Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          GQ4U7he5xizkcsF27nJ8LERt9WLYhLDU2wGwH2e3lTY=
Subject key identifier:   F1:45:EB:C5:74:1F:DC:AC:D3:64:07:05:1D:58:CA:39:BD:87:5B:62
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       01935199E4B322E4FE46B760E4EC36C5BFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          1381
Signing time:             Fri 22 Nov 2024 02:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 02:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 02:01:00 +0000
Files and hashes:         1: KugZ15a-FjlP95bkKHA5-v_5FRs.roa (hash: QvmqQHbT9twPMged2Sgv48jAdjW5AlnirBGdVAqo5sA=)
                          2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: LuHWto9fmWZt/dc6XlKRIFYjphiNaktJ5Im5ZfOjYpQ=)
                          3: kJvSMjJlP5MI3sFl406jVP1v-3I.roa (hash: Eyqd6mgsm5RXeNwiC3yOGfGIHl4ms9TIRY3B+YDrcSU=)
                          4: l1x488I_srvfGE92bVfWcUw5PNE.roa (hash: C8WoZdybVL9xHmKmXAh08zthUkfzApHjtxX0JZ0Pbl8=)
                          5: zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa (hash: RXmJufObw7I0fVaKjQnwv+4tlxZ+dSfpKMg2qqapCaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:e4:b3:22:e4:fe:46:b7:60:e4:ec:36:c5:bf:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Nov 22 02:01:00 2024 GMT
            Not After : Nov 23 02:01:00 2024 GMT
        Subject: CN=f145ebc5741fdcacd36407051d58ca39bd875b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:79:7f:1d:d2:73:d8:3a:a9:d6:e1:96:a1:
                    59:56:70:1f:e1:ed:d2:c8:b8:df:74:87:2d:fa:f6:
                    28:b7:b3:e0:e7:69:5a:75:bd:cb:4c:73:69:39:25:
                    78:d4:c9:8f:67:ae:5c:fb:a4:d6:97:a8:f3:52:83:
                    07:2b:4b:84:38:1e:be:97:41:40:1d:13:75:72:4d:
                    74:77:0f:bc:91:40:39:f8:03:f4:cd:45:97:e2:d4:
                    be:bf:d4:f1:5b:33:ef:55:38:53:9b:ef:4c:da:88:
                    f0:62:80:03:63:e9:d9:9d:95:c8:0f:03:05:8f:25:
                    3a:43:f5:43:9d:9d:c7:cd:4f:91:c6:60:c3:e2:45:
                    43:4f:79:f6:6c:91:cd:d2:24:ab:74:5a:44:be:7e:
                    f2:aa:c4:57:ba:b8:ca:51:2f:7b:4b:8b:cd:d5:ad:
                    2e:76:e0:72:62:5c:6a:82:1d:1d:94:58:75:d5:aa:
                    b3:eb:0a:5b:de:4e:c1:42:c6:76:8f:09:34:c4:5e:
                    21:e4:27:08:9d:98:af:fb:f2:bf:ab:19:93:f0:17:
                    98:55:07:70:0b:c0:74:fd:a9:d3:32:b1:45:6a:38:
                    5a:d9:20:21:bd:f1:99:24:c5:46:cc:ad:03:53:f2:
                    1a:f9:fa:82:24:82:5a:46:45:44:7c:bc:d4:4d:6e:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:EB:C5:74:1F:DC:AC:D3:64:07:05:1D:58:CA:39:BD:87:5B:62
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:79:62:23:14:f9:8c:b0:cd:29:9e:80:2f:74:a1:01:9b:
         b8:0c:43:9a:e8:8b:5f:88:63:16:0e:a8:82:33:0c:3c:dd:e6:
         42:97:5c:9e:e4:f9:bd:91:69:68:ac:83:6d:f4:28:65:e7:63:
         f3:1c:90:e5:88:1a:04:ab:49:cc:90:04:00:37:24:44:68:40:
         14:5f:d8:55:95:eb:22:c5:f9:08:7f:ac:bf:d2:2b:94:45:57:
         a0:86:d5:d8:4d:fc:5b:18:c0:98:5a:06:b5:a9:09:64:21:39:
         73:b5:f2:a4:56:5a:58:ea:60:85:9f:bd:bd:a6:93:f8:61:b7:
         ae:63:cc:90:62:2c:e0:59:78:68:3c:20:57:ed:01:70:3b:e3:
         48:36:76:bb:0e:d5:52:81:67:41:17:35:e9:75:19:09:e4:67:
         ad:7a:57:53:0d:3a:b6:09:17:bb:da:5f:32:10:f1:64:a1:85:
         ef:20:ce:2e:2c:da:c1:98:20:fa:00:b1:13:a0:90:b3:fe:95:
         88:71:cd:93:fc:2c:6e:df:90:39:31:e2:18:e2:94:fe:19:a4:
         b8:93:bb:ef:6e:84:86:1a:69:71:b3:87:6e:39:82:f6:0b:c6:
         07:34:d6:fb:20:1c:3e:4b:30:16:ee:60:9c:cc:2b:d2:20:2e:
         9c:c4:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:28 2024 by rpki-client on console-fra.rpki-client.org