Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          im+gHsvL42+nCxYwbDsVFkUsIdFXHZKUyy/Q5X3VN10=
Subject key identifier:   8E:E0:41:91:14:50:B1:93:B6:6D:DC:C1:96:A8:4B:8B:D3:DF:1E:E6
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       01935877217D4B2EF725CB5CC5CE39EC6590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          1074
Signing time:             Sat 23 Nov 2024 10:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:22 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: LB48zKlo9eqrx6o+J3FNAsPh9p2/2owd8BNMm00oUZE=)
                          2: IipoAOgrAnI2TJ6LNgaLferciS8.roa (hash: TT/ssdp3bebbsFpZowsLHd7wsbd9lxHHr/OK2uMX+Yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:21:7d:4b:2e:f7:25:cb:5c:c5:ce:39:ec:65:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Nov 23 10:00:22 2024 GMT
            Not After : Nov 24 10:00:22 2024 GMT
        Subject: CN=8ee041911450b193b66ddcc196a84b8bd3df1ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:b8:d4:b7:b8:83:f2:0b:8f:0e:db:43:ac:
                    27:ec:b3:6d:c8:16:f4:e5:29:1b:84:62:f4:82:1f:
                    8b:01:4f:3c:d5:7c:18:07:23:a6:1e:d3:83:b0:c4:
                    56:58:bc:cb:8c:4e:92:65:e7:11:8e:cc:25:90:0f:
                    c3:87:aa:af:ac:0e:01:bb:49:77:52:db:cb:a7:dd:
                    1a:36:03:d2:b7:d9:2c:96:56:d2:09:1b:03:ce:e7:
                    5d:1a:f7:5d:4f:1e:29:a0:0b:3c:f3:97:ad:b0:dd:
                    19:62:4e:f6:0d:e2:76:5b:f1:24:8c:2d:6b:21:3e:
                    e8:4d:da:16:f4:05:46:f2:b1:8d:a5:b2:bc:e5:eb:
                    08:de:91:a8:7f:31:20:a8:bb:db:ed:97:72:42:11:
                    55:72:01:f9:40:56:56:0b:05:3a:76:25:2f:53:64:
                    bc:92:78:66:5b:4c:d5:e4:43:bb:1a:0e:5d:dd:51:
                    44:24:a9:69:f3:8d:ee:e8:9a:d3:df:f3:00:84:b7:
                    45:7b:1e:43:40:65:b9:67:82:6a:71:1b:81:1d:22:
                    19:ce:37:b4:2e:d3:3d:cd:89:d4:a4:f5:9c:78:b2:
                    14:f5:da:e8:09:f8:e0:23:89:f4:92:ef:2d:fe:55:
                    a2:11:93:88:f8:09:16:be:ed:af:d2:df:9a:a1:a8:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:41:91:14:50:B1:93:B6:6D:DC:C1:96:A8:4B:8B:D3:DF:1E:E6
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b9:d0:0c:73:a7:64:b8:a2:e0:d9:ed:f3:a7:ae:6f:dd:9b:
         ec:54:54:3e:40:e9:01:ec:9d:07:0a:a6:e2:ed:6d:9a:0b:35:
         71:0e:98:3d:f7:bc:fd:11:0b:b5:f4:20:d0:bc:bd:68:57:9b:
         b5:61:5d:fe:85:d1:60:e4:7c:06:1f:5f:62:cb:cd:a6:57:68:
         69:d4:e3:af:a6:78:e4:da:e4:11:03:d1:fa:5e:0c:cf:54:fb:
         8a:7a:eb:7c:e0:b0:70:08:d4:45:d1:4f:2a:1c:b9:06:f8:93:
         c2:26:de:95:0b:e3:62:1a:a9:ce:88:3a:ea:fb:71:5f:a6:9a:
         85:5c:77:83:9f:db:f3:57:0c:a6:c5:ea:66:90:e0:ba:e5:a8:
         97:b0:be:4b:81:42:ec:cb:11:c9:4f:31:ae:c6:94:05:c7:d2:
         4c:7d:54:a9:85:34:83:96:90:e4:d3:35:0f:04:69:be:ae:af:
         06:30:9b:7f:d3:42:d7:49:54:e9:37:83:2d:c1:e6:9a:76:22:
         39:b0:6f:e7:8e:b7:3b:90:44:12:3b:c6:d0:c0:36:ba:d4:d1:
         61:50:9b:84:54:33:dd:d5:31:d3:9a:16:1f:2d:ea:79:7b:b6:
         a0:93:66:61:b0:b9:b2:d3:8d:ac:05:fa:f6:c7:d3:40:24:0b:
         2b:89:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:34 2024 by rpki-client on console-ams.rpki-client.org