Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File:                     BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier:          sOzwf617hSVKJQUv5ytMexHpWcQlcYV+oqXxE6AG8wE=
Subject key identifier:   BC:63:E2:D4:3F:1A:01:DA:40:BF:84:B5:E1:61:81:81:04:14:3C:9D
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer:       /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial:       019368210C0E1617062994B977BAADA7E2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number:          018B
Signing time:             Tue 26 Nov 2024 11:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 11:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 11:00:16 +0000
Files and hashes:         1: 9x6CeORey6i4-S-XbaQOw8ouC34.roa (hash: M9ky/86/O1AWg/i2UJgJKYGRfRgyL3NA/mHSt7QGkxE=)
                          2: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: DT0vtnAy2WsrxvPZmeMpUhdaKh4FYztPhy0pxzEg29o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:21:0c:0e:16:17:06:29:94:b9:77:ba:ad:a7:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
        Validity
            Not Before: Nov 26 11:00:16 2024 GMT
            Not After : Nov 27 11:00:16 2024 GMT
        Subject: CN=bc63e2d43f1a01da40bf84b5e161818104143c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:12:ba:2d:b4:4c:ee:fc:00:71:42:dd:2d:
                    ab:39:c4:38:37:bb:59:d6:35:6c:87:e1:aa:7a:3f:
                    fc:0d:66:b9:0a:b4:b0:6e:26:64:2d:d0:a1:d3:37:
                    26:64:6c:50:52:5c:fe:4b:99:8a:98:15:99:22:82:
                    93:f1:47:e6:d7:cb:f3:c8:86:69:9e:86:88:6f:10:
                    2c:5e:16:74:bd:05:6d:b8:0c:15:0b:86:0b:86:b9:
                    9c:2a:d0:8b:5f:f5:db:29:02:3d:59:b6:9c:cb:06:
                    2b:4d:62:d7:40:d6:3a:35:7e:48:76:3f:40:7f:3f:
                    ce:f4:74:7a:60:38:77:40:2a:a7:2f:d5:db:5d:c9:
                    6d:52:5e:22:c4:33:26:9d:19:bb:38:4c:40:cb:a2:
                    4a:9d:ae:09:c2:ea:26:bd:ea:01:68:42:6e:1e:7f:
                    95:dd:93:ba:df:01:79:f5:a3:d3:84:1e:b5:ab:49:
                    18:a2:aa:56:0b:8a:41:72:3c:72:33:d1:35:c2:51:
                    e9:3b:49:8a:df:63:fb:e3:1b:93:55:76:d5:54:30:
                    ab:8f:a1:a0:c8:cf:50:00:c4:ef:09:17:be:2d:86:
                    4b:bb:49:ed:bb:d0:53:23:4b:69:91:f2:58:14:e8:
                    27:6d:1e:9a:49:19:d6:da:0a:e0:0c:38:0a:f5:f8:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:E2:D4:3F:1A:01:DA:40:BF:84:B5:E1:61:81:81:04:14:3C:9D
            X509v3 Authority Key Identifier:
                keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:6b:aa:77:89:ee:00:31:f5:88:70:a0:20:b4:68:73:36:
         d5:ad:f7:42:15:27:0c:18:d1:49:18:40:ad:6f:ed:c1:13:3e:
         bf:68:f1:02:4d:8b:fc:d7:bb:9c:08:68:41:98:99:7d:7a:f2:
         ce:11:d3:4a:73:00:1d:59:d7:d7:59:fa:85:1d:aa:81:f8:a1:
         0a:c9:3c:70:94:5c:8a:03:b0:5d:be:3c:41:ba:fc:86:00:a6:
         f4:c8:55:98:5c:a5:67:ef:e4:52:b0:09:fa:d0:86:53:75:32:
         d7:27:23:68:bb:29:9c:6b:f1:a2:79:1b:03:c7:2b:8c:b8:ef:
         7a:0b:dd:60:4b:d1:55:b8:0d:6a:8c:11:ab:48:b2:65:9a:fd:
         09:48:8b:93:4b:d0:75:8f:89:9f:13:09:f6:ba:b3:8f:71:7e:
         3d:98:bf:c0:c7:b8:26:87:25:4d:4a:e4:7a:59:1d:19:9d:76:
         64:5f:20:99:ae:46:56:a9:4e:0d:74:f3:80:13:f9:d5:32:e5:
         11:43:37:9d:9a:6a:ba:0e:4f:c1:69:76:4e:5d:9c:88:8b:5b:
         7a:95:ef:97:d1:9f:a9:13:61:6b:3d:ce:48:3b:2f:cb:b2:b1:
         24:55:49:b0:dc:d5:d4:6d:73:de:20:2b:47:ec:2f:88:01:66:
         73:14:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 13:26:13 2024 by rpki-client on console-fra.rpki-client.org