Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          YrpzQWVz4Sgw7hqXlxi/ZJAsZf1bi8J/ED9+AqwJT3M=
Subject key identifier:   EF:0C:E8:68:49:92:E2:6E:42:28:B2:29:14:8F:13:76:9C:EC:C3:72
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       01901DEB4CE0330FF6E5E935A63A2E05BCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0484
Signing time:             Sat 15 Jun 2024 22:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:18 +0000
Files and hashes:         1: 1CqdgnBv1ZBCon6OG6SPMurrNFA.roa (hash: w9PtvLvkFOzFC9hy+KTjfhiAFxYTe7nn2tlOIBkg0LA=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: l74O+hDwBbyzxIrJjiBZxvrpHcTJUElKSPNcleKIzOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:4c:e0:33:0f:f6:e5:e9:35:a6:3a:2e:05:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Jun 15 22:01:18 2024 GMT
            Not After : Jun 16 22:01:18 2024 GMT
        Subject: CN=ef0ce8684992e26e4228b229148f13769cecc372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:52:41:21:64:f2:7d:55:9b:11:20:98:de:
                    a4:6c:79:8f:23:65:05:0e:91:0a:42:35:b5:bd:46:
                    18:fc:19:48:c0:18:94:db:a5:e5:76:69:08:d3:f8:
                    bf:34:9b:6f:a1:b0:18:ae:22:2e:08:1c:ac:17:8d:
                    8d:ce:ce:85:d2:78:ca:ee:c9:4d:e4:16:e8:8d:f2:
                    8b:bc:b1:d6:81:71:be:7d:f2:65:3e:68:d0:e4:2b:
                    7e:1b:08:56:f9:78:f8:0e:f6:65:f4:20:05:d9:d8:
                    09:8d:0f:6e:55:d6:42:f3:4d:15:6a:f3:12:31:8e:
                    9c:4d:82:d9:3f:97:6c:9a:10:49:b9:ec:93:b5:a4:
                    64:af:19:d2:e5:c1:09:96:c8:25:4e:e8:10:42:35:
                    c6:88:53:a7:84:ec:fc:a1:ef:58:fd:01:8d:7b:c8:
                    5a:8b:85:d9:b9:e5:ea:fa:be:58:92:70:54:a0:10:
                    f3:76:68:65:ad:80:f9:c9:dd:84:ea:42:b1:e4:40:
                    c9:7f:93:4a:03:f4:83:e4:13:c4:bf:52:c3:35:e6:
                    ac:8c:2b:94:75:73:dc:e4:a2:de:ef:11:04:00:9a:
                    35:29:f9:d7:ba:58:31:b3:6a:87:82:96:4b:47:10:
                    5f:56:87:7a:83:88:21:53:90:0d:8f:15:e6:bf:97:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:E8:68:49:92:E2:6E:42:28:B2:29:14:8F:13:76:9C:EC:C3:72
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:83:17:2a:19:c7:2e:33:31:ea:7c:86:b4:65:4f:83:ad:
         eb:c7:00:a4:23:74:0d:d5:c6:4b:69:e5:06:4f:44:c6:b1:b9:
         aa:6d:5c:ed:83:69:49:28:ab:34:90:33:38:3f:b0:46:63:71:
         a8:ba:e4:f4:a8:41:76:ce:1b:94:a2:26:26:aa:30:e6:77:b9:
         94:df:5c:cb:6b:b8:58:0c:2e:14:64:20:5e:76:b3:2d:33:46:
         1b:0a:2f:45:24:68:a8:db:53:d7:ed:d0:b0:88:ac:65:b1:0e:
         10:7e:c5:8d:59:ea:cf:e8:c1:19:81:0c:57:8c:e9:d6:09:0c:
         5b:94:1e:53:92:10:80:7e:c7:18:15:2a:08:f6:2b:34:d3:ef:
         4e:e0:19:5a:00:26:88:d9:70:5b:3f:00:56:b8:58:9c:43:00:
         e2:eb:25:a9:1e:2c:9a:6c:e3:ec:58:61:6e:73:3e:2a:19:d0:
         e2:2b:ce:80:6c:ae:ae:16:2c:53:2b:ff:84:5e:3e:a2:79:4b:
         af:6b:3e:0a:6d:31:68:cb:4a:92:0e:b2:01:3b:29:da:93:60:
         19:94:b7:15:da:27:5c:40:90:36:50:d0:f8:32:34:f0:d7:77:
         9a:24:f2:7d:f1:1b:22:cc:a5:9a:13:38:a3:19:44:45:b7:29:
         63:ec:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:49 2024 by rpki-client on console-fra.rpki-client.org