Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          vW5YfNzLLJ0OgN8e61nXo5eC217UPibwdeP8jQh6O+w=
Subject key identifier:   35:E5:E3:95:F5:79:1B:4A:EF:E0:6E:70:23:A7:73:38:87:2F:AA:F1
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       018F5B4C8A9FB0D18FE3A276BF5568655FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          1170
Signing time:             Thu 09 May 2024 03:01:33 +0000
Manifest this update:     Thu 09 May 2024 03:01:33 +0000
Manifest next update:     Fri 10 May 2024 03:01:33 +0000
Files and hashes:         1: KugZ15a-FjlP95bkKHA5-v_5FRs.roa (hash: QvmqQHbT9twPMged2Sgv48jAdjW5AlnirBGdVAqo5sA=)
                          2: X-zbCn76ZMKcoc8Z1CEjbR1m1dU.roa (hash: KtUD5mLlTZZBZoRm9WU5hHYzLT24I9uimAvB0iSZb4I=)
                          3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: 35O7De5nAEOLPaq3GkQYN6wQ0Qdt/j4EmERdQUrq8OM=)
                          4: lxWN8fAJqpDuaqeV59mNHvuipWQ.roa (hash: z4NUA7GrwHNEeHf1hRlUwG41wZKnqE5AguSDzcIct8A=)
                          5: zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa (hash: RXmJufObw7I0fVaKjQnwv+4tlxZ+dSfpKMg2qqapCaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5b:4c:8a:9f:b0:d1:8f:e3:a2:76:bf:55:68:65:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: May  9 03:01:33 2024 GMT
            Not After : May 10 03:01:33 2024 GMT
        Subject: CN=35e5e395f5791b4aefe06e7023a77338872faaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:6b:ea:3d:c8:01:5d:da:86:92:f1:89:83:
                    0b:5a:52:b2:b6:8f:ca:22:21:bd:a6:a5:b8:7d:87:
                    d7:03:76:e3:7e:69:06:8a:35:62:26:38:c8:dd:40:
                    4f:e6:8f:d0:d3:b7:28:17:6c:3e:51:aa:8c:c8:01:
                    98:31:aa:36:ed:7d:60:73:a3:13:78:1e:23:77:f6:
                    88:d5:44:25:af:27:4d:cc:f2:6a:aa:a2:bf:1a:dd:
                    0d:7f:cf:2b:7d:bc:57:d1:d5:4e:d2:2b:b7:43:c5:
                    c3:a0:3b:1f:cd:8d:e7:e1:90:b0:b8:c2:27:60:16:
                    ae:ef:8a:94:59:0f:94:07:2a:79:47:e7:3b:1b:0f:
                    0a:d3:ba:3e:5f:1d:40:f2:4a:c4:f5:c3:6d:21:52:
                    ad:fd:af:24:6c:55:2c:b9:e0:8b:fb:82:b1:73:d7:
                    57:3a:36:55:53:04:5b:8c:18:d9:a4:aa:29:6a:c6:
                    ba:63:b0:7e:e2:63:9b:17:4a:12:e9:e3:aa:be:ea:
                    ac:c2:d5:3b:ec:78:5f:8f:f0:a9:c7:79:5c:f3:f5:
                    84:67:eb:1b:5b:49:cb:ab:a0:c8:78:95:4b:d0:6b:
                    a3:cf:59:76:62:c6:62:53:b2:67:b8:b7:8c:3c:a1:
                    b4:32:6d:d5:38:1e:93:99:a9:5a:55:9c:fa:cb:75:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:E3:95:F5:79:1B:4A:EF:E0:6E:70:23:A7:73:38:87:2F:AA:F1
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:b4:2f:c2:04:91:6c:85:9c:53:4f:cc:fa:10:00:b7:a0:
         cb:65:29:08:d5:88:9e:d9:5e:e8:8d:c6:a3:d7:34:5c:30:f9:
         17:7f:c7:4c:52:ac:37:5f:40:c1:e6:ef:33:de:c5:4c:a1:7b:
         da:bc:f4:80:5a:8a:59:3e:44:a8:1b:03:ce:47:cd:7e:82:24:
         65:0d:78:4e:bc:14:86:b9:e0:f8:5e:40:ed:17:3f:f9:a4:f0:
         97:13:6e:93:c1:30:86:1a:73:14:38:2e:fc:be:00:67:6b:0a:
         02:9f:c2:45:91:d8:ad:2c:3f:22:2b:79:46:43:63:a6:86:31:
         eb:8f:83:60:5e:db:2f:6e:c7:46:eb:07:72:ad:7a:5e:17:1f:
         e1:da:e6:46:6b:65:3f:ed:d6:1d:97:44:80:3e:76:7b:3c:ea:
         28:ab:7b:cc:6e:45:fd:1d:01:65:e5:e8:32:8a:ff:e6:dd:6b:
         cf:2e:20:e6:36:14:a6:2e:2d:49:22:d2:fa:23:03:e1:ef:cc:
         d8:0a:3b:8a:14:be:bb:99:8e:7c:a1:ff:db:e1:ca:5d:6d:07:
         47:19:3f:ed:3b:f4:a7:56:16:01:09:dc:84:89:6d:cb:28:06:
         5a:14:3c:66:50:24:2e:20:ef:fd:03:ad:33:c3:76:a8:e4:be:
         87:b9:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 11:02:56 2024 by rpki-client on console-ams.rpki-client.org