Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File:                     BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier:          Fj8MIFoE4MoWrZ+Lx/KzyvZC/TsifII4AxIdHbZcTU0=
Subject key identifier:   8D:11:B7:BD:C4:6B:AA:B9:9F:C3:4B:16:21:E3:F0:2E:77:45:EC:95
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer:       /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial:       018F3DE76A8250C99DA37CFB332C999EFD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number:          06AB
Signing time:             Fri 03 May 2024 10:02:07 +0000
Manifest this update:     Fri 03 May 2024 10:02:07 +0000
Manifest next update:     Sat 04 May 2024 10:02:07 +0000
Files and hashes:         1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: F9ktXHcmw3zMEwcHYsSWIetXvi3C2bx7dKM73upmOXk=)
                          2: JWd9drxkQf5dPdjNlyMVbY3u6gE.roa (hash: GMRw4fl+46mbENAEIcoKTWErGG68Qqpgov1pqLBTD5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:6a:82:50:c9:9d:a3:7c:fb:33:2c:99:9e:fd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
        Validity
            Not Before: May  3 10:02:07 2024 GMT
            Not After : May  4 10:02:07 2024 GMT
        Subject: CN=8d11b7bdc46baab99fc34b1621e3f02e7745ec95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:f8:9a:67:08:bf:81:38:68:71:0c:cc:2f:
                    db:df:23:14:51:1f:0d:a8:56:45:22:6b:6d:8a:0f:
                    31:9e:36:5d:5d:d0:10:38:df:41:ec:2d:aa:8a:67:
                    63:c7:86:87:0d:51:c1:63:5b:21:ca:75:90:b0:4c:
                    7b:30:14:13:94:c8:f5:20:7b:61:29:11:0b:d5:2d:
                    f4:23:69:1c:51:91:10:69:6b:16:27:37:aa:6e:0e:
                    d3:c9:b5:cf:5f:c3:a6:c9:e8:70:61:48:bb:61:3e:
                    35:2b:08:05:28:8d:b8:53:f1:27:ae:57:f5:e6:e4:
                    f7:d9:f3:06:bf:d6:e2:2c:dd:53:bd:78:72:3d:be:
                    96:ba:48:e4:32:9a:5f:b7:ef:27:81:04:1f:96:1f:
                    6d:61:19:28:5b:c8:89:1d:47:29:74:54:d2:a0:ce:
                    52:69:87:78:a4:25:b1:9e:f9:e4:69:7c:bf:a4:41:
                    5d:09:ab:b9:55:ee:a2:28:fe:42:94:84:80:83:88:
                    9d:c5:a7:83:3f:85:ed:1d:46:d5:96:6a:a5:84:50:
                    92:49:e8:92:46:d6:45:57:5a:65:dd:35:31:eb:44:
                    1b:8c:ce:e6:80:33:61:02:98:d5:b5:26:07:39:73:
                    e6:a6:42:ec:87:ad:b6:ab:7f:cc:49:68:e5:a5:ec:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:B7:BD:C4:6B:AA:B9:9F:C3:4B:16:21:E3:F0:2E:77:45:EC:95
            X509v3 Authority Key Identifier:
                keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:5e:1e:4a:b1:3b:d6:e1:b8:6b:87:b6:ed:c3:95:5e:00:
         1a:54:06:c6:25:78:b6:b3:64:6a:9f:e7:06:1f:c7:06:96:e2:
         45:80:94:b5:e5:08:54:77:93:c0:25:22:57:16:20:d6:bc:60:
         72:eb:06:c2:5a:47:b5:22:42:cf:bc:5c:3a:b1:1a:e6:5a:1b:
         d8:f6:3c:0c:20:a0:0d:da:8b:f9:6f:7b:7a:af:03:8e:b3:e2:
         34:19:e5:25:27:3b:34:29:b7:b6:a3:57:fc:3f:cf:bd:fc:a2:
         3d:6e:77:8e:66:02:31:05:29:40:52:da:20:36:51:cc:5e:39:
         ec:81:e4:a0:25:f5:6c:ea:d5:af:d8:31:3f:27:8c:79:93:35:
         c4:11:3b:04:e5:bf:f1:78:cc:1c:6a:64:8d:92:a6:f6:46:a5:
         a3:aa:7a:2e:80:e0:fc:10:f6:3a:14:80:05:7f:dc:c2:c6:5b:
         50:bd:bd:29:e2:66:05:c7:c6:32:29:ca:a2:23:61:34:d1:f4:
         51:e8:a1:b8:25:2d:c7:9c:8c:e6:ff:c5:fe:44:08:ff:3a:af:
         1f:1c:08:59:4d:f0:8d:37:66:04:33:bb:c6:db:ef:9c:f7:c4:
         3f:e5:6d:95:26:c3:f8:f6:26:5c:c5:34:88:8a:e4:ee:9d:ca:
         45:b1:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:01:02 2024 by rpki-client on console-ams.rpki-client.org