Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          R2Hbn6GsWA2FsCbzHRTQdkhunPK4X0GZtcH0MM3nZVM=
Subject key identifier:   B0:75:48:0E:3D:33:68:B0:F1:56:E6:A9:97:87:C0:08:87:AA:D4:59
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       01965500EFC57E4CA39C908668B271F14A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          0CA3
Signing time:             Sun 20 Apr 2025 21:00:46 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:46 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:46 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: dPD03rHrfjN4e+K7k1sF9uRfLGRN8mSk5244KqUt/o0=)
                          2: noBL3J3r3tsM2aoB7sMnaFXK45A.roa (hash: 1slbvNJzht+Braw0JbEJxueE4i9IP1ZbfhD3OHI5Tsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:ef:c5:7e:4c:a3:9c:90:86:68:b2:71:f1:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Apr 20 21:00:46 2025 GMT
            Not After : Apr 21 21:00:46 2025 GMT
        Subject: CN=b075480e3d3368b0f156e6a99787c00887aad459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:d5:e6:16:bb:e9:ce:ee:77:ba:d1:2f:b4:
                    e8:13:1f:d5:93:13:a4:95:91:d4:7b:ef:82:99:44:
                    cf:b7:ca:c3:b4:d4:f6:cc:fe:4f:d6:a2:35:05:c4:
                    94:06:29:da:b3:8a:72:31:77:1b:48:a3:a3:02:52:
                    00:cd:6b:27:f9:e3:24:40:2f:db:f8:6a:9c:d9:06:
                    da:bf:4f:dc:0c:a0:44:b9:22:ce:07:ec:68:6c:d1:
                    bc:79:fb:e6:84:00:ae:84:c4:25:6d:63:77:17:10:
                    21:01:ef:b9:6d:51:26:2e:4a:9f:2a:cd:d4:11:4a:
                    b5:6e:58:0a:a2:3c:c9:20:fe:84:69:ad:57:9f:d7:
                    96:3c:82:ec:02:f2:0c:82:86:05:26:e9:0d:7e:1f:
                    f6:43:ca:d1:64:ff:7b:42:e5:77:0d:a2:fe:2f:64:
                    d2:5c:d7:cf:2c:20:96:4a:d5:4e:d6:21:df:f8:6a:
                    52:55:b6:15:56:36:d4:2b:35:1e:0f:d2:5e:d2:13:
                    b5:b6:c9:3b:a4:9d:c9:38:ad:67:ba:04:00:17:8b:
                    9c:53:3f:d2:2e:14:8f:25:58:7e:1c:26:85:21:4b:
                    dd:ab:f3:e9:c0:0f:0f:4b:1d:81:8f:0d:b8:dc:e3:
                    4a:e0:04:43:2d:19:69:c8:26:33:4b:73:a1:15:b4:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:48:0E:3D:33:68:B0:F1:56:E6:A9:97:87:C0:08:87:AA:D4:59
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:13:b7:69:ad:01:56:46:dd:10:a0:28:98:cf:1b:76:a4:
         1f:86:c9:3b:be:f3:f5:8a:29:98:f0:19:31:63:01:07:32:d5:
         ea:dc:86:9b:cc:98:af:45:9f:0c:df:e9:a3:59:8c:ee:a3:ef:
         32:6f:53:9c:f2:c9:81:6a:22:93:13:57:3c:3e:0c:ea:f1:39:
         4d:5e:af:d1:24:3f:2c:10:1a:37:74:a2:25:54:5a:f2:ea:5f:
         66:81:d7:a0:a8:85:85:64:df:fb:eb:e3:74:10:c9:0e:b0:6c:
         17:2c:9a:89:9e:b3:06:8b:87:15:e5:33:61:12:3d:ed:21:1c:
         03:b0:df:4c:64:1b:9b:b7:e5:a1:92:45:17:c6:52:ca:7c:bd:
         a5:e9:3b:bd:6e:a8:e9:b8:69:a5:da:f4:a2:81:63:d9:1f:d3:
         9f:ae:61:73:25:c0:8f:48:a1:f7:1e:68:f1:b9:9a:bf:f7:f8:
         55:cf:41:d4:35:d1:28:cb:cf:14:d1:b8:45:f9:b8:69:00:49:
         ab:53:87:53:23:1f:f8:9d:a6:51:14:25:7c:68:81:77:7d:41:
         95:21:8e:47:17:14:32:6f:9a:a8:57:a1:cd:19:6e:29:d9:4e:
         b7:b7:b5:ff:45:db:90:cb:60:21:2c:26:c3:68:06:15:d4:a4:
         20:8a:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:30 2025 by rpki-client