Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          lZ9DrIBMrs9sl3iCobimByWhcS1a9bgzUr4yqbxHYzs=
Subject key identifier:   0C:22:0F:84:F5:34:67:B6:FF:B7:9A:ED:BC:B8:10:E0:81:D6:74:3F
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       01903818C3E3C6F552F6DE7E1F476869E87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          11D4
Signing time:             Fri 21 Jun 2024 00:01:05 +0000
Manifest this update:     Fri 21 Jun 2024 00:01:05 +0000
Manifest next update:     Sat 22 Jun 2024 00:01:05 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: K9spJqvqK5TKMRpOhsIx+9PABzinlwkcjj3ym3mc+KM=)
                          2: U_pYTadNkHGFHJv4wDvWWgYuGhA.roa (hash: ty+nUaez0XawLxKckkW/iq71vC2YFdTVnLHgmgZXbqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:18:c3:e3:c6:f5:52:f6:de:7e:1f:47:68:69:e8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: Jun 21 00:01:05 2024 GMT
            Not After : Jun 22 00:01:05 2024 GMT
        Subject: CN=0c220f84f53467b6ffb79aedbcb810e081d6743f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:f6:ed:8a:b6:8f:d3:a3:18:72:89:c1:2d:
                    9a:26:8b:1e:d4:b7:c3:29:5d:b4:e4:e6:b4:bd:59:
                    86:bd:50:52:1b:c5:37:66:06:a2:af:24:b0:b0:80:
                    89:50:be:62:7f:a0:0c:2c:fb:1e:db:d0:91:d3:18:
                    fd:1c:52:44:b6:4a:0f:b8:84:8c:f5:77:b9:31:be:
                    27:ae:b5:77:70:6e:96:c2:30:fe:ed:bd:ab:f1:54:
                    b2:bd:ae:d7:7c:6b:e0:05:d5:f9:25:ca:78:04:d7:
                    3b:8f:1c:c2:4a:f5:d0:34:59:74:67:65:7f:fc:b1:
                    21:51:5e:3a:fb:f3:3b:aa:c5:04:a5:fc:9a:46:af:
                    9e:ef:7f:eb:de:d6:bd:f7:63:48:a3:ec:3f:d2:e5:
                    94:33:4e:06:74:c3:9f:5c:79:e7:0d:7c:13:40:e1:
                    67:57:dc:6a:80:5c:a6:9e:9b:7a:7e:59:26:61:4c:
                    5b:a2:a3:be:dd:31:2f:c8:c4:ef:53:47:1e:15:75:
                    9a:af:e3:a0:bc:9a:ea:e5:51:20:a8:1a:5e:fd:d8:
                    9c:53:d2:b4:b8:9f:9d:c5:d4:f6:e5:a9:5f:89:6f:
                    54:49:60:f7:36:ae:be:0e:12:4c:c4:b2:5e:22:09:
                    dc:17:14:b3:0b:49:cd:cf:19:e5:a5:2d:39:12:f6:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:0F:84:F5:34:67:B6:FF:B7:9A:ED:BC:B8:10:E0:81:D6:74:3F
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:5f:07:20:dd:79:5b:c8:1a:67:29:00:2c:8c:26:1c:a7:
         77:a1:25:34:d6:4b:da:4b:78:c7:85:0b:43:26:7c:c5:34:af:
         e5:9a:33:77:59:0f:63:60:66:cd:e3:a4:10:1e:38:db:e7:8e:
         ad:88:ec:ef:e2:a3:29:83:47:f8:f9:a6:71:91:af:68:54:4f:
         a6:f6:26:0a:a3:15:8f:7e:ba:cb:d0:fc:2a:7b:c0:32:69:69:
         42:9d:44:4e:dc:b6:ab:a2:76:9e:ae:1b:30:92:eb:12:9a:37:
         b3:50:ff:c6:e9:41:ee:65:8c:ad:4f:a7:f3:2b:df:03:d6:00:
         1b:40:8e:25:cc:d8:b3:c9:b9:e0:58:ee:e6:b9:68:b0:b0:0a:
         5a:d5:01:d1:99:c4:7c:38:db:cf:63:11:f7:1e:c9:6a:86:cf:
         b7:a2:7f:e2:77:3c:7f:41:bc:df:a1:24:eb:74:d3:69:c9:da:
         70:b9:32:c7:97:18:22:0f:4d:d6:ca:b8:58:32:80:96:47:ac:
         de:3d:df:7f:7c:c6:cb:0c:02:6f:4b:f1:7c:fd:bb:3e:ab:60:
         d3:f0:12:d9:41:cb:b8:6e:19:16:2d:45:18:9d:a3:ff:bc:f8:
         63:c4:67:15:6f:6c:5f:cf:17:4c:40:58:a9:3f:f0:66:5a:48:
         57:01:58:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA4GMPjxvVS9t5+H0doaeh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjQwNjIxMDAwMTA1WhcNMjQwNjIyMDAwMTA1WjAzMTEwLwYDVQQD
EygwYzIyMGY4NGY1MzQ2N2I2ZmZiNzlhZWRiY2I4MTBlMDgxZDY3NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ub27Yq2j9OjGHKJwS2aJose1LfD
KV205Oa0vVmGvVBSG8U3ZgairySwsICJUL5if6AMLPse29CR0xj9HFJEtkoPuISM
9Xe5Mb4nrrV3cG6WwjD+7b2r8VSyva7XfGvgBdX5Jcp4BNc7jxzCSvXQNFl0Z2V/
/LEhUV46+/M7qsUEpfyaRq+e73/r3ta992NIo+w/0uWUM04GdMOfXHnnDXwTQOFn
V9xqgFymnpt6flkmYUxboqO+3TEvyMTvU0ceFXWar+OgvJrq5VEgqBpe/dicU9K0
uJ+dxdT25alfiW9USWD3Nq6+DhJMxLJeIgncFxSzC0nNzxnlpS05EvZZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwiD4T1NGe2/7ea7by4EOCB1nQ/MB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+tfByDd
eVvIGmcpACyMJhynd6ElNNZL2kt4x4ULQyZ8xTSv5Zozd1kPY2BmzeOkEB442+eO
rYjs7+KjKYNH+PmmcZGvaFRPpvYmCqMVj366y9D8KnvAMmlpQp1ETty2q6J2nq4b
MJLrEpo3s1D/xulB7mWMrU+n8yvfA9YAG0COJczYs8m54Fju5rlosLAKWtUB0ZnE
fDjbz2MR9x7JaobPt6J/4nc8f0G836Ek63TTacnacLkyx5cYIg9N1sq4WDKAlkes
3j3ff3zGywwCb0vxfP27Pqtg0/AS2UHLuG4ZFi1FGJ2j/7z4Y8RnFW9sX88XTEBY
qT/wZlpIVwFY6g==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:31:37 2024 by rpki-client on console-ams.rpki-client.org