Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          ChToezDi8H+AYsdw6eTaCSKQLjSOAn3XmKydv3bZ6uo=
Subject key identifier:   AF:49:5C:5E:FC:B9:71:8A:07:21:50:23:7A:7C:58:65:3F:57:61:D5
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       019045D4AE5F123EC67795533F171AAAA49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          11DE
Signing time:             Sun 23 Jun 2024 16:01:24 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:24 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:24 +0000
Files and hashes:         1: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: LoID/ze+A/6hcesw9s2JKL6bvqKp69xXeQ1P37KdQH8=)
                          2: xxOt3vIgNAZ5sKE5cWcbRmJNp_U.roa (hash: iZ91qcmvp/2rj+zalRYI1YfHqgqRE9OEeB4M5WHqE8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:ae:5f:12:3e:c6:77:95:53:3f:17:1a:aa:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Jun 23 16:01:24 2024 GMT
            Not After : Jun 24 16:01:24 2024 GMT
        Subject: CN=af495c5efcb9718a072150237a7c58653f5761d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:7c:4b:a2:15:ed:ee:bb:03:05:0f:e7:8b:
                    0b:83:a1:c8:76:5a:42:d6:ba:dd:4a:a8:c1:88:1a:
                    4d:9b:99:07:fa:69:a4:7d:70:c1:6f:b6:83:da:f7:
                    fc:27:94:06:30:8d:51:7b:e5:3a:4f:27:86:e8:69:
                    83:5d:74:05:3e:fe:2e:16:6e:25:68:9e:fd:05:dc:
                    95:51:3b:ab:61:43:11:cc:2d:dd:e5:b5:74:e0:5a:
                    a2:a5:0e:5c:03:6a:cc:14:c1:d3:18:2e:2a:d2:a1:
                    86:8a:d5:1b:90:8b:5d:60:48:83:6a:7d:46:9f:70:
                    f9:20:71:8f:bc:fd:db:52:c5:f6:7a:85:b7:69:2d:
                    6d:4c:2b:02:1b:34:fa:16:f9:a1:fe:a1:6d:3e:42:
                    30:98:07:30:54:52:6b:21:81:07:85:3d:c5:aa:8e:
                    79:c5:27:87:33:3b:86:17:03:97:3d:95:be:68:e8:
                    90:9d:2c:ed:9e:db:28:02:e1:45:55:fc:0f:4f:76:
                    5a:23:7d:22:86:50:d5:6a:21:4d:80:d6:a6:fa:db:
                    2c:89:9e:2a:42:ba:f0:92:88:33:ba:d8:90:26:08:
                    6a:5c:a9:7a:a8:e4:81:ce:0d:47:86:30:90:bd:d6:
                    93:62:b0:04:dd:69:6e:da:b8:f3:63:1d:49:87:cb:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:49:5C:5E:FC:B9:71:8A:07:21:50:23:7A:7C:58:65:3F:57:61:D5
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:1c:da:2f:0c:35:12:6c:f7:01:1e:fa:dc:ac:cf:a0:52:
         31:7e:e5:96:62:5f:ba:e0:25:d6:66:c1:c8:40:fb:19:9d:b4:
         d5:30:4a:af:67:90:31:b4:dc:da:a3:a4:9f:48:b1:8b:3d:82:
         32:64:bb:66:1f:d7:be:63:5f:23:12:7d:1f:6f:5c:8e:00:dd:
         5c:b4:b0:4e:4e:d9:01:97:8a:87:59:c4:ff:ca:79:18:e1:11:
         a4:80:89:04:8c:61:96:a8:75:70:f7:3a:84:30:4d:a5:71:6e:
         02:80:41:cc:a7:2a:18:d1:ca:12:9c:5f:4f:2c:9e:32:10:b0:
         85:c2:cf:7d:3e:09:bd:67:ad:2e:16:ff:0f:57:61:ea:5c:b8:
         30:aa:93:8e:6d:c2:a0:25:7a:01:b6:4f:0f:65:30:74:42:13:
         54:e7:a7:9d:93:91:82:0f:d6:a3:d7:80:5f:1f:6e:fb:75:bb:
         6c:fc:c5:e9:b6:3c:09:1b:cd:23:8c:a5:5c:7e:44:ae:24:91:
         15:8c:8a:17:50:c1:4c:16:99:03:86:70:02:21:6b:5b:ce:66:
         8d:ef:98:ce:91:11:9b:b5:22:69:78:57:a0:5f:ad:0a:89:34:
         a4:72:e3:63:40:5e:25:1a:72:9a:e1:ca:07:9c:04:03:13:47:
         8c:ad:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:48 2024 by rpki-client on console-ams.rpki-client.org