Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File:                     BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier:          U2tokpNhZSJ1ZMGy3PwXpXgcHSbySPHbjAEVJsfL514=
Subject key identifier:   CF:63:29:95:B8:B1:DA:61:D0:1D:50:0F:17:5A:0F:48:A9:F8:07:AE
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer:       /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial:       019352ACB9337F88021AC34C12D6B6804011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number:          12BD
Signing time:             Fri 22 Nov 2024 07:01:11 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:11 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:11 +0000
Files and hashes:         1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: E5NRB92hj1jYEIru7EaHoEr9D5qEQC0ENnNofgBSQ+M=)
                          2: T_7i3rLIBlY5-qWL5W5dClUzyfo.roa (hash: khlHpot/tPBNqi4qzDJ50NeMQvRYix9DN5c/4ak5ro4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:b9:33:7f:88:02:1a:c3:4c:12:d6:b6:80:40:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
        Validity
            Not Before: Nov 22 07:01:11 2024 GMT
            Not After : Nov 23 07:01:11 2024 GMT
        Subject: CN=cf632995b8b1da61d01d500f175a0f48a9f807ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:73:3c:34:dc:71:99:80:23:89:dc:84:0c:
                    f3:de:ab:4c:c5:35:7f:ba:1e:30:66:f7:27:a6:7f:
                    40:fa:08:27:57:7c:73:26:fc:a3:02:0f:46:61:3d:
                    ac:29:67:08:96:87:50:90:88:67:be:6e:36:a4:01:
                    5d:51:48:ec:63:fb:12:2c:59:d3:3a:35:d0:16:d5:
                    4e:53:d9:cc:e8:33:8a:3d:1c:66:f0:67:63:d0:c8:
                    8c:6a:93:72:4e:62:8b:42:83:80:b1:cf:43:aa:b7:
                    4b:1a:f3:38:a5:86:eb:e5:7b:ea:7c:44:e3:47:f7:
                    3c:51:46:00:6d:2b:cd:e0:00:09:f2:00:0a:53:3a:
                    3b:e6:88:55:8b:1a:5a:d8:ca:f7:9f:72:03:f4:ac:
                    b1:af:46:b3:cc:49:8a:5c:83:96:18:ee:69:ca:af:
                    66:65:52:c8:43:2b:9f:f0:3c:9b:a6:2b:50:24:d0:
                    02:d5:bb:4c:87:e4:97:05:5e:9c:4f:10:cc:fe:91:
                    ad:d2:e0:3b:23:dd:96:00:f2:70:d7:19:95:d5:57:
                    2d:27:14:c2:b1:93:a3:7a:60:09:85:a5:dd:ec:ca:
                    79:30:31:7d:52:9b:41:09:58:5b:45:b3:96:e8:4d:
                    2e:a5:54:0a:25:bc:cc:d3:be:e8:eb:6d:e2:33:1c:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:63:29:95:B8:B1:DA:61:D0:1D:50:0F:17:5A:0F:48:A9:F8:07:AE
            X509v3 Authority Key Identifier:
                keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:95:0c:6f:ff:14:45:38:0d:31:5a:8f:d2:f7:bb:e5:07:18:
         f7:26:b2:cd:ba:84:a7:ad:dc:56:e8:c3:4e:28:88:59:c9:dc:
         7e:95:55:18:95:bb:6d:6d:49:28:15:dd:21:9c:10:b8:ef:31:
         ac:e7:0d:5f:0b:b8:bd:98:ea:61:22:8d:31:da:fa:42:25:34:
         17:4a:75:6d:a1:2a:55:e2:f4:e0:9c:d8:08:46:58:c4:73:22:
         9b:ec:a7:b7:65:23:8a:ac:ee:34:eb:b9:f3:5d:97:67:a1:68:
         38:ba:7b:26:c2:b5:32:bf:85:e2:93:b3:c2:c4:db:37:a5:2d:
         7a:db:b4:cb:c8:db:41:a6:30:dc:84:f9:d5:70:60:94:7d:ba:
         4f:cf:be:69:55:45:11:e9:2a:22:54:90:34:6b:c7:93:9a:ea:
         c8:b1:8b:75:37:a9:74:06:57:99:4e:2d:c8:6d:2c:89:4f:42:
         80:e5:66:01:ee:d5:13:75:e4:22:16:da:9a:19:28:92:d7:10:
         33:bd:c7:0b:e2:4d:3b:48:c1:1d:ec:b1:5c:60:f8:02:f5:4f:
         98:ea:43:18:4b:8b:31:65:39:b8:83:4b:18:54:8f:6e:2c:4a:
         d9:5c:83:7b:a5:4a:db:6f:0f:4c:78:15:a1:46:ed:91:35:da:
         92:91:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:37 2024 by rpki-client on console-fra.rpki-client.org