Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
File:                     BKr_h_bcDTaZvCk3o03HF_lPAH4.mft (raw, json)
Hash identifier:          IO6maRT2aLJHEURagYca1n9aOrAeamaNaregEiP0SMk=
Subject key identifier:   97:69:6F:35:B4:AD:1D:02:F1:36:D4:27:A0:12:FA:65:CE:C1:3C:D0
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Certificate issuer:       /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial:       0193670EA70EBFD124692B0CA022D27C0DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
Manifest number:          D4
Signing time:             Tue 26 Nov 2024 06:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 06:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 06:00:33 +0000
Files and hashes:         1: BKr_h_bcDTaZvCk3o03HF_lPAH4.crl (hash: bmlNEp/uOniGiH6p5uRchAKxIYFE4CUMmPgyddEbn/E=)
                          2: EshnkAfWO8eFLgg4a-j1BF7kiEk.roa (hash: 4rvyoNuwcBd/paTDeEc/fovbp1Ezr9dzm/pZczw0brE=)
                          3: F4UAcLu77dxdPsd5CIei_M9iQ7Y.roa (hash: FkmwwxCY9gUgkeWXORWOwEiTkBjJodOqILbYdy/3G1k=)
                          4: PMCrve8pkVbUoQ9zmJ6QiD0YpXA.roa (hash: D9M5LqsOnyGFswrkiuLJlzFTEuroa3n4juQQHJL0gjc=)
                          5: qpjiwTkDS1ctlqN_n_0uju4Hy_s.roa (hash: lRyHJaYz5sqjP7v9ZdZzua/Wn+BjV89oiBAtw3Wu4l8=)
                          6: rFgCnZQTb7L0sGNZFIIwLs1F504.roa (hash: cYsXCETTwv4V+fH2eXZ8XqYUIck5WZT0UKwFGgLHhHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:0e:a7:0e:bf:d1:24:69:2b:0c:a0:22:d2:7c:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
        Validity
            Not Before: Nov 26 06:00:33 2024 GMT
            Not After : Nov 27 06:00:33 2024 GMT
        Subject: CN=97696f35b4ad1d02f136d427a012fa65cec13cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:49:ab:06:86:5b:17:34:5a:93:08:c6:13:
                    cb:83:0d:c5:69:1f:c5:41:a8:3d:99:93:13:5c:b5:
                    dd:ed:ee:01:e7:e8:ea:f7:b3:34:8e:8e:b9:f4:bc:
                    54:44:1d:08:6f:85:c3:40:4f:0f:f0:41:56:0a:16:
                    cb:51:a2:63:eb:2e:58:cd:dc:00:91:86:d3:06:94:
                    45:4b:76:20:02:8a:15:9d:4e:1b:ea:84:2a:6a:35:
                    42:18:a8:e0:08:a3:b1:f9:e4:5a:b7:01:6f:66:0f:
                    11:3d:df:16:f6:d4:19:5d:57:99:dd:ef:67:c6:b4:
                    ae:fe:df:cf:b9:f2:f6:90:32:4e:1d:fa:f0:3b:26:
                    1b:39:82:3b:b2:e3:a9:2e:bf:90:cb:ce:2f:61:aa:
                    8f:80:5a:5b:5e:10:0a:d9:1a:4c:95:86:2d:73:f8:
                    01:5e:be:e9:2f:d6:4b:5b:95:38:2f:53:bc:99:c6:
                    64:34:b8:07:86:04:88:a2:99:99:93:38:18:01:3c:
                    01:07:b0:5c:35:06:d5:76:63:72:70:44:0f:3a:9a:
                    65:5e:3d:92:ad:62:d3:53:1b:ac:ee:96:e5:52:cb:
