Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File:                     BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier:          oSobDGmslMLPZ+rF9wGtgO8gs9egN/QVsMfu7EUuHnc=
Subject key identifier:   0F:5E:1C:FE:82:84:C4:CA:7F:BB:30:7B:D2:2B:9B:49:37:CD:E9:2F
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer:       /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial:       019356BFB0E9F5AA3ABBED0E8F4B4B93DF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number:          031B
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: g3M0DkUMzRX33Zm2KM3OBe7i88LzzNH3e45LHoqPJcE=)
                          2: sCvmYAdCqwQNV1kPHIqHYUEzZao.roa (hash: Plngbv+x9klhJ1CAjiqThRofGctYt08hS5Axrih5w9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b0:e9:f5:aa:3a:bb:ed:0e:8f:4b:4b:93:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=0f5e1cfe8284c4ca7fbb307bd22b9b4937cde92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:99:0e:77:20:44:94:af:11:e6:03:41:43:
                    21:c2:b9:52:56:92:85:d9:48:d4:b1:12:3b:1e:b5:
                    39:21:36:fd:41:ef:59:4b:03:a2:a4:ae:d8:e5:d8:
                    69:dd:a1:25:29:8f:38:7d:44:2e:0a:df:51:45:c6:
                    de:6c:5b:3b:ad:48:e3:b9:30:bc:2a:44:5c:11:2a:
                    84:db:9b:1a:7e:43:57:ab:53:b4:ef:c2:9e:57:84:
                    6c:4d:ed:69:ee:cc:33:d2:90:1b:34:fe:ed:5d:4f:
                    a8:aa:fb:c6:07:3e:b8:c7:6f:76:0d:03:7e:1d:4f:
                    a2:ca:ca:99:f7:50:6e:c9:fa:71:c4:ae:dc:d8:a8:
                    b8:26:81:28:e0:4c:a5:b5:ef:4e:0c:1b:18:ad:7e:
                    9c:de:86:8c:6f:a8:7c:5d:bb:47:91:3c:c1:4d:f8:
                    08:1e:ce:37:11:1a:4e:76:b4:b5:8c:81:69:28:68:
                    a9:14:b5:6b:0b:7d:05:55:3a:99:c1:78:ce:4c:1b:
                    9e:70:90:56:8f:2f:92:45:6b:f4:62:5e:b5:66:ae:
                    60:50:7c:79:f3:35:ff:25:14:24:22:c4:29:46:44:
                    d8:92:ca:4a:34:2d:bd:b8:72:8d:b1:f5:cd:77:c0:
                    5e:72:63:61:e8:e4:bd:e5:3b:d7:9d:1c:54:b4:40:
                    a9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:1C:FE:82:84:C4:CA:7F:BB:30:7B:D2:2B:9B:49:37:CD:E9:2F
            X509v3 Authority Key Identifier:
                keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:b0:09:43:6a:f8:b4:14:44:7b:b5:5c:35:80:68:e4:63:
         51:85:0e:b4:19:cd:34:b0:ac:67:5a:57:e4:aa:79:05:22:a2:
         2e:86:d7:30:94:59:2a:1e:01:13:2f:96:30:a0:b0:83:aa:75:
         80:83:4e:71:48:d1:bc:07:26:85:a4:b0:11:7b:e6:9b:90:9b:
         f2:87:c5:ae:4a:16:01:31:a5:56:d2:a3:cf:4a:c9:4c:0e:27:
         61:5f:ae:00:95:25:d6:51:a9:8d:9d:9c:66:84:dc:1f:3f:d3:
         73:32:81:ac:42:37:cf:8e:df:94:79:8a:62:fd:89:b9:d5:e3:
         57:8c:ce:69:1e:e9:f1:dc:58:ee:67:8b:e0:42:3f:e9:8d:92:
         d7:33:5a:01:a6:6a:06:fa:8e:40:a8:df:0a:36:5f:3e:53:6b:
         21:99:b4:2d:d6:bf:4f:0c:cd:bf:86:2f:56:e3:8b:6c:d4:d1:
         60:a7:db:c1:cd:6b:cf:c6:e0:88:94:99:a0:26:bf:5a:b0:3b:
         0a:d2:68:f4:15:6d:42:04:41:c8:ee:c0:15:7f:42:45:74:91:
         34:13:f6:75:c2:ca:c3:96:6e:dc:2a:45:db:62:82:e9:bc:bf:
         3f:b7:1a:b1:6a:f4:fb:5f:0b:9b:8e:55:f1:cd:77:81:46:fd:
         df:6a:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:42 2024 by rpki-client on console-fra.rpki-client.org