Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File:                     Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier:          xPI0pLGqPdvKh6EGctTvjtIwjkWZ9H/Ub1lMyLg/goc=
Subject key identifier:   8D:A3:0E:A7:DE:E5:59:EB:EF:FA:45:49:61:2B:B2:E1:1D:40:BD:77
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer:       /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial:       019675304B06BA4365DDEA77BF8C31BBD36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 03:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:21 +0000
Files and hashes:         1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: c5Fu2R99Id9W+Aem5OXuOdHvm15NjT5hwcyv5vHhqZE=)
                          2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:4b:06:ba:43:65:dd:ea:77:bf:8c:31:bb:d3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
        Validity
            Not Before: Apr 27 03:00:21 2025 GMT
            Not After : Apr 28 03:00:21 2025 GMT
        Subject: CN=8da30ea7dee559ebeffa4549612bb2e11d40bd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:d6:36:26:bb:59:c2:0a:94:35:b8:b7:66:
                    e5:04:e6:31:24:5f:16:64:1d:ca:99:3d:cf:7e:3d:
                    f8:de:07:ef:f3:52:b4:b3:3a:a9:49:a7:35:1d:92:
                    6f:70:12:32:85:fd:34:ce:f5:0c:47:d0:c0:59:47:
                    16:ef:86:21:5e:3a:cb:5e:1b:f0:6b:fa:f7:72:93:
                    83:d3:16:a9:b1:ae:13:37:bf:f0:77:b4:a2:f2:98:
                    f9:3f:11:06:59:fc:7d:61:f0:7f:b8:f6:72:d5:00:
                    f2:8f:bd:2f:70:b9:b2:fc:eb:be:f3:0f:61:31:b2:
                    40:3c:5c:6b:9a:4c:1a:36:d0:56:3a:ad:12:ac:3a:
                    46:37:f9:5d:54:2d:43:9c:7b:b7:a1:ac:03:20:89:
                    fd:15:e3:cc:3c:02:d8:64:d6:e9:9e:90:17:c6:fd:
                    e6:90:16:89:b2:10:bd:0d:f8:81:15:bd:82:b7:14:
                    5b:a8:d0:ca:58:bc:d9:a8:b0:a0:68:c9:09:ae:ea:
                    11:80:e3:8b:ad:d8:e0:89:07:ef:d6:ae:9d:05:18:
                    9d:5b:65:5b:45:8b:37:d0:5b:b0:0a:1c:ff:50:d2:
                    8b:9f:ef:09:93:1c:61:00:8b:65:93:d3:6d:5c:87:
                    18:da:97:58:a3:f2:e1:66:e6:ae:78:10:65:10:8a:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:0E:A7:DE:E5:59:EB:EF:FA:45:49:61:2B:B2:E1:1D:40:BD:77
            X509v3 Authority Key Identifier:
                keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:77:2d:d0:0e:83:f6:09:ec:7a:3c:fb:b8:96:93:8c:e9:97:
         62:09:ff:6d:b8:a2:c0:7e:c5:fe:23:06:96:bb:13:23:95:94:
         a7:97:a4:9a:54:03:54:0f:41:5a:09:93:3f:06:7e:bd:25:60:
         04:ad:0c:85:6f:4a:a0:5a:c7:87:7f:25:5c:35:4e:27:a1:4a:
         72:f7:4e:9d:42:0f:62:7b:14:05:03:7e:a9:df:2f:ff:ca:b8:
         72:1a:a9:27:95:01:4a:b6:09:05:cb:62:b1:68:d2:2c:2c:b1:
         ea:9d:83:20:18:3b:94:22:0f:60:81:38:87:f9:d3:06:6d:a2:
         a0:cb:54:ee:50:2a:95:01:fd:ed:bd:6c:04:7f:3e:40:57:c1:
         37:b2:9f:a2:95:c9:60:2d:3d:f2:c5:1d:0d:05:3a:8e:80:19:
         0e:27:b3:bc:fa:c1:c8:0e:bb:19:98:f2:44:d3:a0:4d:b9:99:
         6f:e4:8b:c7:e4:20:c6:2f:52:ec:c6:ef:f8:03:c2:7b:9d:f8:
         e9:23:70:5a:e9:93:ad:56:3b:0d:c2:1d:0b:d2:3c:78:37:0f:
         e9:33:fe:f7:b4:86:03:e4:d3:0d:79:5c:52:e6:62:2a:ac:17:
         48:53:27:77:11:00:73:0f:62:16:c9:49:76:94:35:34:59:5a:
         b0:b7:a0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MEsGukNl3ep3v4wxu9NqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzczZWI4MjFjOTY2YmEyNjdhODM4ZDk1MmZjNGE0MThj
YmExMDcwHhcNMjUwNDI3MDMwMDIxWhcNMjUwNDI4MDMwMDIxWjAzMTEwLwYDVQQD
Eyg4ZGEzMGVhN2RlZTU1OWViZWZmYTQ1NDk2MTJiYjJlMTFkNDBiZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSPWNia7WcIKlDW4t2blBOYxJF8W
ZB3KmT3Pfj343gfv81K0szqpSac1HZJvcBIyhf00zvUMR9DAWUcW74YhXjrLXhvw
a/r3cpOD0xapsa4TN7/wd7Si8pj5PxEGWfx9YfB/uPZy1QDyj70vcLmy/Ou+8w9h
MbJAPFxrmkwaNtBWOq0SrDpGN/ldVC1DnHu3oawDIIn9FePMPALYZNbpnpAXxv3m
kBaJshC9DfiBFb2CtxRbqNDKWLzZqLCgaMkJruoRgOOLrdjgiQfv1q6dBRidW2Vb
RYs30FuwChz/UNKLn+8JkxxhAItlk9NtXIcY2pdYo/LhZuaueBBlEIoILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2jDqfe5Vnr7/pFSWErsuEdQL13MB8GA1UdIwQY
MBaAFAY3PrghyWa6JnqDjZUvxKQYy6EHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUt
ZjMzZTNjNWM2NWRiLzEvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUtZjMzZTNjNWM2NWRi
LzEvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnct0A6D
9gnsejz7uJaTjOmXYgn/bbiiwH7F/iMGlrsTI5WUp5ekmlQDVA9BWgmTPwZ+vSVg
BK0MhW9KoFrHh38lXDVOJ6FKcvdOnUIPYnsUBQN+qd8v/8q4chqpJ5UBSrYJBcti
sWjSLCyx6p2DIBg7lCIPYIE4h/nTBm2ioMtU7lAqlQH97b1sBH8+QFfBN7KfopXJ
YC098sUdDQU6joAZDiezvPrByA67GZjyRNOgTbmZb+SLx+Qgxi9S7Mbv+APCe534
6SNwWumTrVY7DcIdC9I8eDcP6TP+97SGA+TTDXlcUuZiKqwXSFMndxEAcw9iFslJ
dpQ1NFlasLegYw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:00 2025 by rpki-client