Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
File:                     BmTWaI0BWWgFqVshZE17KB8mPiQ.mft (raw, json)
Hash identifier:          7inGUPdWBh3RDEJijznZoC8cmlccABgrvPi+OitFdwU=
Subject key identifier:   CA:34:0B:F8:D3:7E:AE:3C:48:7C:F7:49:16:1A:D0:BD:4C:D9:BB:65
Authority key identifier: 06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24
Certificate issuer:       /CN=0664d6688d01596805a95b21644d7b281f263e24
Certificate serial:       018F1F01096CBEC2C9CF9A7F85372D712A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
Manifest number:          05A3
Signing time:             Sat 27 Apr 2024 10:01:52 +0000
Manifest this update:     Sat 27 Apr 2024 10:01:52 +0000
Manifest next update:     Sun 28 Apr 2024 10:01:52 +0000
Files and hashes:         1: BmTWaI0BWWgFqVshZE17KB8mPiQ.crl (hash: 1WwfPggZTBhbEUdDlqf3M6kHoziP77ea2kzhG5T8bvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:09:6c:be:c2:c9:cf:9a:7f:85:37:2d:71:2a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0664d6688d01596805a95b21644d7b281f263e24
        Validity
            Not Before: Apr 27 10:01:52 2024 GMT
            Not After : Apr 28 10:01:52 2024 GMT
        Subject: CN=ca340bf8d37eae3c487cf749161ad0bd4cd9bb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:fd:b7:5e:28:14:80:31:f4:69:ca:54:46:
                    90:c7:52:93:cf:8e:17:70:5a:37:dd:af:f2:68:b1:
                    b1:2f:bd:9e:67:6b:06:0a:b5:01:79:fa:0c:0c:dc:
                    6c:74:90:5e:e1:70:7e:df:5e:8c:af:ca:e2:d5:32:
                    75:41:2e:0c:44:72:26:79:76:1b:8d:fb:c8:a1:fe:
                    0a:09:57:49:0a:a3:35:30:10:bd:ee:0a:c0:d5:45:
                    c7:54:09:ed:4d:8f:1b:e1:e8:4a:94:6d:9c:f6:99:
                    43:5b:e1:e5:f2:6b:af:ad:d7:60:3d:10:12:6a:3d:
                    b8:5b:be:aa:7f:95:fb:1e:f4:ed:6f:fe:e1:f8:3d:
                    76:2f:5a:a8:b8:88:5e:82:5a:0e:f5:73:38:55:da:
                    a4:76:83:93:ee:6d:a6:2a:03:7c:61:58:76:30:80:
                    ff:87:17:c3:29:14:23:db:d8:c2:8b:03:aa:68:f5:
                    02:aa:88:23:99:2a:17:f9:2e:08:32:31:de:43:00:
                    f3:92:1b:ce:ca:b6:65:d3:c4:e3:5e:fb:3c:e3:b6:
                    cb:96:77:91:b6:2c:fd:cd:73:79:15:66:51:2c:b5:
                    43:7c:d0:ac:d5:72:70:11:4a:96:cc:b6:7e:be:cf:
                    5b:86:03:d3:e2:65:e3:07:06:4d:2e:6a:f0:8b:ca:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:0B:F8:D3:7E:AE:3C:48:7C:F7:49:16:1A:D0:BD:4C:D9:BB:65
            X509v3 Authority Key Identifier:
                keyid:06:64:D6:68:8D:01:59:68:05:A9:5B:21:64:4D:7B:28:1F:26:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmTWaI0BWWgFqVshZE17KB8mPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/430be9-d0f1-4e9d-834c-d53c0b637907/1/BmTWaI0BWWgFqVshZE17KB8mPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1d:ac:bc:b1:c5:8e:7f:b5:2a:4f:e4:ba:64:d7:f9:7e:05:
         c4:9a:b3:a8:4d:67:c4:5e:7f:ac:e1:01:7e:5f:9b:22:06:b6:
         02:c5:32:d4:ea:47:b6:97:79:2b:78:43:11:5c:84:b3:99:15:
         f9:cd:3d:cb:4e:a4:ba:59:20:86:8f:39:bf:0f:1e:dd:a2:16:
         3c:01:27:4d:27:40:85:3c:4b:49:60:e1:72:e3:f3:ea:e0:f1:
         f2:08:f7:ab:dc:3d:92:c1:e0:90:f9:e6:19:55:c3:ea:17:0c:
         c2:16:2b:75:be:ba:7c:78:f1:b2:7d:d5:a9:3d:85:a8:b0:cd:
         cf:17:3d:da:37:dd:a6:8f:20:2e:7c:d4:b5:3b:c6:75:0f:88:
         d7:05:46:c3:4f:cf:26:34:e3:dd:fc:f3:5b:b2:a3:56:d6:92:
         64:82:8d:6c:af:2f:d0:44:33:ba:3a:04:e7:3f:6a:47:3e:59:
         ec:5c:8d:49:b6:9e:31:32:72:89:07:26:2f:1c:98:a6:2d:f1:
         7f:f5:25:94:93:b7:05:d5:eb:b6:f3:91:0f:67:28:19:cb:85:
         5d:59:2c:0b:60:97:6a:5b:23:b5:97:9d:f3:90:24:26:c5:ab:
         66:5e:d7:b7:31:23:cc:11:47:81:9f:c7:70:17:36:e1:4c:f3:
         95:7d:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:03:38 2024 by rpki-client on console-ams.rpki-client.org