Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          5ynHRhJI7z7g+1iBBI5EKb8LZsGbDMJw+eXj6y8QuN8=
Subject key identifier:   BC:95:9C:38:3C:F0:E9:52:78:7A:9D:20:D6:F1:7F:6B:A0:9E:C2:70
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       01901DED83DF79BAE53EF464B032AA2266A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:43 +0000
Files and hashes:         1: 5wGLnNKxxNjcF2lOsoAiYds0P4A.roa (hash: mTiIIDSTWRo6MdiM/VhiQcwcj4ULiI8K690oMWB/1d4=)
                          2: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: Fb/k5RGLY88FlhUrffUiKUufAw8WWbUc0WrinvPpgKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:83:df:79:ba:e5:3e:f4:64:b0:32:aa:22:66:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Jun 15 22:03:43 2024 GMT
            Not After : Jun 16 22:03:43 2024 GMT
        Subject: CN=bc959c383cf0e952787a9d20d6f17f6ba09ec270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:cb:9f:69:dd:e9:3a:84:ce:31:97:9d:f4:
                    42:16:17:a7:6f:c5:54:42:5e:f5:64:9e:b8:0f:a7:
                    4e:52:e4:e3:f7:7a:cc:48:b2:fc:6f:32:46:20:ce:
                    e6:19:67:92:9c:b9:5a:49:4b:36:49:eb:9b:87:15:
                    a0:be:51:a0:65:00:f3:1c:00:f0:8d:66:2f:f0:e0:
                    ac:34:d5:8e:54:1e:ab:bb:b8:d0:f6:b7:2f:bd:d2:
                    b4:ea:a0:27:74:74:0d:eb:0d:07:63:66:23:85:1e:
                    06:0a:e3:7e:96:56:b6:b9:6a:97:e2:57:f9:a0:7a:
                    bf:86:aa:d7:a8:24:82:87:80:7e:33:bf:f3:05:a3:
                    64:9a:4b:fc:72:fe:bc:77:ec:4b:25:59:49:4c:82:
                    73:84:3e:f8:cd:93:d9:ea:0e:5a:c6:ea:46:00:6a:
                    58:d2:8c:e0:98:2f:37:94:18:56:7e:b4:a4:87:2f:
                    e2:6e:37:85:71:54:c4:43:ec:29:9f:99:bc:98:8e:
                    2a:1e:3f:0e:3b:bc:41:8f:6c:5d:6d:e9:e1:52:09:
                    4b:29:b4:83:b2:13:ac:54:56:93:89:92:98:e5:81:
                    2c:09:fc:27:d9:02:a3:5c:11:89:91:e8:d5:a7:a1:
                    85:15:e8:ec:cf:75:c4:3b:3c:88:51:ca:a2:52:8c:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:9C:38:3C:F0:E9:52:78:7A:9D:20:D6:F1:7F:6B:A0:9E:C2:70
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:1c:79:11:36:0a:06:cb:15:9f:e1:c4:eb:54:88:80:06:
         33:8e:77:f1:00:ea:d0:6a:b1:c0:8f:6c:eb:6f:e3:63:de:7b:
         9e:1e:b0:8b:2d:34:fb:2e:0d:13:43:26:28:8e:ab:21:7d:c0:
         07:c5:47:c5:7a:4b:3a:80:ba:da:bc:92:00:26:4e:59:8e:6f:
         61:02:29:94:5a:c4:41:7e:25:34:44:cd:6f:bf:23:f6:55:b3:
         99:37:e9:53:14:fa:3d:78:d5:bb:3d:6a:36:94:bd:7b:0d:9b:
         a9:b6:37:15:db:2a:b2:51:0b:bf:64:7e:94:83:86:2c:16:f9:
         19:df:b2:01:e0:24:7a:42:31:f9:e5:78:d9:61:4f:f2:b2:a1:
         d2:46:05:68:c5:1d:a9:ee:ad:30:21:4b:79:9d:74:89:b4:45:
         8d:da:48:fd:81:62:aa:b4:ae:b6:af:97:87:4c:ca:21:7b:c4:
         9b:e9:ba:38:82:62:1a:90:3e:fa:a4:2f:37:aa:27:c6:c7:5e:
         c5:0a:7e:5e:11:3d:bb:3f:97:54:f0:53:a7:98:ff:15:a1:93:
         54:db:c6:ad:dd:58:77:fc:9d:07:b3:92:15:d7:a2:6b:d8:34:
         33:f0:b2:f7:47:d5:54:e6:5b:54:f5:38:a5:7b:5e:32:c9:35:
         5d:cd:c6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7YPfebrlPvRksDKqImahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjQwNjE1MjIwMzQzWhcNMjQwNjE2MjIwMzQzWjAzMTEwLwYDVQQD
EyhiYzk1OWMzODNjZjBlOTUyNzg3YTlkMjBkNmYxN2Y2YmEwOWVjMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM7Ln2nd6TqEzjGXnfRCFhenb8VU
Ql71ZJ64D6dOUuTj93rMSLL8bzJGIM7mGWeSnLlaSUs2SeubhxWgvlGgZQDzHADw
jWYv8OCsNNWOVB6ru7jQ9rcvvdK06qAndHQN6w0HY2YjhR4GCuN+lla2uWqX4lf5
oHq/hqrXqCSCh4B+M7/zBaNkmkv8cv68d+xLJVlJTIJzhD74zZPZ6g5axupGAGpY
0ozgmC83lBhWfrSkhy/ibjeFcVTEQ+wpn5m8mI4qHj8OO7xBj2xdbenhUglLKbSD
shOsVFaTiZKY5YEsCfwn2QKjXBGJkejVp6GFFejsz3XEOzyIUcqiUozZ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyVnDg88OlSeHqdINbxf2ugnsJwMB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2YceRE2
CgbLFZ/hxOtUiIAGM4538QDq0GqxwI9s62/jY957nh6wiy00+y4NE0MmKI6rIX3A
B8VHxXpLOoC62rySACZOWY5vYQIplFrEQX4lNETNb78j9lWzmTfpUxT6PXjVuz1q
NpS9ew2bqbY3FdsqslELv2R+lIOGLBb5Gd+yAeAkekIx+eV42WFP8rKh0kYFaMUd
qe6tMCFLeZ10ibRFjdpI/YFiqrSutq+Xh0zKIXvEm+m6OIJiGpA++qQvN6onxsde
xQp+XhE9uz+XVPBTp5j/FaGTVNvGrd1Yd/ydB7OSFdeia9g0M/Cy90fVVOZbVPU4
pXteMsk1Xc3Gng==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:57 2024 by rpki-client on console-fra.rpki-client.org