Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          8h4yo+wvxZ/Oh8GQ+4Hkt8N5MKIOArkARGmAFl0eiPY=
Subject key identifier:   9F:32:3E:5F:5F:D5:33:A2:05:E3:74:0A:1A:3B:97:F9:31:28:23:6E
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       01936BC701BDB11273E5C1346A9264569C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          137B
Signing time:             Wed 27 Nov 2024 04:00:24 +0000
Manifest this update:     Wed 27 Nov 2024 04:00:24 +0000
Manifest next update:     Thu 28 Nov 2024 04:00:24 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: 1ivzuoS/xdo0MH5NHEypc8cAwF2WJHQA94F/pdFkh8g=)
                          2: pkB173lf46Vcywp4IZNJSYM0Q94.roa (hash: C4LdIHu2Vr/u9XptkJAavyORWVfOB/KPvuqFlcksPk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:01:bd:b1:12:73:e5:c1:34:6a:92:64:56:9c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Nov 27 04:00:24 2024 GMT
            Not After : Nov 28 04:00:24 2024 GMT
        Subject: CN=9f323e5f5fd533a205e3740a1a3b97f93128236e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:a5:81:ce:7c:cb:17:5b:0f:ef:a4:f4:22:
                    76:3f:31:bf:44:2f:4d:42:07:a8:10:d2:d0:3f:e7:
                    16:d4:3c:20:09:02:70:bf:1a:b2:c8:08:62:9c:0a:
                    b8:d7:2e:52:92:3c:a5:2d:fa:ff:fb:ab:cb:96:2b:
                    91:1c:b9:35:00:ee:40:50:da:c9:88:4d:5d:b2:9f:
                    2a:4f:0e:96:03:d0:d2:3d:40:e0:0c:d4:48:bf:42:
                    52:55:20:67:d8:73:91:66:95:36:89:b5:96:97:2b:
                    74:19:b2:d9:13:89:89:6f:43:45:c5:15:1c:3c:23:
                    70:3e:d2:e2:62:29:7f:61:f9:34:8f:0a:cf:bc:33:
                    52:e1:c0:be:22:02:21:ed:cd:8b:80:44:10:c2:9c:
                    a7:ee:73:4c:3c:17:fa:ee:49:bd:90:47:aa:9b:0e:
                    ea:48:04:c1:0b:c2:11:df:fb:17:37:09:d3:50:e4:
                    ed:09:8b:40:58:79:dd:36:18:07:e5:e5:ca:bf:f1:
                    e5:7f:fc:52:a8:a7:7e:91:0d:e5:e6:74:c1:5d:2a:
                    e6:73:be:fc:42:16:a6:ac:43:fa:84:3d:ae:4f:45:
                    b9:92:60:d3:fa:e6:e6:73:5b:c3:50:e6:fe:6a:8c:
                    f8:9b:f5:90:47:d0:f1:c2:78:f0:cd:0a:9b:87:a9:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:3E:5F:5F:D5:33:A2:05:E3:74:0A:1A:3B:97:F9:31:28:23:6E
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:23:58:bd:fb:3f:d1:6d:cb:d3:05:2b:69:59:fd:32:48:f9:
         47:87:95:17:02:5e:88:31:54:51:81:f4:a8:d8:ac:c4:cd:12:
         05:2d:e6:11:a9:46:f8:fe:54:e3:b8:fd:52:3b:e6:c4:e9:ed:
         86:3b:58:47:70:d5:27:64:0b:43:12:d1:0b:80:f3:16:14:b0:
         a6:47:c9:2e:60:09:c0:be:f1:8f:37:39:55:f5:bc:40:98:c3:
         42:cb:d4:a1:9a:88:08:57:da:ed:3f:fc:9f:8d:4a:0b:d6:74:
         e4:dd:04:53:17:7a:99:a4:d9:a4:bc:84:f1:20:58:3b:be:ba:
         0f:6c:10:63:56:2f:c6:98:fe:bd:ee:af:f1:9f:6e:2a:3d:74:
         da:32:64:f5:7b:fa:a6:a2:69:e2:dc:b3:48:11:a2:1b:0d:32:
         c3:0d:e9:3d:01:b2:28:ce:84:ea:45:36:f5:6d:6c:f3:bf:a8:
         57:70:d2:a1:d8:88:72:9e:b7:c4:52:40:a2:6d:4a:7e:37:88:
         73:dd:d5:5c:be:31:96:f1:59:7b:91:a4:ec:3c:9c:96:16:f2:
         e6:f6:68:cb:a2:37:69:e2:30:57:c1:ef:07:a2:95:db:32:a4:
         db:16:14:20:fc:e9:d0:dd:e3:dc:21:0f:80:f9:2d:d8:cb:89:
         8a:7a:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:23:13 2024 by rpki-client on console-ams.rpki-client.org