Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          Ni7hVWzHTRVYJhQElKjUceWOrTNKzt2+y68WzFBH1hg=
Subject key identifier:   B4:5D:34:97:40:B2:66:D1:1B:C4:A0:91:E3:6F:DB:0B:4F:AB:EF:B3
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       01901DEB3E8185E7CCDD86752998FBB50566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          0EDA
Signing time:             Sat 15 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:14 +0000
Files and hashes:         1: 48AacTrpGGLgdMCduqYLc9CkRCU.roa (hash: khercJWZvOX1CWx5GlxW1xah93QAXPs18dBkXv3jYJg=)
                          2: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: FmBr5bTfCTI3a9zjR286rPsskCEfzTP/Bmq68Ef8ftc=)
                          3: IAaDdl7wcIKVADTRMTUgdu3FyTc.roa (hash: NuzauLzh44joC5UpB8owLTvXGEdLBuc/jWAj4ly6Oiw=)
                          4: OUx6GPHPnzsQnqEqThAqd3s23w8.roa (hash: cftY8AE0/w0CzGovFuebr5nqkpyNao2CG66kKd6pZPA=)
                          5: Obw24SFg-Zzms8Ido4pBF5Dt24E.roa (hash: s1cKqIglPV697bgqEX4oYD9q1avpxrj+PTqn5q70UMM=)
                          6: PN45jNTHs3b0DEAjhakCjN9ijG0.roa (hash: Jx7TMsvLTzxljG0926T13PLkcqQTkILPkjIsN5631FM=)
                          7: ad1iy2nnmv2cc9OzFpvfFqinCl0.roa (hash: Dev5ngvZGX+jSlm582dyyHHcjXVJO1vIpJNqJQujcgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3e:81:85:e7:cc:dd:86:75:29:98:fb:b5:05:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jun 15 22:01:14 2024 GMT
            Not After : Jun 16 22:01:14 2024 GMT
        Subject: CN=b45d349740b266d11bc4a091e36fdb0b4fabefb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:aa:60:97:ba:f0:f3:d5:ec:c9:67:19:a6:
                    f3:90:73:25:a9:0d:1e:f7:dd:f9:4a:89:f7:9b:cf:
                    46:41:dc:9a:69:a8:d0:23:b3:7f:45:a3:ec:df:54:
                    96:e5:f3:b8:3c:4e:da:5b:50:d7:99:cd:13:1e:21:
                    a2:ac:a8:95:67:1c:4e:ea:66:c1:0b:d4:02:8a:50:
                    59:92:df:a3:48:ab:12:20:c4:41:97:ba:8c:f1:65:
                    47:3c:37:7b:d5:ee:82:80:63:21:68:88:fa:e1:48:
                    6a:b2:04:cc:84:1e:5f:7e:e9:ef:0a:d8:31:71:55:
                    aa:e5:17:ab:e0:5b:30:4e:20:03:53:cd:b1:ed:55:
                    21:bb:d3:11:11:24:c3:2b:be:3f:73:ba:ab:1d:d2:
                    0b:36:59:09:80:6a:9d:43:92:db:cf:91:c2:c8:ba:
                    51:d9:7a:1b:54:1f:db:ee:b9:6f:d7:7d:41:02:7e:
                    48:e3:0e:39:02:a2:89:b6:ad:19:03:bf:d3:03:13:
                    11:f1:b6:4c:f2:40:c7:ba:ab:73:99:b7:80:81:88:
                    70:ff:47:44:3d:dc:5e:7c:20:0d:b7:13:c3:cb:50:
                    55:c9:03:c6:72:be:f2:ee:e2:ca:06:c9:a7:60:ae:
                    b2:4f:d9:da:99:29:9d:5c:dd:33:67:3d:38:4d:04:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5D:34:97:40:B2:66:D1:1B:C4:A0:91:E3:6F:DB:0B:4F:AB:EF:B3
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:01:78:aa:cf:60:84:33:f5:34:59:b6:09:f2:0c:97:1b:
         ac:8d:e3:71:09:1f:54:d4:6d:62:c6:be:14:76:e6:8c:a5:43:
         f6:d0:5d:9b:00:93:94:f3:91:a4:f4:49:5a:70:eb:a0:a8:94:
         71:c3:10:99:13:2d:bb:81:18:2d:23:b8:3b:d1:4b:66:33:79:
         a8:85:83:d9:36:a0:41:ba:9e:9b:d4:6a:17:78:13:d8:0d:9e:
         8c:1e:a6:0c:20:0b:cf:46:ed:ba:6d:8c:12:24:ba:f4:c4:88:
         fb:f9:bf:05:ab:48:3b:53:75:03:ec:17:7e:88:06:d7:ae:1c:
         48:25:b8:4e:56:65:a9:10:60:77:4d:fd:97:a5:88:38:c1:bc:
         0f:94:05:29:f8:ba:96:be:3c:45:66:0f:1f:45:04:b6:0e:76:
         51:bb:4b:7d:b3:61:0a:55:ca:22:c7:be:15:2c:7a:70:3d:0c:
         1f:40:a3:1c:0e:b5:40:9c:c9:8e:b5:6c:33:1d:31:a1:d0:aa:
         84:19:c8:27:96:57:84:d2:9a:71:c1:ad:ed:7f:d8:ce:f0:46:
         98:40:ae:6b:4f:6d:f8:fd:7b:48:35:89:ab:b7:5d:d4:38:17:
         33:8f:2d:c0:52:4b:3c:a4:d9:ac:f8:a4:b0:b4:66:e0:26:34:
         b5:89:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:47 2024 by rpki-client on console-fra.rpki-client.org