Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File:                     bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier:          4RxmCywMW/NFhFAgoHAlYh2+L49K7Y8L+khynkG2opo=
Subject key identifier:   B2:BD:95:13:C9:49:24:30:5D:DB:D2:F3:BD:05:3D:FD:23:59:D2:52
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer:       /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial:       01903EC01E83E25ACECFCC178722CFDC94F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 07:01:36 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:36 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:36 +0000
Files and hashes:         1: XMxj-_vGRo1cP1FdykQmMlQsZNo.roa (hash: U77Klp6QozRj4GmXaEu2v+gCGo3OJpYWJliQammC7WE=)
                          2: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: qW8GpNBz3pLj5BPUgo9hr84n6k8TlT8uvPXBi+6Ck8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c0:1e:83:e2:5a:ce:cf:cc:17:87:22:cf:dc:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
        Validity
            Not Before: Jun 22 07:01:36 2024 GMT
            Not After : Jun 23 07:01:36 2024 GMT
        Subject: CN=b2bd9513c94924305ddbd2f3bd053dfd2359d252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:60:f1:e7:6e:87:a6:d3:2a:50:a7:8f:0a:
                    b8:86:0f:48:f0:78:88:a6:89:94:cb:3e:1e:ea:92:
                    43:e7:d3:d7:67:0b:a7:33:ec:bd:28:29:36:92:77:
                    a5:2f:09:5a:b1:76:73:92:82:31:fd:13:f0:b5:44:
                    dc:a8:97:b0:aa:c8:27:da:d3:ee:66:50:5e:87:60:
                    0b:27:0e:4f:7a:f4:c8:61:92:11:40:2b:87:ae:b7:
                    6d:bb:3d:49:95:7b:6b:a9:8c:cb:de:51:48:6c:e9:
                    6a:06:21:03:d0:97:eb:c7:b7:eb:af:11:c7:96:6c:
                    ce:44:ec:84:fc:20:bf:5a:91:db:55:f2:be:e2:03:
                    f4:6a:17:9e:14:da:3c:4e:2c:6d:dd:69:81:82:63:
                    10:e7:3d:a1:74:90:13:4c:5c:dc:f9:a6:2b:3b:3e:
                    30:12:bc:9a:ee:16:00:87:fe:23:d2:3c:a4:68:1a:
                    2a:d5:2e:b7:2f:c8:32:3e:64:68:ef:08:39:25:32:
                    70:f9:f1:ff:f9:87:b9:56:b4:fa:24:2a:7c:97:d0:
                    88:32:2c:c1:5c:74:d1:eb:68:24:a0:af:fe:98:bf:
                    73:7e:8f:b2:ff:8e:be:b1:b0:d0:00:08:6f:f4:21:
                    34:dd:be:58:8b:f1:2b:4e:ee:93:10:99:d5:ad:1d:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BD:95:13:C9:49:24:30:5D:DB:D2:F3:BD:05:3D:FD:23:59:D2:52
            X509v3 Authority Key Identifier:
                keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:0e:46:c4:d5:58:f0:f5:26:a9:62:20:79:ce:2d:8e:96:
         32:6b:48:5e:d3:c7:86:6b:1d:b3:ec:77:7e:7c:0c:1f:f7:a3:
         f5:9c:9f:a9:c9:32:4d:f6:be:93:40:a0:04:6f:a2:31:2b:ad:
         1c:5c:fb:95:e6:00:67:a0:e9:14:59:92:2e:c7:8f:33:29:3a:
         3e:b0:7f:92:5c:3d:4f:4e:96:57:e3:88:8a:96:c9:f2:ec:5e:
         9e:91:4e:c7:2a:82:26:95:3c:bc:98:6d:9b:bf:8e:83:48:15:
         df:e1:1b:18:b6:0c:a3:bd:15:ca:3f:40:f9:03:c5:c2:f2:e7:
         16:37:af:9e:b6:84:70:81:46:f2:e1:46:7d:a2:f6:43:41:17:
         5d:da:a1:a5:07:1c:a0:ec:ed:bb:ba:ab:8a:08:3d:54:75:0b:
         8f:0f:5a:02:73:1e:3f:45:26:fc:41:89:4f:03:31:ff:a7:0b:
         f6:14:cd:77:1f:5e:7c:af:3c:aa:a3:85:12:ac:2f:a8:cd:27:
         9a:aa:fa:78:05:67:b7:4d:28:97:be:0f:ac:ad:70:2d:eb:d1:
         af:71:03:9a:b8:de:20:f1:3c:df:e1:7f:eb:8c:93:80:44:e9:
         17:fd:cd:00:20:87:d8:35:6b:fc:20:6c:e5:c6:f0:cf:6c:54:
         78:74:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:47:50 2024 by rpki-client on console-ams.rpki-client.org