Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File:                     bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier:          iWxBY+x+damHC/8GAPISH28k6jfmGvY1Bujy4T+XlbE=
Subject key identifier:   C2:C4:C8:16:63:C5:D1:AC:A6:E6:3A:1D:5D:1D:7A:9F:BA:3E:BC:1D
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer:       /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial:       0194C46361C86B9C22C151BFE3E66C07A862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number:          0EAF
Signing time:             Sun 02 Feb 2025 02:00:34 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:34 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:34 +0000
Files and hashes:         1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: b/PJku+A7apXwlx4Eq7r5b86tzDqBn3nq5pI2LZVUI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:61:c8:6b:9c:22:c1:51:bf:e3:e6:6c:07:a8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Validity
            Not Before: Feb  2 02:00:34 2025 GMT
            Not After : Feb  3 02:00:34 2025 GMT
        Subject: CN=c2c4c81663c5d1aca6e63a1d5d1d7a9fba3ebc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:5e:4e:d3:63:e8:b6:d5:62:4c:b5:74:c9:
                    07:04:9b:67:d2:1e:48:4d:51:a4:72:61:2a:1f:32:
                    34:a8:bf:a0:ba:bc:c7:04:99:2f:f1:d7:d7:e4:ff:
                    2d:63:bb:db:41:5a:48:06:3f:fc:ae:f2:09:4f:3e:
                    93:1e:a4:8d:15:62:b3:3c:52:5e:d3:86:20:53:ea:
                    e8:df:c6:ca:dd:7f:25:1a:22:89:76:ac:63:c6:4d:
                    50:de:15:54:90:66:e9:fb:20:a6:07:90:ac:8d:b3:
                    70:c9:fe:03:ff:cd:c8:57:8a:76:bc:27:51:8a:4e:
                    50:58:6f:26:9e:b5:c5:47:bc:b4:f7:48:08:44:bb:
                    07:e7:33:02:ee:07:69:08:db:99:5b:86:39:06:21:
                    c2:b0:27:63:9f:bd:4f:91:df:0b:52:48:b3:8f:5b:
                    f2:9b:e9:c9:3a:fa:c5:ac:db:a3:93:65:14:f9:a1:
                    1a:a0:f9:ab:0b:88:a2:6f:aa:d2:7b:72:3f:72:01:
                    71:5e:8e:dc:51:9c:90:89:40:bf:57:b9:b6:83:16:
                    6f:b6:07:7e:fa:6e:ee:46:74:8c:e9:41:09:d9:d1:
                    36:fa:01:2c:58:26:82:d2:a7:81:3d:b3:52:fb:e2:
                    44:17:76:62:99:28:7a:af:5f:14:2e:fe:be:8f:6d:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C4:C8:16:63:C5:D1:AC:A6:E6:3A:1D:5D:1D:7A:9F:BA:3E:BC:1D
            X509v3 Authority Key Identifier:
                keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:99:5d:02:84:49:a5:df:e5:38:5e:ca:b6:96:5c:a2:ba:b4:
         bd:ed:1c:ad:3d:a1:31:dc:72:92:0f:3b:30:cb:b1:3c:39:65:
         08:e6:27:b6:03:ad:e9:dc:f3:75:8b:94:a9:19:51:83:fa:01:
         5e:0c:fb:e3:8d:7b:a0:c1:84:aa:eb:13:08:83:a1:62:5f:dc:
         57:04:ac:75:f5:09:d0:a6:3d:cc:31:2e:3e:b9:ff:a9:df:bd:
         21:62:2e:40:0e:94:b6:3a:19:b0:58:0f:12:5a:f4:3c:d2:39:
         17:c6:32:e2:f4:e3:f7:b2:3a:51:40:18:7c:0b:16:48:62:9e:
         9f:f1:f2:f0:be:a5:d5:ec:e7:66:06:56:33:a9:62:5d:61:f6:
         b2:c6:0f:bb:2d:e8:12:ac:dd:f6:d2:39:65:6f:38:dc:97:f0:
         e5:87:3a:53:39:1c:42:d1:74:ad:11:ae:1a:bc:7b:5a:dc:a6:
         2d:78:05:2c:50:71:c6:84:4f:87:e3:51:83:06:9d:61:e3:ca:
         b5:14:10:d0:df:09:27:ac:6b:63:40:b2:8a:4e:c1:96:de:bd:
         86:77:22:96:d3:bc:a6:17:2b:77:86:46:61:d2:48:bc:56:c1:
         5f:b4:f3:54:eb:a7:06:4f:d1:ee:93:e9:0c:08:56:da:e3:63:
         10:ed:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:18 2025 by rpki-client