Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File:                     BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier:          Op9ympP+LAic2kkrUTOvPeIQAb5wkI9aTi9sgoSaEfo=
Subject key identifier:   2A:4B:17:43:4A:50:30:AD:0A:E4:24:C3:7C:3E:A7:73:B6:C0:18:F8
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer:       /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial:       0193591BFEF6C962270BA464860B09FED59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number:          02FB
Signing time:             Sat 23 Nov 2024 13:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:26 +0000
Files and hashes:         1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: RRxAgb9iFl086sIRWZVCKFuZ6RMvYtYq+1CRWu7YwQI=)
                          2: D3hr63BRzI_bVwohYdyMQduoIyc.roa (hash: 8yiSRHLx4HfCASCDmqdadQBawFbY/tFW6EX4vrpKtJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1b:fe:f6:c9:62:27:0b:a4:64:86:0b:09:fe:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
        Validity
            Not Before: Nov 23 13:00:26 2024 GMT
            Not After : Nov 24 13:00:26 2024 GMT
        Subject: CN=2a4b17434a5030ad0ae424c37c3ea773b6c018f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:c7:57:b6:35:19:9f:fb:ec:e3:c7:9d:cc:
                    28:e8:1c:95:f9:14:5d:3e:47:a5:9a:20:4d:5c:f1:
                    21:fa:fe:83:07:b7:8c:51:57:ca:4f:a4:ee:55:79:
                    99:f3:1a:fd:67:58:16:d7:01:62:e7:75:6b:b5:a7:
                    93:66:66:a8:c8:f6:a0:9c:ed:b9:75:57:bd:db:24:
                    25:bd:46:2e:e1:fd:3c:eb:e3:97:7c:ec:3a:11:a0:
                    51:8b:0f:6d:82:88:0a:63:26:37:29:9b:ae:80:0b:
                    a3:61:0c:40:2d:13:ca:d2:57:4b:fc:14:a0:06:8b:
                    b4:ae:aa:fa:85:b3:20:2a:37:0d:53:bb:55:57:94:
                    6b:0a:55:1c:7d:96:36:03:2b:b5:47:a8:33:5d:55:
                    49:0d:52:d4:a1:ab:13:f2:9a:e3:34:a6:33:04:28:
                    3c:a0:6e:c8:12:4e:f1:30:c6:78:f6:82:aa:3b:dc:
                    e0:18:6c:af:a0:ff:22:92:77:1d:f6:5e:59:7d:ba:
                    8f:33:0f:5a:e4:5b:ee:17:dc:25:9b:89:a0:65:0f:
                    44:77:e8:86:a5:3c:5d:1a:78:f7:80:45:57:9d:84:
                    9e:d1:a4:ab:f5:5d:cb:3f:f5:e5:69:76:ae:21:96:
                    b8:d1:47:bd:f4:cf:3f:b4:4f:37:57:7d:e1:3c:5d:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:17:43:4A:50:30:AD:0A:E4:24:C3:7C:3E:A7:73:B6:C0:18:F8
            X509v3 Authority Key Identifier:
                keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:c8:81:99:e4:d6:f4:51:92:a2:35:47:e1:12:f3:19:6b:
         a3:ef:1d:f3:05:d7:18:ec:38:fd:29:79:54:0e:c9:d6:ac:d6:
         37:41:75:67:4c:da:f4:ca:f7:b9:d2:79:ff:f9:b0:71:19:78:
         12:cc:b2:e9:e2:07:49:2a:58:e6:e6:fd:d7:6b:0f:00:46:6e:
         15:82:a4:a1:09:42:43:eb:8c:20:e3:45:04:6f:24:3b:3c:07:
         1b:17:c4:85:4f:40:1a:ef:6d:6f:73:42:cb:0c:9b:aa:1e:6b:
         ef:29:6c:db:e1:a8:55:7d:7f:f3:7f:78:86:c1:03:5e:8a:80:
         2a:be:95:ba:b1:27:4e:56:d0:73:c2:c5:9b:e5:7e:1c:1c:a3:
         97:39:06:f3:35:39:eb:17:fc:6f:17:03:b1:a1:40:24:43:f9:
         87:67:59:33:d2:a7:0c:32:5f:a3:c8:65:8c:8a:7b:35:ce:99:
         12:04:87:92:60:e0:e8:da:69:88:f8:e0:18:9f:55:0f:9b:21:
         cb:1f:37:66:4c:b5:8b:a8:9b:c2:58:d2:2f:b2:f3:7c:63:4a:
         65:49:e9:7d:4b:87:0d:8c:51:7f:d4:a4:62:f5:f6:67:d9:e8:
         28:0a:ee:26:4e:c7:a1:f2:67:67:3a:1f:6f:5a:59:36:36:57:
         d9:f6:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:46 2024 by rpki-client on console-ams.rpki-client.org