Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          5tmhT5XgcqGZK3u/tdughiGG/EskDZn5+QcKHOrD5hY=
Subject key identifier:   D5:89:32:A0:A2:D2:AB:A7:6B:3C:96:F6:44:C1:32:6F:3A:E5:93:76
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       018F1747857F1E74159EEE547AFA3213EFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          0460
Signing time:             Thu 25 Apr 2024 22:01:53 +0000
Manifest this update:     Thu 25 Apr 2024 22:01:53 +0000
Manifest next update:     Fri 26 Apr 2024 22:01:53 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: 15ABtGHjf45Q6ssXtGaDN+lApI5IbYiwgY54MUE5JoY=)
                          2: vYX_vvdRNRPkWMX35Gz8yeM-s9E.roa (hash: KL7cFjaktApytasQS3MfXHfYS6b2/m7dxHJCx2dYW00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:47:85:7f:1e:74:15:9e:ee:54:7a:fa:32:13:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: Apr 25 22:01:53 2024 GMT
            Not After : Apr 26 22:01:53 2024 GMT
        Subject: CN=d58932a0a2d2aba76b3c96f644c1326f3ae59376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:80:2b:45:ea:f1:ae:34:28:ef:08:14:38:
                    d7:11:30:2b:87:8b:67:82:cc:bb:9f:40:85:8f:25:
                    42:5d:11:c4:d5:ef:3e:1f:84:25:5f:30:e9:75:d1:
                    c5:04:3d:8e:d6:67:c0:68:bc:df:88:8e:5b:74:79:
                    f4:d9:4b:23:21:bc:0c:d0:94:19:10:a4:32:0e:ae:
                    62:a7:ba:0b:a7:71:83:af:ea:9d:6d:ba:fe:d0:9b:
                    c5:ae:de:24:4a:09:91:ce:d5:20:4c:87:04:00:30:
                    27:aa:30:33:68:d5:76:e3:ee:f2:aa:e6:75:13:5a:
                    0c:5c:fc:52:d2:bc:63:9f:46:8d:8f:a2:f2:aa:7f:
                    a4:0e:92:94:b1:66:e7:68:24:d3:1e:2c:22:8e:c5:
                    bd:12:0d:11:cf:d4:f1:40:d3:4f:d1:aa:e7:99:72:
                    1d:29:fb:3e:31:c5:d4:8e:2c:6b:2b:26:06:ff:df:
                    91:35:80:9f:d9:c3:9e:fc:37:b9:c1:ed:73:7e:43:
                    ca:47:86:a4:c0:20:32:26:80:04:09:60:8e:55:0a:
                    9d:18:1c:55:d6:ee:af:22:1e:c7:5e:51:98:19:83:
                    c0:f0:79:95:7d:74:a5:dd:a9:be:24:7b:32:7f:e3:
                    ce:94:1f:5d:a3:ef:b7:f7:34:78:3f:3e:2e:42:57:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:32:A0:A2:D2:AB:A7:6B:3C:96:F6:44:C1:32:6F:3A:E5:93:76
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:42:a2:fd:22:a0:d2:72:5c:1d:9a:b2:93:ea:52:ab:bb:
         33:bd:37:fe:69:69:e1:d0:bb:3f:a2:83:72:83:44:2c:5e:56:
         8c:5e:90:38:20:de:a7:58:8b:9e:ca:3e:3d:71:c5:50:bd:6b:
         d5:6b:f8:cf:65:9c:90:b6:3d:0e:70:aa:8e:2f:6a:34:71:f1:
         64:40:a3:4a:eb:dd:72:15:84:6e:1a:e6:6a:ee:f2:17:c3:18:
         bb:70:92:de:cd:92:d3:a1:6e:9e:cf:55:e1:71:f2:a6:7e:91:
         20:82:c8:e3:07:16:3d:c7:bb:89:ee:1e:38:56:fa:9c:63:5c:
         ee:75:63:7a:ff:5c:10:87:14:e6:01:b7:ab:fc:b7:67:24:dd:
         c1:0f:28:17:66:a1:2c:e5:f4:fc:bb:ac:c4:86:56:4a:d7:89:
         0f:ec:9a:45:40:75:bd:06:ed:ab:d1:0c:5d:45:7e:07:1f:78:
         b5:7a:46:13:c3:1f:bb:5f:d1:6a:03:45:f0:de:10:43:22:71:
         41:a5:a5:7e:eb:c1:98:3b:c2:f7:25:7c:46:34:98:ca:20:63:
         52:28:e2:8b:8f:e5:37:e0:7c:50:cc:f2:a8:17:3f:cc:77:8c:
         7c:ff:5e:d0:0f:72:51:ed:58:3d:86:1b:65:ab:d3:e3:89:c7:
         e5:5e:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:58:23 2024 by rpki-client on console-fra.rpki-client.org