Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
File:                     BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft (raw, json)
Hash identifier:          IURj6Wv1gVnuRT56gYS6uWwjLl2PhGzJsPKG46phQs8=
Subject key identifier:   49:EA:4B:B5:10:FC:52:01:E2:C5:CE:39:78:02:E6:21:5F:61:83:F5
Authority key identifier: 05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E
Certificate issuer:       /CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
Certificate serial:       01969E99FB3F26C1E23FE49B455BB44E22BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
Manifest number:          1521
Signing time:             Mon 05 May 2025 04:00:13 +0000
Manifest this update:     Mon 05 May 2025 04:00:13 +0000
Manifest next update:     Tue 06 May 2025 04:00:13 +0000
Files and hashes:         1: BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl (hash: h5R7GeW5+ZGR4HxylVMEe98ZdWusj6uRYeLnUkj7yIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:99:fb:3f:26:c1:e2:3f:e4:9b:45:5b:b4:4e:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0553c433f6c225019d9cb5a4330012f4c77a1f3e
        Validity
            Not Before: May  5 04:00:13 2025 GMT
            Not After : May  6 04:00:13 2025 GMT
        Subject: CN=49ea4bb510fc5201e2c5ce397802e6215f6183f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:bb:f2:94:43:67:cc:f6:46:4a:2e:59:7c:
                    13:7d:1f:a0:90:e8:30:c0:eb:3f:17:aa:e8:8a:84:
                    5d:46:78:b4:5f:17:23:32:f8:05:21:94:6d:22:ab:
                    54:f3:b1:65:ac:13:57:f2:0f:7d:9c:cc:30:b1:d5:
                    47:5a:4b:de:a9:b7:93:2c:03:1f:b6:53:e6:29:2a:
                    d0:e8:c7:37:52:3a:6d:ba:d8:0a:3b:7a:b9:76:79:
                    33:5d:b6:7d:c4:b8:9b:c9:db:67:1d:6c:a8:79:99:
                    0c:3d:60:20:54:f6:99:7d:ab:0f:5e:46:5a:9f:fb:
                    28:f6:a0:fc:67:e0:25:41:c2:05:68:77:43:55:91:
                    e9:7e:65:22:45:21:14:71:86:3c:2a:62:42:6d:29:
                    cb:34:2e:5d:92:f8:fa:b3:de:63:f7:06:db:65:86:
                    37:4a:14:e6:b9:32:62:10:33:81:9a:e1:78:94:00:
                    eb:ae:63:d5:be:d5:3c:6e:4b:cd:57:e7:d2:e5:91:
                    8d:7d:d9:01:97:61:a2:55:e1:9c:33:63:1b:80:85:
                    da:aa:da:72:4e:44:40:05:6b:de:ad:59:56:5e:a2:
                    31:d4:58:32:39:de:a9:fe:e3:78:22:86:f0:5e:cb:
                    47:2a:9d:48:93:c7:ce:db:24:eb:d1:c9:73:0f:21:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:4B:B5:10:FC:52:01:E2:C5:CE:39:78:02:E6:21:5F:61:83:F5
            X509v3 Authority Key Identifier:
                keyid:05:53:C4:33:F6:C2:25:01:9D:9C:B5:A4:33:00:12:F4:C7:7A:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/324a9d-cf07-4e71-83a1-182512f8bcde/1/BVPEM_bCJQGdnLWkMwAS9Md6Hz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c3:09:59:cb:e2:19:da:c3:55:65:2c:b2:e3:c3:a7:5f:87:
         f4:d7:f6:11:03:d0:ad:fe:c1:d6:c1:f6:02:69:a3:bc:49:1b:
         53:e5:f2:8b:0b:b1:95:b3:bc:6b:7b:3c:38:bf:20:53:0c:1b:
         f2:35:60:d3:2d:e9:62:18:de:20:01:49:3c:4b:7e:cc:fa:f8:
         eb:65:d6:6f:d8:bd:aa:2b:10:43:da:13:54:cb:bf:4e:e1:63:
         82:7a:52:e9:30:df:32:f3:66:1d:58:99:29:a3:e8:a7:fc:44:
         2b:2e:f7:cf:eb:ea:4a:be:8b:28:a3:9e:28:53:14:b5:33:73:
         23:83:61:fa:12:38:5f:2e:61:fb:ec:5c:8b:0e:df:5e:48:74:
         f7:7d:d1:cb:6f:60:c8:fa:27:45:9c:b4:df:2a:13:da:b7:73:
         e2:56:5e:93:77:4a:e4:08:ed:b5:64:44:2b:8e:7e:23:72:13:
         cb:ca:39:75:13:2a:7c:fe:9c:43:95:37:5b:1a:29:fe:b9:8a:
         43:c3:b6:6e:ef:f3:37:74:79:0a:77:64:01:d6:12:d6:19:6b:
         4e:d1:93:d4:e4:d9:8e:89:7b:56:d0:ff:49:35:ef:9b:19:bd:
         71:f4:cb:ef:03:91:9d:da:e9:f0:08:28:e6:f0:72:c0:56:07:
         c4:fe:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:55 2025 by rpki-client