Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          nYMrTQqlukEnSUELYGcHFtFqwhRlK1EhTxhQf/sKCyI=
Subject key identifier:   D0:A6:0A:1D:26:CD:B3:46:09:4B:F0:8F:F9:3F:1A:71:87:A6:45:84
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       0193568903457BF78D5D5897F25B0C2AA09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          062F
Signing time:             Sat 23 Nov 2024 01:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:40 +0000
Files and hashes:         1: 1CqdgnBv1ZBCon6OG6SPMurrNFA.roa (hash: w9PtvLvkFOzFC9hy+KTjfhiAFxYTe7nn2tlOIBkg0LA=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: AikIshQ+o1/gy7A6M+poiaf1uTBolG/KMA0iuXj94zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:03:45:7b:f7:8d:5d:58:97:f2:5b:0c:2a:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Nov 23 01:00:40 2024 GMT
            Not After : Nov 24 01:00:40 2024 GMT
        Subject: CN=d0a60a1d26cdb346094bf08ff93f1a7187a64584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:5a:1d:b0:3f:8b:c3:c3:e9:b2:60:ec:c6:
                    02:43:74:d5:19:88:d4:fb:8f:8f:25:88:08:cb:f0:
                    1e:57:a1:5a:24:0b:b6:af:32:78:48:85:f8:94:83:
                    ca:b5:e5:90:da:24:c1:74:ec:58:6f:4d:56:92:61:
                    a0:49:f7:ef:ac:00:58:8e:9d:09:d6:a5:20:45:84:
                    95:c6:34:fc:54:3d:a0:33:52:b3:b8:2e:a2:e2:2e:
                    9e:1c:1a:dd:46:9a:08:84:a9:b6:a1:b5:2a:fd:65:
                    60:60:08:2d:2d:ad:5d:dd:4d:bb:08:49:cd:87:5c:
                    82:23:ef:45:5d:76:88:b4:16:dd:80:64:ee:c0:55:
                    77:3c:39:a8:9b:c6:fd:db:15:4d:83:48:99:14:38:
                    ef:ea:10:2b:c4:23:3e:8f:10:fc:1b:1c:aa:a5:e5:
                    2e:d0:e3:4d:75:9e:83:b0:14:e8:63:d5:70:94:43:
                    cb:6b:c8:d0:e0:4e:f0:0f:c5:73:e4:25:19:26:bd:
                    39:ce:ff:59:70:05:5e:93:d2:f2:d7:da:ec:2d:d9:
                    9b:65:3f:11:3e:fe:38:12:01:ba:6a:46:d1:b3:d9:
                    0b:cc:fc:3b:8c:ab:6c:94:13:5a:33:4c:d8:9e:c0:
                    e9:9d:9e:2e:7a:23:50:74:e6:cf:b1:68:f4:bf:af:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A6:0A:1D:26:CD:B3:46:09:4B:F0:8F:F9:3F:1A:71:87:A6:45:84
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:fa:49:62:d3:2b:61:5f:c4:09:16:2f:c1:35:c9:a2:95:
         61:e6:c3:63:ed:ed:70:bd:34:e4:b1:a0:ca:ce:59:a0:8e:5b:
         ba:37:ca:2b:ff:a0:47:53:74:77:3f:14:3b:ce:16:84:88:66:
         dd:c0:e9:b7:16:bd:f3:81:98:db:8a:b1:1c:b4:6c:b3:e7:fc:
         ba:7e:b1:08:cb:06:78:58:a5:b4:24:f8:93:b0:0f:f1:d5:b3:
         2f:ab:69:61:32:ff:fc:7b:84:bc:7c:7a:e2:84:46:c4:d9:38:
         31:54:3e:02:80:c8:7e:68:4b:de:b7:bd:f8:d5:54:a8:7d:47:
         29:8f:4e:da:14:b6:eb:64:09:de:eb:06:4e:03:c7:d2:12:47:
         4e:62:c8:09:1c:79:d2:cb:47:83:83:5d:9c:68:ba:ee:67:59:
         2f:49:2b:e1:5c:0d:bd:9c:dd:1b:4b:af:72:40:94:fd:bc:e3:
         41:f8:e3:a6:79:ab:58:5e:40:f6:f5:9d:2f:c7:3e:d2:5d:5a:
         33:b7:db:20:14:87:5a:10:29:dd:ee:87:ec:a3:1a:97:14:29:
         65:d3:03:24:9f:5d:90:0e:95:50:df:57:f5:ea:b3:06:3e:c5:
         d0:9d:e1:b2:51:84:ec:b6:27:2c:80:c3:73:a1:a4:33:b9:17:
         b0:f0:b1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiQNFe/eNXViX8lsMKqCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjQxMTIzMDEwMDQwWhcNMjQxMTI0MDEwMDQwWjAzMTEwLwYDVQQD
EyhkMGE2MGExZDI2Y2RiMzQ2MDk0YmYwOGZmOTNmMWE3MTg3YTY0NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71aHbA/i8PD6bJg7MYCQ3TVGYjU
+4+PJYgIy/AeV6FaJAu2rzJ4SIX4lIPKteWQ2iTBdOxYb01WkmGgSffvrABYjp0J
1qUgRYSVxjT8VD2gM1KzuC6i4i6eHBrdRpoIhKm2obUq/WVgYAgtLa1d3U27CEnN
h1yCI+9FXXaItBbdgGTuwFV3PDmom8b92xVNg0iZFDjv6hArxCM+jxD8GxyqpeUu
0ONNdZ6DsBToY9VwlEPLa8jQ4E7wD8Vz5CUZJr05zv9ZcAVek9Ly19rsLdmbZT8R
Pv44EgG6akbRs9kLzPw7jKtslBNaM0zYnsDpnZ4ueiNQdObPsWj0v6+JtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCmCh0mzbNGCUvwj/k/GnGHpkWEMB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUD6SWLT
K2FfxAkWL8E1yaKVYebDY+3tcL005LGgys5ZoI5bujfKK/+gR1N0dz8UO84WhIhm
3cDptxa984GY24qxHLRss+f8un6xCMsGeFiltCT4k7AP8dWzL6tpYTL//HuEvHx6
4oRGxNk4MVQ+AoDIfmhL3re9+NVUqH1HKY9O2hS262QJ3usGTgPH0hJHTmLICRx5
0stHg4NdnGi67mdZL0kr4VwNvZzdG0uvckCU/bzjQfjjpnmrWF5A9vWdL8c+0l1a
M7fbIBSHWhAp3e6H7KMalxQpZdMDJJ9dkA6VUN9X9eqzBj7F0J3hslGE7LYnLIDD
c6GkM7kXsPCxfQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:30 2024 by rpki-client on console-fra.rpki-client.org