Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          qE3aapOWQAAfovjfbP6l4lFzudF3SqVfqiV+EvUqpvc=
Subject key identifier:   B8:7E:52:7A:9F:45:21:1F:CC:7F:D2:4C:82:64:AF:0E:D5:88:0A:8D
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       0193696ABE3DC60C24121787D8D391C03C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          07BA
Signing time:             Tue 26 Nov 2024 17:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:23 +0000
Files and hashes:         1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: lR3Vhk45w8s+hFhnoNlS+O9ThimhJGv1QF9gBQcBzho=)
                          2: fm99mZCGNYJ-5ocZr2ScpU80fcQ.roa (hash: QPMPg9oqetsk+c03DvnSnqoKoKuVBNHLAklyZCc4edM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:be:3d:c6:0c:24:12:17:87:d8:d3:91:c0:3c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Nov 26 17:00:23 2024 GMT
            Not After : Nov 27 17:00:23 2024 GMT
        Subject: CN=b87e527a9f45211fcc7fd24c8264af0ed5880a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:18:15:eb:bc:6d:dc:74:7b:7d:f4:01:a5:
                    2e:fb:1a:8a:48:57:ea:1c:1c:dc:2d:2b:fd:00:63:
                    fe:21:6e:80:9a:a2:cd:92:41:2d:99:ca:7d:bf:b3:
                    7c:9f:9c:83:ec:8b:35:39:5d:cb:63:d1:cb:56:c4:
                    0c:ce:01:22:c1:25:2c:76:2d:08:0a:73:da:38:38:
                    b2:7c:9d:f9:5e:6a:20:65:1f:3c:4b:09:83:9a:38:
                    7e:96:ab:37:10:5e:a2:e1:bb:3b:09:16:ff:53:d0:
                    7b:3e:13:34:1d:a5:9b:0e:5e:08:be:71:8a:35:fd:
                    5f:c9:b9:19:0a:a4:6b:72:cf:03:af:59:af:56:d6:
                    7a:6f:85:b3:5f:37:c6:09:ac:cf:fd:3f:bd:0c:94:
                    b3:ff:d6:af:1b:dd:4a:88:87:82:ed:79:df:d1:fa:
                    d1:af:75:ed:6a:c3:69:8f:5e:3c:2d:41:f9:3a:26:
                    42:85:48:cb:b9:f1:00:ac:21:78:f1:03:73:a9:1d:
                    d9:7b:86:7a:99:b1:5a:f3:b5:83:8e:ce:d7:34:11:
                    f8:18:a8:db:8a:9c:ec:29:97:ed:eb:d5:56:26:fd:
                    df:0a:38:cb:00:df:8a:86:8e:a9:6f:9b:14:33:23:
                    fb:4b:38:75:3b:07:d7:f4:92:dc:1e:be:b2:5c:f8:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:52:7A:9F:45:21:1F:CC:7F:D2:4C:82:64:AF:0E:D5:88:0A:8D
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:32:81:c8:4e:4b:00:2d:c5:69:52:a5:35:06:c5:77:2a:
         ce:69:d5:30:e2:77:a3:7d:71:ef:fd:87:70:e7:4d:55:58:5d:
         0e:a7:36:a1:df:cc:43:da:b1:e5:83:98:b2:34:79:9d:b6:f8:
         6c:88:cf:52:13:be:75:25:82:c5:9a:49:99:db:13:c1:14:9e:
         63:49:a9:28:9c:2b:d7:7b:42:1d:21:a0:a0:d4:3f:98:55:0b:
         91:e2:c1:53:0c:a7:11:25:af:9a:d7:a0:c9:75:cc:3c:06:03:
         d7:f6:dc:7f:ef:25:40:dd:a7:88:d6:4d:29:d5:c5:c1:96:90:
         fd:c7:57:ef:a1:94:69:60:1c:46:57:a5:e4:90:fa:47:5c:00:
         f7:e0:7a:47:e1:80:58:49:8a:77:6f:98:95:04:05:19:bc:9f:
         65:34:74:bd:59:77:ba:64:eb:72:df:cc:5c:ac:c2:52:31:84:
         35:48:58:72:e6:6b:d2:9a:88:d0:34:9e:05:d8:20:3a:30:85:
         7c:1c:76:05:22:4f:5f:7e:74:31:56:ea:d7:74:97:e6:d8:84:
         89:9b:c6:e4:00:e8:0e:3c:c6:20:40:9c:d4:c4:91:b0:98:6b:
         db:6c:d1:88:5f:f7:5d:db:a3:11:8d:93:af:44:a6:97:85:be:
         5a:cf:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:39 2024 by rpki-client on console-ams.rpki-client.org