Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          vQ2oElcWEbfUenPCBVujPa1cr7fxZFzaR+i5IznJVVk=
Subject key identifier:   98:F8:B0:F5:3F:73:01:05:E5:F8:4C:91:76:ED:E1:C1:C1:75:21:61
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       0194064784F45B7756CAAEF3BF409DA7C3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          127C
Signing time:             Fri 27 Dec 2024 04:02:17 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:17 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:17 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: W4yo8nLIGihn++vspsRJSeaZUUpBD94u1ehLkTmykao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:84:f4:5b:77:56:ca:ae:f3:bf:40:9d:a7:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Dec 27 04:02:17 2024 GMT
            Not After : Dec 28 04:02:17 2024 GMT
        Subject: CN=98f8b0f53f730105e5f84c9176ede1c1c1752161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:ac:49:e7:ba:7c:4d:72:1a:0d:2e:f8:77:
                    f7:a9:cd:19:14:b5:06:20:4f:b5:7a:06:be:f3:56:
                    5d:50:ef:12:d5:72:a9:04:f7:32:ff:90:18:2f:8b:
                    0d:d5:62:93:af:78:e8:54:50:2e:db:24:cf:15:6b:
                    44:9e:e0:33:b3:1e:47:31:1c:80:5c:68:f3:2b:be:
                    20:bb:df:9a:d7:f5:9b:6e:0e:02:11:9f:4b:8e:41:
                    67:12:b9:43:de:07:18:2b:ad:93:e0:b3:0c:9d:08:
                    5f:56:39:a5:d1:c2:61:7c:fa:c4:8b:7d:bf:17:27:
                    40:56:dd:f1:1e:02:85:22:ea:82:cd:29:1c:98:eb:
                    ed:22:b1:d7:94:31:3b:48:39:22:59:0b:01:e8:94:
                    e4:57:9d:69:66:91:62:1e:71:a5:79:5e:e8:3f:57:
                    f1:a1:8b:e9:d4:cf:8e:70:86:1e:e5:0c:06:75:01:
                    38:2e:40:88:86:37:99:77:61:7b:02:45:19:55:57:
                    f0:66:24:b9:9e:4d:b8:84:01:3b:4b:a2:0f:cd:af:
                    2d:ba:d3:e8:49:73:a0:6c:21:3e:93:a2:30:08:2e:
                    27:8d:57:26:10:dd:64:dd:9b:9e:3d:70:69:91:0d:
                    46:b3:d3:e6:f7:b0:75:ed:9d:3a:87:5c:e5:a3:bf:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:B0:F5:3F:73:01:05:E5:F8:4C:91:76:ED:E1:C1:C1:75:21:61
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:33:70:4b:eb:a8:78:af:5d:70:65:57:28:47:aa:5a:0e:
         13:79:0f:e7:2c:e7:d5:a1:91:45:a3:57:1a:54:15:e2:f5:d3:
         b8:e3:65:13:68:92:e7:1b:a6:2f:72:65:1b:7f:a2:95:2a:97:
         b8:60:3e:4b:ec:5a:72:93:05:13:7a:91:3b:c1:19:01:a6:34:
         3f:f2:97:df:80:43:22:a1:d6:95:4c:f5:a3:e0:1a:45:8f:f0:
         8a:b1:00:b9:b1:5d:0a:e1:1e:3e:e5:37:2c:63:cc:6e:f6:3f:
         28:10:1e:7c:fb:2d:44:c4:fa:ef:47:64:7e:26:19:86:a9:5c:
         df:cb:5f:3f:39:ad:dd:5d:a0:82:88:5d:f7:ec:5b:be:13:5c:
         f4:3e:6c:32:50:33:af:ea:fa:4a:e9:be:0e:8f:b2:1f:ac:56:
         86:47:70:79:26:a4:c1:17:2c:9d:0c:0f:89:8d:44:85:67:12:
         0f:b6:6e:48:a0:74:32:af:f3:d0:ff:55:ac:e3:7a:8c:75:06:
         2a:57:ca:ec:2e:18:5d:a3:09:25:fd:69:23:b2:1b:c4:76:46:
         b0:6e:e8:46:ba:19:9e:9b:7f:7c:ab:46:16:f7:bd:89:a4:3c:
         5e:d6:b4:fc:fb:28:bb:86:ab:c5:6d:0a:cc:d8:b3:90:aa:af:
         9e:92:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:59 2024 by rpki-client on console-fra.rpki-client.org