Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          DaWeyfu30CQ1t2VRnmGN5xilH8NwW8gHBOhXbywkHUU=
Subject key identifier:   C9:FE:24:84:36:C9:75:36:C1:89:20:38:7B:A4:20:7D:1D:6F:09:2A
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       01901B20DFD53DF45152CBF464D99D68FA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 09:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:57 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: Zv3p4FSr2QxvKW+17+hGH7zrXTigPPuDI8S3egSL2jw=)
                          2: U_pYTadNkHGFHJv4wDvWWgYuGhA.roa (hash: ty+nUaez0XawLxKckkW/iq71vC2YFdTVnLHgmgZXbqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:df:d5:3d:f4:51:52:cb:f4:64:d9:9d:68:fa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: Jun 15 09:00:57 2024 GMT
            Not After : Jun 16 09:00:57 2024 GMT
        Subject: CN=c9fe248436c97536c18920387ba4207d1d6f092a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:ef:de:fe:53:17:5f:0b:3a:1d:63:cf:aa:
                    a8:9a:40:b9:40:fc:86:56:60:ab:b3:2f:8d:7a:c1:
                    f3:e7:8b:73:40:32:7d:e2:e0:a1:c1:a6:ec:8a:9b:
                    f5:91:19:d4:c0:6e:f7:a1:ef:72:81:c6:fe:ee:44:
                    86:43:9a:f9:0e:be:11:59:5b:9d:d3:a6:5e:96:c2:
                    90:05:04:5e:2f:8a:00:b1:7a:da:8d:78:6c:41:ab:
                    93:d9:66:3a:64:d9:01:c9:45:04:d6:71:96:16:f0:
                    51:0a:a9:3a:34:0b:80:3f:a5:b3:31:77:d6:eb:71:
                    36:79:31:6f:02:0f:34:22:01:4d:8d:97:46:c9:02:
                    60:89:a1:c2:44:68:f5:26:61:e4:db:43:f7:31:39:
                    81:3f:17:4e:e3:21:f0:85:0d:5d:53:b5:35:e5:33:
                    25:53:89:50:a8:f5:97:5d:e1:7f:77:9d:0f:bf:f7:
                    5a:d9:7c:c1:ec:85:93:6e:92:a5:6a:91:54:d1:b3:
                    17:ce:86:a9:ba:c6:43:bf:e0:15:aa:8b:6c:80:dc:
                    29:fd:b2:28:59:5c:e4:32:5d:11:40:20:30:52:cf:
                    c2:76:82:05:9a:35:d4:39:e0:b9:25:00:fd:b4:76:
                    dd:c1:c0:6c:bd:5e:3d:75:8f:ae:54:db:0e:13:e5:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:24:84:36:C9:75:36:C1:89:20:38:7B:A4:20:7D:1D:6F:09:2A
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:02:06:3c:88:2b:38:95:81:00:c5:57:b3:60:c6:e8:a7:
         05:db:60:be:ed:cb:22:e5:10:74:11:47:72:81:54:28:15:77:
         d4:3d:a2:cb:8e:4b:3f:d6:ec:98:86:58:da:1f:3d:3d:4a:0b:
         d0:4f:94:5d:4d:ef:bd:a0:99:1f:f7:e1:a8:81:53:2f:92:8b:
         f1:59:2c:86:eb:a1:f7:8e:b0:00:55:b1:87:67:74:50:c7:ac:
         e2:8f:3d:e9:3b:c0:8f:fc:7f:ac:74:d4:76:b9:e0:a2:84:56:
         78:4d:24:22:7c:14:91:f4:0d:d3:e5:fc:bc:1b:ee:7a:f5:9e:
         ce:9c:d3:d3:71:b5:da:c2:9f:a2:77:50:84:76:14:5c:32:36:
         03:d7:5c:0a:e6:5d:8a:aa:e9:3b:c5:2b:1b:8e:03:db:6f:95:
         ba:26:80:86:4a:ef:ef:c0:02:4a:69:ee:7e:0c:bb:60:a4:12:
         76:a1:30:b7:15:32:dd:2e:fc:1a:37:9f:0c:8c:f9:99:57:36:
         41:7d:ff:60:0d:f2:d6:25:27:67:27:2a:fa:8a:ef:8f:ec:b4:
         21:69:22:54:bb:08:f4:5d:17:ac:06:6a:d2:c2:c9:11:26:2f:
         72:e4:af:18:51:69:6c:5e:66:57:cc:c4:7d:71:cb:58:1c:4a:
         58:5a:63:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAbIN/VPfRRUsv0ZNmdaPoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjQwNjE1MDkwMDU3WhcNMjQwNjE2MDkwMDU3WjAzMTEwLwYDVQQD
EyhjOWZlMjQ4NDM2Yzk3NTM2YzE4OTIwMzg3YmE0MjA3ZDFkNmYwOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFHv3v5TF18LOh1jz6qomkC5QPyG
VmCrsy+NesHz54tzQDJ94uChwabsipv1kRnUwG73oe9ygcb+7kSGQ5r5Dr4RWVud
06ZelsKQBQReL4oAsXrajXhsQauT2WY6ZNkByUUE1nGWFvBRCqk6NAuAP6WzMXfW
63E2eTFvAg80IgFNjZdGyQJgiaHCRGj1JmHk20P3MTmBPxdO4yHwhQ1dU7U15TMl
U4lQqPWXXeF/d50Pv/da2XzB7IWTbpKlapFU0bMXzoapusZDv+AVqotsgNwp/bIo
WVzkMl0RQCAwUs/CdoIFmjXUOeC5JQD9tHbdwcBsvV49dY+uVNsOE+X+MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn+JIQ2yXU2wYkgOHukIH0dbwkqMB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaMCBjyI
KziVgQDFV7NgxuinBdtgvu3LIuUQdBFHcoFUKBV31D2iy45LP9bsmIZY2h89PUoL
0E+UXU3vvaCZH/fhqIFTL5KL8Vkshuuh946wAFWxh2d0UMes4o896TvAj/x/rHTU
drngooRWeE0kInwUkfQN0+X8vBvuevWezpzT03G12sKfondQhHYUXDI2A9dcCuZd
iqrpO8UrG44D22+VuiaAhkrv78ACSmnufgy7YKQSdqEwtxUy3S78GjefDIz5mVc2
QX3/YA3y1iUnZycq+orvj+y0IWkiVLsI9F0XrAZq0sLJESYvcuSvGFFpbF5mV8zE
fXHLWBxKWFpjaA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:06:47 2024 by rpki-client on console-ams.rpki-client.org