Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          BVjzMz3KbySELXtoW34aUCh9yGQPvPwMQiISH+Yo94M=
Subject key identifier:   AE:B7:CC:00:0B:CF:2D:69:0A:4F:FE:74:C8:E5:4D:BF:13:EB:F8:47
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       018F43B3451B7449799726FC84F80298AC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          0413
Signing time:             Sat 04 May 2024 13:02:52 +0000
Manifest this update:     Sat 04 May 2024 13:02:52 +0000
Manifest next update:     Sun 05 May 2024 13:02:52 +0000
Files and hashes:         1: 1CqdgnBv1ZBCon6OG6SPMurrNFA.roa (hash: w9PtvLvkFOzFC9hy+KTjfhiAFxYTe7nn2tlOIBkg0LA=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: OXJShDOLeFGCy0r6thBvhCwOfCHhyxBJ9QaJn1ik7VU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:45:1b:74:49:79:97:26:fc:84:f8:02:98:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: May  4 13:02:52 2024 GMT
            Not After : May  5 13:02:52 2024 GMT
        Subject: CN=aeb7cc000bcf2d690a4ffe74c8e54dbf13ebf847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:75:f0:85:c6:f4:7c:40:c4:3c:69:02:7f:
                    f5:26:10:4f:c3:25:01:8d:48:39:36:fc:67:94:82:
                    9a:2b:bd:a3:19:0a:56:db:b0:39:05:4c:78:68:aa:
                    1a:d5:1a:a3:eb:f0:8d:3a:4c:ab:85:b0:7d:c5:dc:
                    d9:ee:75:4e:70:4d:2d:c4:8c:58:57:9f:44:b4:22:
                    b5:4d:54:1a:02:05:95:0f:c0:4b:14:af:3c:b9:95:
                    3d:78:ac:43:cd:6a:76:a2:fc:88:7b:d7:a7:f8:ae:
                    db:6c:53:7b:be:f4:20:cd:77:a9:86:bd:15:00:23:
                    11:3c:d7:d6:8f:62:7e:97:f3:a5:b8:30:8a:cb:78:
                    9b:27:12:85:aa:95:f8:bb:46:bd:ee:f1:2b:25:a5:
                    91:89:6d:e2:73:92:ab:bf:30:46:26:a4:46:67:4f:
                    01:01:4e:8c:b2:aa:05:73:b9:26:9b:50:80:94:57:
                    cc:a8:93:fa:a0:38:16:2d:9e:70:9c:6e:1f:d1:5f:
                    52:8f:42:57:16:55:4e:f4:23:01:e4:98:77:67:32:
                    2b:6f:f2:c4:e9:dc:3e:48:a1:73:a8:89:f5:9d:19:
                    7e:e3:f2:a8:93:96:8d:26:b2:2b:6b:7a:5c:03:a6:
                    fe:79:50:07:2a:26:2d:a6:f8:c3:9d:40:b8:e9:75:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:CC:00:0B:CF:2D:69:0A:4F:FE:74:C8:E5:4D:BF:13:EB:F8:47
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:b0:0c:b1:e3:fd:ee:28:00:8d:f7:d7:fc:77:9d:54:60:
         2e:84:d6:89:5e:79:ed:88:b3:ba:71:81:b3:ea:13:f8:fb:db:
         3a:f5:ba:4e:fb:00:38:41:3c:67:72:5c:be:0d:ce:11:42:14:
         f7:b7:94:f8:1d:23:3b:47:1d:62:8f:c1:e1:bc:4a:d5:28:b3:
         4e:82:0c:9f:67:dc:b1:4b:24:54:6b:49:67:59:f7:2c:dc:cd:
         7b:a7:22:c1:32:48:09:75:73:cd:5b:fa:dc:af:f8:27:de:3e:
         72:ac:ba:f5:f5:de:06:e6:0c:0d:4d:03:fe:4e:99:c8:86:2d:
         2b:84:73:3f:db:88:57:47:e8:27:08:17:d0:ed:89:c4:de:19:
         53:fc:20:05:77:f9:5f:20:18:13:80:2f:43:bc:42:26:18:82:
         62:1b:bf:09:9b:91:0c:5e:b9:19:8d:07:81:d6:0a:68:0b:7d:
         8d:4f:2f:2d:6b:7e:d1:25:a5:e4:41:d2:78:83:fc:75:c0:41:
         c0:fb:39:76:0c:cb:db:61:6c:1f:84:6c:00:4f:e5:54:dd:01:
         ab:0c:e8:16:fd:04:70:df:5c:d4:80:c0:3d:36:c0:b8:6f:bb:
         57:6f:57:da:24:79:3d:86:92:e1:be:2f:f6:f6:2f:e8:43:53:
         4e:1a:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:48:24 2024 by rpki-client on console-ams.rpki-client.org