Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
File:                     BKr_h_bcDTaZvCk3o03HF_lPAH4.mft (raw, json)
Hash identifier:          aIioI2C0UvCCKn16Abz+cKCdB3eW3HPSJRXIKCEHwk4=
Subject key identifier:   73:C0:00:3C:C0:99:B3:11:BA:A7:E3:0A:7D:E4:1C:CF:C9:02:4D:C6
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Certificate issuer:       /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial:       01964FA399B711C920AFF9D15B3DEF57F667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
Manifest number:          0256
Signing time:             Sat 19 Apr 2025 20:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:43 +0000
Files and hashes:         1: 6_SorJ25G4u7YBwW2zeSokP08Hc.roa (hash: NlgmlGFa+T46F9+6RUbpmORo7iUI0GDNp4IaSTudvHk=)
                          2: BKr_h_bcDTaZvCk3o03HF_lPAH4.crl (hash: UaxXYbJI0hFDgnvpiuc4HcP7lIbTW1c/521WPjXius0=)
                          3: KF4rj8wK1krzl3OrFPy-CqSf5Rg.roa (hash: Uyam0YZMVbS8n8u951YwMNv1LEzQgAQ1BgazVuDTRGI=)
                          4: db7fxSfPWokvsgFjR8LqozSxxoI.roa (hash: RXgT32dAocul6iqlp3swvj1YXuL0zf8bKqkA+u0l2/c=)
                          5: leQX7MTTNCcwwRlk5GrnV6QHByo.roa (hash: wvDWAkjEaXNZoWRBbZ4c0JTlvo1BtLH5Z/mnwlr+NT8=)
                          6: ydZvpx-cTBNzEbeU_ZbQ-vbyUX4.roa (hash: SOlye525/7jdmPwxqBK22yTDvIFdXndznoUXlfhw4B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:99:b7:11:c9:20:af:f9:d1:5b:3d:ef:57:f6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
        Validity
            Not Before: Apr 19 20:00:43 2025 GMT
            Not After : Apr 20 20:00:43 2025 GMT
        Subject: CN=73c0003cc099b311baa7e30a7de41ccfc9024dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:f4:aa:c1:79:f8:28:64:aa:32:37:2a:1e:
                    a1:f1:ce:70:30:d8:31:19:40:55:e8:f2:08:c5:9e:
                    9e:6f:e4:8b:3e:b2:2e:0b:c4:97:ce:3f:3c:ff:39:
                    d3:5b:30:a1:02:76:70:7a:fe:05:a5:4e:22:6d:40:
                    f1:77:30:eb:4a:75:0b:3f:e3:45:32:56:e8:4e:5e:
                    a6:bc:d6:10:c2:8c:36:2f:e7:bc:76:6c:a0:29:8b:
                    2a:4b:07:15:1e:99:4e:a3:4e:5f:1a:2f:2b:54:d5:
                    69:f3:4a:b7:49:d3:ea:f0:64:d5:8d:85:e3:75:a0:
                    b6:ef:b6:d2:39:f4:14:7a:a7:95:e1:e3:58:03:c6:
                    20:ab:d1:47:14:a0:7f:ad:a1:2e:7d:82:49:02:a4:
                    28:7d:71:be:33:7d:80:06:4c:b6:9e:bb:6e:6b:54:
                    a2:dc:10:8a:ce:f6:2a:b3:b5:1b:97:ce:bd:c0:2e:
                    26:d2:ab:4f:ae:33:51:be:8e:c7:2b:d7:c5:d8:a3:
                    25:54:5d:d2:a5:af:0d:10:e7:5f:2a:34:de:21:b4:
                    47:f2:76:28:e2:b9:f2:bc:4e:f7:20:a7:d4:a8:5e:
                    f0:ac:45:1b:68:4e:a5:fd:32:b8:d0:f9:51:f5:98:
                    d9:39:a3:e4:b3:46:e4:83:9d:cb:7c:24:28:7a:7f:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:00:3C:C0:99:B3:11:BA:A7:E3:0A:7D:E4:1C:CF:C9:02:4D:C6
            X509v3 Authority Key Identifier:
                keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:88:72:75:b0:51:64:8a:8f:07:3c:ac:d8:94:b9:86:28:a0:
         20:d5:db:8c:9c:ac:e5:58:bc:f4:15:b0:85:b2:11:81:ed:d5:
         30:75:d6:51:3d:a2:05:74:00:3d:85:7f:4f:76:8a:f1:8c:bf:
         42:e3:ed:a2:43:f5:94:41:28:15:fc:33:23:cd:1b:03:f5:2e:
         1b:67:da:f2:ab:1e:7f:33:28:90:04:25:9d:45:86:fd:6a:20:
         c6:21:e7:c1:8b:ee:12:ac:3d:a8:fa:64:25:8d:1b:60:6f:3c:
         6b:b4:c2:54:9a:52:64:82:88:04:f2:98:1e:79:31:20:5d:73:
         29:ca:39:09:bb:e0:85:e1:73:63:90:a9:b6:f5:02:d9:ee:5e:
         e4:13:a7:e2:94:7b:3c:3c:f1:5c:23:29:0e:88:e5:ac:6a:fa:
         84:56:73:6d:ac:96:a6:e6:08:52:26:00:5a:be:23:cd:25:5c:
         e4:85:4e:9a:43:6a:88:b6:9b:8a:25:3f:39:f3:59:55:df:e1:
         5c:31:9c:ce:60:05:92:67:f7:eb:61:5a:d8:76:28:ca:ac:1d:
         67:c9:2d:46:9d:ad:2a:48:98:3e:9f:06:60:d8:5b:be:57:7d:
         80:37:51:69:ed:ef:d8:59:04:19:b2:b8:af:f0:f8:64:c9:20:
         bf:3a:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:12 2025 by rpki-client