Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File:                     BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier:          9Ud0fKVkclM/eZ/m8RX6aZsvU2r8x0ivlDidGrp3lqc=
Subject key identifier:   B8:D6:81:A3:13:4B:45:C2:3F:29:E8:AA:D7:5A:4F:0B:85:1C:FA:EF
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer:       /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial:       01968E14F542BAD63973C915AC6AE962BE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number:          1519
Signing time:             Thu 01 May 2025 23:01:00 +0000
Manifest this update:     Thu 01 May 2025 23:01:00 +0000
Manifest next update:     Fri 02 May 2025 23:01:00 +0000
Files and hashes:         1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: //jCa9xsAi+Mm6N5lCofswEmG4knuetkR7eG017MBW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:f5:42:ba:d6:39:73:c9:15:ac:6a:e9:62:be:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
        Validity
            Not Before: May  1 23:01:00 2025 GMT
            Not After : May  2 23:01:00 2025 GMT
        Subject: CN=b8d681a3134b45c23f29e8aad75a4f0b851cfaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:d9:8f:14:90:f9:74:6d:01:4e:4e:04:20:
                    80:43:ca:10:29:8f:48:75:31:c6:9f:2b:dc:08:9d:
                    7a:58:02:6d:98:d4:32:08:38:04:2a:2a:e4:8c:52:
                    e5:1e:4b:82:e6:ca:a0:79:25:94:23:53:b1:89:d6:
                    ef:ea:81:54:21:99:3e:d6:ae:65:90:50:12:7a:6a:
                    41:39:cc:0a:66:46:3a:c6:fa:a9:3a:ab:00:5c:56:
                    29:1c:47:33:4f:2d:27:8e:25:42:eb:8c:4a:55:86:
                    94:46:cb:7f:ce:4d:68:da:ec:79:2f:a2:4f:f4:06:
                    2e:70:56:70:f3:36:99:71:37:ab:05:cd:5c:4b:d4:
                    48:d3:ec:c1:f9:c8:10:a6:ac:62:4e:30:d6:ab:2f:
                    83:7e:f7:a3:98:b4:ce:9b:6c:63:60:94:5b:aa:9c:
                    c5:2f:b7:86:f7:79:e9:e2:5f:df:89:c1:0a:af:91:
                    00:dd:2c:05:78:b5:65:69:1c:00:41:ca:20:bf:2c:
                    fb:d1:18:0e:b2:9c:80:55:f1:b9:d1:33:96:ac:55:
                    99:a9:fc:4b:c2:35:8e:91:63:8c:64:74:a6:44:cf:
                    a1:e6:8a:7e:ef:83:b1:a0:33:f7:bf:33:2f:84:02:
                    aa:98:f6:fe:38:db:75:7b:f9:37:bf:fe:4e:53:6e:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:81:A3:13:4B:45:C2:3F:29:E8:AA:D7:5A:4F:0B:85:1C:FA:EF
            X509v3 Authority Key Identifier:
                keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:e8:c2:04:06:2d:c5:22:f3:96:9c:7d:5c:6b:da:22:a6:
         d6:a8:9d:0e:d3:0b:1f:5d:96:ef:23:20:1f:20:a3:1c:37:e6:
         61:7a:0b:00:6f:96:43:ad:f0:7a:f9:09:cf:d5:77:2d:be:a9:
         d0:2e:56:7e:2c:e8:fe:ec:09:00:2b:34:95:96:38:cb:a2:3e:
         75:66:a6:1c:e0:71:51:00:e1:25:9e:e7:19:b1:07:8c:c6:87:
         a7:63:53:1e:fb:b4:f4:5b:1a:ae:e5:86:ef:e2:8f:d7:84:cd:
         14:aa:52:ee:d4:b4:66:28:71:d3:87:e1:61:74:20:47:36:72:
         e9:a9:aa:71:c9:fc:e7:d1:c9:41:a8:9c:5b:43:ab:21:56:44:
         92:85:54:14:22:01:e4:4c:f8:5b:75:79:dc:e8:e5:eb:cb:f9:
         0f:ad:48:c6:5a:66:89:27:f8:bf:cd:fe:f7:d0:eb:7e:80:05:
         e2:79:3e:63:08:34:50:3a:ae:e2:4d:b6:8e:4f:e2:41:eb:24:
         4c:45:81:62:66:5e:e9:bf:b0:50:cc:dc:f3:97:31:66:e7:b7:
         f4:d2:a0:e4:05:51:cd:81:ea:7f:3b:e2:55:98:c5:e2:40:06:
         6a:de:45:69:49:a2:a8:6b:d5:e2:90:6f:7a:3a:46:2c:20:39:
         e9:1c:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:58:29 2025 by rpki-client