Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          KKnGUSjfSDADdLw6AKMygB10O66hBm4EHVl/u31NFPI=
Subject key identifier:   A1:A8:32:B5:24:A8:CE:2C:EB:2D:48:E8:87:A1:A2:FE:90:23:80:54
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       01901F34635606BC4E6E52566337C6547069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 04:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:45 +0000
Files and hashes:         1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: LprhjaVr4XKx/+9W28MnPuUY9wOVIINJASIGaeSJaVc=)
                          2: xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa (hash: iZ91qcmvp/2rj+zalRYI1YfHqgqRE9OEeB4M5WHqE8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:63:56:06:bc:4e:6e:52:56:63:37:c6:54:70:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Jun 16 04:00:45 2024 GMT
            Not After : Jun 17 04:00:45 2024 GMT
        Subject: CN=a1a832b524a8ce2ceb2d48e887a1a2fe90238054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:2e:be:d7:0c:6a:c2:9d:3a:e0:35:69:ea:
                    09:6e:46:d6:70:eb:fc:56:85:4d:b1:f2:e8:ec:3a:
                    a5:a2:30:3b:ad:c4:a2:5a:2a:0a:3c:98:4f:e1:eb:
                    fe:0a:1d:3b:38:d6:1f:12:e4:9f:85:a6:12:6f:48:
                    c1:17:ce:f3:65:1b:e4:26:ba:79:b6:31:8e:d0:3a:
                    26:c3:66:74:a4:05:c5:92:39:13:92:62:22:53:3b:
                    2c:1b:5c:a0:7e:c2:87:4c:60:33:bf:52:a2:a3:59:
                    c3:fb:c8:d3:85:f6:a0:00:3b:46:b5:8f:af:cd:fb:
                    a2:03:b8:e0:70:2a:6e:22:10:d3:b8:73:75:b6:2d:
                    c7:1f:ec:ec:05:d3:0f:6d:76:9d:50:64:2a:d7:d2:
                    ac:09:f3:b1:71:90:0e:3f:f8:d1:50:4d:47:d1:32:
                    ee:bb:ae:36:67:70:2d:6e:c3:b6:fa:98:84:1c:6e:
                    9a:6e:3e:63:24:1a:08:28:ad:26:a5:ad:19:c9:c6:
                    15:cf:3c:b2:a9:a9:82:9d:d1:f9:cc:ca:08:4e:c7:
                    b9:e7:8d:5b:55:85:06:f6:c2:d5:8f:31:46:8b:88:
                    b3:8d:61:fc:11:91:05:bf:55:9b:d7:54:e0:36:b6:
                    26:ba:ff:4c:ce:ef:2d:a3:7e:11:82:41:d5:52:6e:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:32:B5:24:A8:CE:2C:EB:2D:48:E8:87:A1:A2:FE:90:23:80:54
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:ae:a6:59:83:ee:00:06:bc:3e:d6:58:ba:0c:93:74:d0:
         57:23:af:23:08:e2:e8:cc:e5:52:e7:95:05:80:e4:b2:c8:22:
         61:5d:d1:cc:2f:7e:ad:a8:c4:f1:f3:bb:0b:70:78:83:6e:99:
         4c:72:84:e6:7d:aa:6c:47:77:4d:a7:b4:ed:1d:e9:a4:25:ac:
         70:60:ab:3c:19:dc:09:1e:5b:b6:ce:12:fc:30:23:16:6e:43:
         2d:ff:4a:11:0c:48:ff:59:3a:eb:54:71:da:ab:f5:97:64:2a:
         d4:d1:1c:d7:8d:5b:ea:75:bb:b6:05:99:bc:f5:56:7e:b9:7d:
         cb:96:cb:38:8f:2a:c8:20:e7:43:10:d7:9b:91:31:e2:8c:13:
         a8:d1:0d:a0:9c:b0:25:9d:9c:ca:09:39:72:ed:b5:45:26:d4:
         be:13:d0:3e:2e:e9:18:1a:ce:48:dc:7c:7d:43:f7:9f:0e:29:
         f6:d3:69:bc:68:2f:71:37:6b:12:d5:90:51:8a:a1:fb:36:90:
         53:29:d8:c7:0f:25:9b:25:9f:34:23:17:e0:c5:e4:15:51:53:
         ef:d6:f8:bb:b9:d5:df:1d:b8:55:26:f7:62:6d:e9:a6:43:0d:
         22:79:9e:98:d9:0a:24:0d:da:a7:b4:91:97:a2:fe:7e:69:11:
         16:3f:82:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNGNWBrxOblJWYzfGVHBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjQwNjE2MDQwMDQ1WhcNMjQwNjE3MDQwMDQ1WjAzMTEwLwYDVQQD
EyhhMWE4MzJiNTI0YThjZTJjZWIyZDQ4ZTg4N2ExYTJmZTkwMjM4MDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu0uvtcMasKdOuA1aeoJbkbWcOv8
VoVNsfLo7DqlojA7rcSiWioKPJhP4ev+Ch07ONYfEuSfhaYSb0jBF87zZRvkJrp5
tjGO0Domw2Z0pAXFkjkTkmIiUzssG1ygfsKHTGAzv1Kio1nD+8jThfagADtGtY+v
zfuiA7jgcCpuIhDTuHN1ti3HH+zsBdMPbXadUGQq19KsCfOxcZAOP/jRUE1H0TLu
u642Z3AtbsO2+piEHG6abj5jJBoIKK0mpa0ZycYVzzyyqamCndH5zMoITse5541b
VYUG9sLVjzFGi4izjWH8EZEFv1Wb11TgNrYmuv9Mzu8to34RgkHVUm7jmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGoMrUkqM4s6y1I6Iehov6QI4BUMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgWuplmD
7gAGvD7WWLoMk3TQVyOvIwji6MzlUueVBYDkssgiYV3RzC9+rajE8fO7C3B4g26Z
THKE5n2qbEd3Tae07R3ppCWscGCrPBncCR5bts4S/DAjFm5DLf9KEQxI/1k661Rx
2qv1l2Qq1NEc141b6nW7tgWZvPVWfrl9y5bLOI8qyCDnQxDXm5Ex4owTqNENoJyw
JZ2cygk5cu21RSbUvhPQPi7pGBrOSNx8fUP3nw4p9tNpvGgvcTdrEtWQUYqh+zaQ
UynYxw8lmyWfNCMX4MXkFVFT79b4u7nV3x24VSb3Ym3ppkMNInmemNkKJA3ap7SR
l6L+fmkRFj+CMw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:34:21 2024 by rpki-client on console-ams.rpki-client.org