Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          +/Leazi2qLomIhM5S+YkAw++41btVDUzyw5VF0mhDXE=
Subject key identifier:   61:69:F4:9B:75:ED:0E:E2:C8:08:87:8F:06:16:63:5C:22:0E:05:83
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       01906F0758CF3EB5FC0A27A34F4BB8D34711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          11EF
Signing time:             Mon 01 Jul 2024 16:01:10 +0000
Manifest this update:     Mon 01 Jul 2024 16:01:10 +0000
Manifest next update:     Tue 02 Jul 2024 16:01:10 +0000
Files and hashes:         1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: 7rSkMMvIREkDKSV/ogTF3mokwQs2wVdU3mm2F4HjvlU=)
                          2: TkEYkt4ztdTUIJ7a5_qrI5gW3ds.roa (hash: FFu6uRp6vzUWqmfOeSkC77qrOhaQtiESJwNd6t0IKuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:07:58:cf:3e:b5:fc:0a:27:a3:4f:4b:b8:d3:47:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Jul  1 16:01:10 2024 GMT
            Not After : Jul  2 16:01:10 2024 GMT
        Subject: CN=6169f49b75ed0ee2c808878f0616635c220e0583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:2b:5a:8e:2a:00:1a:ae:a1:35:0d:f0:96:
                    15:98:bc:1f:f8:8a:67:8c:0d:ae:2c:b7:c5:62:04:
                    2a:28:d2:8d:13:51:03:bb:36:f2:b2:17:19:89:22:
                    79:d4:2e:eb:46:fe:03:be:38:88:7e:1b:45:ae:c9:
                    84:be:dd:79:bb:ea:2c:c6:20:0e:20:22:48:ff:89:
                    5b:f1:31:e3:bd:eb:09:c8:94:74:1b:a5:79:4f:d9:
                    30:d2:94:05:9e:6d:23:5a:cb:3a:3f:32:31:5c:ea:
                    2c:c9:e2:00:3c:fe:f0:4d:39:72:5b:c9:b4:b7:de:
                    1e:b1:d7:94:2f:6e:c7:38:2c:cc:c6:a5:6f:85:29:
                    38:b0:ac:32:da:2a:73:fb:c3:1b:11:6f:3b:12:29:
                    0e:1e:98:70:25:b5:2a:98:f5:98:9c:47:8e:2a:11:
                    e2:8e:ef:92:7d:c4:e4:76:e7:30:51:48:bf:3e:1b:
                    c3:34:42:c4:da:59:b1:35:85:51:3f:ac:27:ab:30:
                    ea:b8:e7:f9:3b:cf:f0:1b:ab:f6:25:cd:94:76:6a:
                    ae:71:0d:76:50:03:9e:55:88:2e:eb:af:55:a1:96:
                    2f:07:19:db:05:5d:e5:a9:6e:71:07:9d:9a:86:e3:
                    d4:b1:d7:09:96:77:73:e8:36:6d:04:2f:4f:31:c3:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:69:F4:9B:75:ED:0E:E2:C8:08:87:8F:06:16:63:5C:22:0E:05:83
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:09:4f:78:b8:2f:8c:5f:33:92:ad:c5:80:3f:c2:b4:15:9b:
         bf:0c:82:3d:98:19:7c:c7:60:da:17:57:c5:d2:bf:38:d8:96:
         ea:d6:4e:79:30:60:bb:f6:30:9c:8a:9c:45:b0:69:4e:3e:51:
         1e:7c:da:f1:b7:08:be:b8:06:55:77:6f:ce:c8:90:77:64:5e:
         39:06:bd:85:e9:b2:0c:14:a2:f5:a3:ed:7d:81:72:1d:18:a3:
         78:38:2e:27:33:14:1e:7c:bb:76:cc:03:03:ce:cc:51:f5:35:
         2c:2d:3b:ec:18:84:7a:1b:1b:7b:65:f0:f0:e6:0b:0c:de:d3:
         ed:d2:93:13:6e:0a:c4:c1:aa:28:e1:da:13:e9:e8:e2:47:d9:
         52:06:59:dc:8b:9f:fa:05:9c:8e:0a:10:18:08:d5:ef:7b:86:
         67:a0:61:99:30:48:9a:29:2c:b7:a7:d1:4b:6d:9d:b9:31:f1:
         3c:7b:34:59:75:0f:a9:fc:94:22:7c:dd:53:67:90:a2:69:9a:
         6c:3c:9a:da:fe:94:77:13:c1:e7:cc:91:98:2c:fe:bb:07:ae:
         c1:d1:d7:48:e8:54:ba:93:cf:2b:7e:55:74:a4:1c:e1:83:e8:
         51:0e:b8:98:87:0c:90:f5:56:8e:31:11:10:b2:aa:8b:82:bd:
         a3:d5:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:33:34 2024 by rpki-client on console-ams.rpki-client.org