Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File:                     BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier:          1GV1OS//U8VWXxCn+2HOQeHkY9Fgv+mDKvQXvDelQoE=
Subject key identifier:   55:41:F7:DF:BF:77:E0:B7:53:2F:1D:45:58:B5:65:F8:0D:40:67:87
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer:       /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial:       0194BABB4332213EB177975DB9CCDFBD052A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number:          0983
Signing time:             Fri 31 Jan 2025 05:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:22 +0000
Files and hashes:         1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: wXJOui6aAlvCD1tVAZLEwsYiZ3HKXe0RXTetvxFYwaE=)
                          2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:43:32:21:3e:b1:77:97:5d:b9:cc:df:bd:05:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
        Validity
            Not Before: Jan 31 05:00:22 2025 GMT
            Not After : Feb  1 05:00:22 2025 GMT
        Subject: CN=5541f7dfbf77e0b7532f1d4558b565f80d406787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:85:1b:41:7d:51:ba:3c:cd:ea:c5:4f:a9:
                    12:79:e1:88:fc:30:d0:6e:43:50:25:9f:24:2a:1a:
                    7d:4a:54:0f:7c:f3:31:67:ef:9f:f4:23:4b:f4:3c:
                    ac:ed:d8:11:50:09:ff:f0:06:10:52:78:fd:d5:16:
                    4c:9d:61:96:8e:32:e9:65:58:73:3b:47:28:af:8c:
                    05:4e:f2:62:52:3c:7b:7b:4a:d3:85:e3:74:fd:79:
                    14:37:9a:dc:aa:3d:6c:18:a4:23:1a:e1:43:ca:a7:
                    10:30:c0:e7:b5:7b:8a:7c:71:6e:1b:3b:b4:d1:7a:
                    9b:18:d4:fa:4f:a6:71:47:5e:51:6d:7b:d6:d2:c9:
                    38:3f:1f:f6:f1:37:2d:a6:c8:7a:58:54:ee:99:8e:
                    a7:1d:dd:bf:47:e1:c4:1b:ff:9a:2d:ee:c8:f4:b4:
                    4a:61:97:e0:a1:e3:58:c8:6f:2a:15:15:28:56:e2:
                    8c:f2:ce:ff:1b:0a:e1:84:94:57:3d:1e:b8:5e:b2:
                    4c:7c:b6:7b:0b:6c:e3:51:4d:a7:fa:e9:34:96:8e:
                    5c:26:3f:e7:be:3f:22:4a:2d:a3:ed:18:4b:60:0e:
                    f4:76:bc:1a:7b:74:a4:78:e8:cd:12:76:9d:4e:f6:
                    f2:c8:67:5e:3d:b1:1c:4f:31:6e:e5:78:3c:5b:53:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:F7:DF:BF:77:E0:B7:53:2F:1D:45:58:B5:65:F8:0D:40:67:87
            X509v3 Authority Key Identifier:
                keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:37:e8:14:1a:bf:8a:83:ab:bc:3b:38:98:3a:f4:66:b2:
         db:e0:03:7c:35:45:f2:2e:0c:0b:c6:f9:4f:5d:a3:b5:41:f6:
         81:b8:45:fc:39:d5:c9:f0:0e:89:83:fd:8f:6f:ad:b2:4f:50:
         20:b4:29:70:5a:fe:4c:eb:d3:00:3d:c4:13:1c:2b:a9:ee:4e:
         7e:e0:6e:01:52:cd:57:e7:d3:c6:e8:02:1a:53:47:ee:5a:bc:
         23:99:ed:19:9c:03:5f:ce:cf:f3:3e:85:14:1a:e9:68:6d:25:
         87:50:b2:89:b2:01:f3:b4:1f:c6:f2:ca:f3:2f:1d:8b:ce:f9:
         52:85:77:db:d9:7b:b2:94:ca:61:fb:6c:75:8a:0f:43:81:c9:
         0d:24:fe:97:57:b2:b4:10:88:27:99:41:eb:1d:03:84:a3:8a:
         89:21:e2:9a:d2:07:41:bd:49:aa:8f:95:c0:23:b2:51:81:ce:
         e1:51:45:ca:23:03:20:5f:35:8e:ae:13:38:4b:15:1c:60:cd:
         b2:06:3c:44:0f:63:1f:82:f4:37:3d:5b:42:59:67:36:fd:87:
         a8:6d:4a:bc:62:96:5e:2a:32:4e:1a:4f:77:9b:7e:f9:cc:70:
         70:8a:61:73:96:b8:73:be:64:b1:ac:0e:67:f3:b3:f1:50:cc:
         83:4a:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:26 2025 by rpki-client on console-fra.rpki-client.org