Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File:                     BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier:          1WIVv4Qpt4HacrjSL1G44vg9m/CKh7/U4GOOLHIJAyg=
Subject key identifier:   95:38:52:9C:FE:96:E9:F1:40:3A:FF:2A:B8:17:9F:C1:63:5F:87:E7
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer:       /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial:       01906DF45B08A72281DAD45DEAA08E41DE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number:          11F1
Signing time:             Mon 01 Jul 2024 11:00:48 +0000
Manifest this update:     Mon 01 Jul 2024 11:00:48 +0000
Manifest next update:     Tue 02 Jul 2024 11:00:48 +0000
Files and hashes:         1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: lx/zGMnWfrfJOmPFl6gMNn59RL/l3B8PivrkP8agZwQ=)
                          2: Od9un52XqI25-RK-Oxi3mTgNoXI.roa (hash: eJ9i8PZfc4Qg8pLnPJUKtEbR0A7hjlRE02a6r2JpLF4=)
                          3: kz-9ZGLsy2dKn5SEabnHs_SBpWI.roa (hash: Fmmq4OEnqBvxnH8zWH0oXt2KDdrf61+AoO3f1wgV4uM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:f4:5b:08:a7:22:81:da:d4:5d:ea:a0:8e:41:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
        Validity
            Not Before: Jul  1 11:00:48 2024 GMT
            Not After : Jul  2 11:00:48 2024 GMT
        Subject: CN=9538529cfe96e9f1403aff2ab8179fc1635f87e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:ba:b0:ae:6c:32:0d:79:bc:04:96:ee:f0:
                    51:54:16:dd:67:4a:23:a2:fa:3c:24:d2:46:97:09:
                    3c:05:a0:1a:8a:84:08:4b:b5:9f:70:f7:e7:2b:68:
                    c5:1f:86:ae:fc:72:72:12:e0:2c:2d:17:a5:8a:3f:
                    bf:88:82:2a:99:95:22:9e:fa:eb:0d:f2:f9:e1:c0:
                    a3:7c:bc:a1:fe:42:a0:7d:6c:19:a7:58:ed:ed:a1:
                    a3:a9:a9:53:7c:b2:60:5a:df:09:ee:04:a8:fb:57:
                    2f:06:a7:63:45:0f:f6:27:5c:24:f7:7f:33:49:8c:
                    fc:4e:e6:5e:64:64:ba:00:9d:2c:9d:3f:89:e4:65:
                    cc:3c:23:77:cc:19:7d:6d:3d:4b:1c:a1:56:9a:8f:
                    26:01:87:5a:3f:86:17:5c:a5:91:c5:43:e7:31:73:
                    70:7b:6d:d2:51:28:d3:f7:7e:b0:f9:d1:39:91:93:
                    9e:fa:a6:11:85:f0:e2:98:b0:19:14:38:5c:d0:c2:
                    79:e7:e6:d1:52:e6:6e:31:56:5f:00:1e:7e:3d:f5:
                    3b:a8:80:6b:57:47:33:f3:f4:e1:d2:41:e4:b4:9c:
                    3a:7b:cf:4a:61:57:f1:91:2d:59:75:98:7b:88:df:
                    b0:c4:c8:95:13:4d:64:b5:e1:e1:91:10:d1:94:fd:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:38:52:9C:FE:96:E9:F1:40:3A:FF:2A:B8:17:9F:C1:63:5F:87:E7
            X509v3 Authority Key Identifier:
                keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:2d:1f:6e:81:c6:45:92:a9:89:31:18:e8:7c:2d:13:a2:
         91:9f:d7:94:55:14:d4:8f:36:3a:ef:78:34:58:66:09:de:d9:
         1c:50:e9:82:7b:50:c1:bc:c5:d7:33:e6:84:52:7d:e4:25:65:
         de:99:f6:04:28:b4:18:2a:69:ca:09:77:5c:a0:9e:fc:1d:c8:
         dc:53:f6:53:dc:24:4c:42:87:2f:1c:81:06:44:80:a2:97:11:
         3a:b7:41:7d:e7:7a:4b:7b:37:1b:17:6a:ba:c9:41:29:16:58:
         17:2c:13:9d:0e:d1:6f:1c:a8:7d:e9:24:8a:54:ba:c3:4f:51:
         19:f8:7b:34:59:49:7f:5f:ec:d4:74:a9:9c:7d:7b:a0:1d:80:
         11:26:9c:4b:e6:bd:60:4d:87:4a:30:4d:fe:ab:f8:d3:8b:ce:
         b4:65:68:00:79:0b:a1:fb:78:bd:3a:64:53:c0:9f:95:7f:ba:
         01:e9:82:a0:e8:2c:fb:0b:6e:5d:4d:03:1a:b9:5f:82:65:56:
         07:18:ba:19:3e:ce:b0:5f:ca:92:9a:1d:ee:24:c6:04:95:69:
         2b:f7:4c:e6:d6:d6:ff:3e:d1:84:2f:e3:5a:6b:e9:52:ac:58:
         b6:9b:50:0d:a8:8a:ee:8e:00:d7:d5:ff:60:06:f2:15:73:c2:
         9a:55:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:12:25 2024 by rpki-client on console-fra.rpki-client.org