Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File:                     BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier:          FkpFjqVoYhYFmqsPdzXLqkWTVgrFuZNrm1mkXBRCkNI=
Subject key identifier:   16:B3:FA:61:00:20:CC:C6:8C:51:A2:00:77:BC:C0:5B:30:F1:6E:2A
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer:       /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial:       018F17465233349E6DF5A279E5E51405535E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number:          108C
Signing time:             Thu 25 Apr 2024 22:00:35 +0000
Manifest this update:     Thu 25 Apr 2024 22:00:35 +0000
Manifest next update:     Fri 26 Apr 2024 22:00:35 +0000
Files and hashes:         1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: eCxC2tmgoSL5hb0mD5jtuWH7hVIzEvvWL39/ZI+AEBg=)
                          2: T_7i3rLIBlY5-qWL5W5dClUzyfo.roa (hash: khlHpot/tPBNqi4qzDJ50NeMQvRYix9DN5c/4ak5ro4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:46:52:33:34:9e:6d:f5:a2:79:e5:e5:14:05:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
        Validity
            Not Before: Apr 25 22:00:35 2024 GMT
            Not After : Apr 26 22:00:35 2024 GMT
        Subject: CN=16b3fa610020ccc68c51a20077bcc05b30f16e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:1a:71:03:fa:0e:db:6c:c9:57:f3:fd:81:
                    16:99:5b:16:f2:03:86:23:d8:27:37:1b:22:f4:4e:
                    66:8b:c1:3b:b9:76:a6:17:ee:87:dd:b6:8f:92:4d:
                    34:b0:4f:4d:f3:60:a3:bf:c4:c6:18:de:d8:a2:ee:
                    94:50:53:c0:24:f8:82:7f:1c:2a:6f:c7:b7:80:5a:
                    2a:47:b3:d0:a3:a4:83:53:ec:8b:a5:c3:42:ee:3d:
                    ab:1b:9e:5f:c6:30:7f:73:a9:ce:51:b0:0c:eb:da:
                    77:88:aa:41:e2:e5:ba:8e:53:2d:7d:69:6a:3d:e7:
                    11:57:d5:f8:03:52:ab:b8:23:cb:ac:8e:6d:38:f2:
                    3e:f1:0f:9d:18:31:a9:51:be:7d:06:4f:28:5a:a3:
                    aa:4d:1d:3d:9e:d3:58:f0:e3:0e:5b:b2:7c:20:7d:
                    6d:93:39:4c:9c:e4:fb:61:2b:11:43:fc:c0:02:f6:
                    06:c8:6f:b8:ad:ac:d4:be:b0:f0:84:33:5d:7d:72:
                    be:5d:14:b1:e8:2e:24:2b:79:a4:6d:46:60:df:c9:
                    e1:49:f8:54:4a:48:b9:53:2f:31:ac:e9:5d:d2:bc:
                    aa:44:e5:53:47:c8:4e:02:c7:fa:23:7c:7a:f4:2c:
                    80:f9:74:b4:9b:28:49:b0:cd:23:9f:d7:9f:de:47:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:FA:61:00:20:CC:C6:8C:51:A2:00:77:BC:C0:5B:30:F1:6E:2A
            X509v3 Authority Key Identifier:
                keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:9e:9f:6b:80:a4:cd:86:12:52:65:3f:7e:ee:e9:05:ac:
         38:3f:51:d6:17:b0:4b:f6:26:6b:f8:46:2c:79:8c:36:5e:b8:
         5b:be:db:9d:32:f3:32:96:83:41:ad:2d:0b:82:3a:77:9c:cb:
         a2:71:4a:42:44:fc:89:b0:34:d7:b3:d3:ca:92:2e:29:45:17:
         35:66:fc:36:6b:1f:2e:fd:70:88:70:ba:4a:cb:33:16:1b:11:
         6e:30:58:43:b1:c9:9a:70:0e:a6:f3:98:10:a4:0e:55:49:18:
         10:0c:04:68:c2:96:06:20:98:f3:7f:85:29:5a:43:5a:50:cc:
         77:ef:e1:8e:b5:0e:07:ca:e6:1e:6e:c7:6d:4b:1d:6b:88:f1:
         18:af:67:76:bc:10:0e:13:61:d7:be:6a:2f:a1:22:25:a0:d2:
         d6:d0:a4:d7:22:89:67:e8:1f:3d:10:f8:85:75:aa:3c:95:5a:
         44:c1:98:ec:0c:e5:8a:4c:0f:5f:4b:e0:b2:fb:44:06:a2:9b:
         60:a8:70:77:16:17:20:24:1f:18:26:de:6d:58:7f:54:7f:b2:
         d4:17:4f:bb:d6:34:f0:a7:9b:0a:42:47:89:d2:23:c2:44:a1:
         4e:57:8b:a9:c2:14:f8:6d:f1:ce:a9:da:d0:14:80:94:67:21:
         a7:7f:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:59:52 2024 by rpki-client on console-fra.rpki-client.org