:fd:4e:47:2f:f9:e1:21:98:e5:1d:1e:47:ec:a8:90:3b:
         b1:0a:36:0a:dc:c6:30:2a:67:0d:85:e4:73:22:69:a7:c3:44:
         47:e1:c3:c3:59:ab:50:d7:e1:b1:54:9a:6f:d3:07:04:55:23:
         e6:3a:c4:c0:b0:4b:44:59:89:81:e5:d0:bd:0d:36:a2:4b:86:
         1b:ea:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:01 2024 by rpki-client on console-ams.rpki-client.org