                    eb:93:dc:be:d7:74:39:47:1b:69:44:f8:1f:08:e3:
                    c3:b9:5f:29:5d:b0:2b:79:af:62:ec:9d:e5:3c:f7:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:69:6F:35:B4:AD:1D:02:F1:36:D4:27:A0:12:FA:65:CE:C1:3C:D0
            X509v3 Authority Key Identifier:
                keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:01:08:92:c3:b1:5c:5d:d0:79:d2:da:d0:4a:1c:b8:25:f3:
         3e:6d:e8:1b:d2:46:54:55:ef:ee:8d:0e:7f:39:26:a2:21:9a:
         04:92:54:fc:17:1e:4e:4c:04:30:de:d7:b7:ca:ca:2c:3a:bc:
         21:ae:f9:ec:bf:eb:e5:3b:4e:73:8f:08:5f:a3:80:fd:a3:c6:
         5d:db:98:05:63:a2:80:3a:0a:47:5a:b5:b1:2c:37:03:ec:6e:
         e5:2b:ee:af:83:41:34:87:77:82:bb:23:01:65:a8:49:5f:e8:
         e0:4e:43:bd:67:ed:19:6b:61:ee:68:ca:ab:43:9c:7c:ff:62:
         f5:a6:6f:fc:45:93:49:e1:26:56:90:9c:a2:46:cc:da:84:64:
         12:09:55:1c:05:30:bd:cf:da:4a:79:4f:28:33:e3:69:89:e6:
         40:06:93:68:29:5f:18:3c:9f:ad:c3:86:d3:ba:a6:5d:ec:32:
         19:aa:6a:00:c5:81:f8:33:6f:f8:80:3b:c2:f0:39:75:77:6f:
         c4:17:2a:74:97:2d:14:43:7f:48:29:17:d4:dd:96:98:2d:c3:
         dd:cf:24:f5:da:e6:37:8c:25:86:22:82:33:1d:8c:16:18:6f:
         ac:9e:80:47:9d:22:34:86:03:7b:77:27:93:68:d2:42:c4:63:
         c8:12:a4:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNnDqcOv9EkaSsMoCLSfA25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YWFmZjg3ZjZkYzBkMzY5OWJjMjkzN2EzNGRjNzE3Zjk0
ZjAwN2UwHhcNMjQxMTI2MDYwMDMzWhcNMjQxMTI3MDYwMDMzWjAzMTEwLwYDVQQD
Eyg5NzY5NmYzNWI0YWQxZDAyZjEzNmQ0MjdhMDEyZmE2NWNlYzEzY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOlJqwaGWxc0WpMIxhPLgw3FaR/F
Qag9mZMTXLXd7e4B5+jq97M0jo659LxURB0Ib4XDQE8P8EFWChbLUaJj6y5YzdwA
kYbTBpRFS3YgAooVnU4b6oQqajVCGKjgCKOx+eRatwFvZg8RPd8W9tQZXVeZ3e9n
xrSu/t/PufL2kDJOHfrwOyYbOYI7suOpLr+Qy84vYaqPgFpbXhAK2RpMlYYtc/gB
Xr7pL9ZLW5U4L1O8mcZkNLgHhgSIopmZkzgYATwBB7BcNQbVdmNycEQPOpplXj2S
rWLTUxus7pblUsvrk9y+13Q5RxtpRPgfCOPDuV8pXbArea9i7J3lPPdbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdpbzW0rR0C8TbUJ6AS+mXOwTzQMB8GA1UdIwQY
MBaAFASq/4f23A02mbwpN6NNxxf5TwB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2Mt
ZTNlMGMyZGJmMDY3LzEvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2MtZTNlMGMyZGJmMDY3
LzEvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAEIksOx
XF3QedLa0EocuCXzPm3oG9JGVFXv7o0OfzkmoiGaBJJU/BceTkwEMN7Xt8rKLDq8
Ia757L/r5TtOc48IX6OA/aPGXduYBWOigDoKR1q1sSw3A+xu5Svur4NBNId3grsj
AWWoSV/o4E5DvWftGWth7mjKq0OcfP9i9aZv/EWTSeEmVpCcokbM2oRkEglVHAUw
vc/aSnlPKDPjaYnmQAaTaClfGDyfrcOG07qmXewyGapqAMWB+DNv+IA7wvA5dXdv
xBcqdJctFEN/SCkX1N2WmC3D3c8k9drmN4wlhiKCMx2MFhhvrJ6AR50iNIYDe3cn
k2jSQsRjyBKkbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:59:13 2024 by rpki-client on console-fra.rpki-client.org