Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          9uh2CA6D+M7H6blpRpGOLcmtpPwjpX/MDpufVfDPw6s=
Subject key identifier:   64:9F:6D:05:8B:85:3D:9C:CB:D7:0B:CA:F7:85:A6:A4:69:5D:67:0E
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       018F8410A2CEA86B301D166F50AA81FB63A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          0D07
Signing time:             Fri 17 May 2024 01:00:33 +0000
Manifest this update:     Fri 17 May 2024 01:00:33 +0000
Manifest next update:     Sat 18 May 2024 01:00:33 +0000
Files and hashes:         1: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: b6oUpQO4JqK/mnn9ULW+hxbi8cyCO71eY8B3MS5rBJM=)
                          2: J92UePL1w68KMvF09eUKnQO9sSM.roa (hash: SKDlzrutQzkB+I4e1SOTfiCsuvX+zu9CvFI22nNjgbc=)
                          3: RtazdHEjU4eq6uHDm8S7O4qwmVc.roa (hash: QdnKgKg6jZIDgAUdcJtGOq2L5Y3Fc0X1nrFioROhXEQ=)
                          4: YQ1mVr3oYRZIKJ5OpKHeQo2AE38.roa (hash: H5iUtvWvgRxUqcEr7pRadkpRbNZQ9bIbYIXL2KvLR00=)
                          5: d8UY1xlKOS8PDLsKbNdTJqx7uJQ.roa (hash: lbL3APpx/7nLNrlokOfg21kPkJpXCBSg9YgsqIqakgM=)
                          6: heh2so4looMZ0v5MP1N-fG3TBEw.roa (hash: fU2kZkzTOMI/Qq8IjeSXF0dqMb2Ysnpe2CPhFx0C7do=)
                          7: qLBH6WgGMrBsftajbUnoXCUuS-A.roa (hash: RBKtS1XyG/Y/58cSK8Yk1Om4IoAecP8XkPXp8LqjKyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:a2:ce:a8:6b:30:1d:16:6f:50:aa:81:fb:63:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: May 17 01:00:33 2024 GMT
            Not After : May 18 01:00:33 2024 GMT
        Subject: CN=649f6d058b853d9ccbd70bcaf785a6a4695d670e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:e8:0d:f1:2b:de:08:f6:04:17:d5:c0:88:
                    04:60:6c:c9:0b:3a:cc:aa:9a:02:66:54:64:1a:d2:
                    71:75:a6:b0:9b:8b:40:b7:07:41:b6:dd:26:6e:57:
                    b3:d6:0a:c0:0c:ff:3c:06:9f:dd:32:30:9b:22:8e:
                    8b:a0:af:d0:3e:0a:df:f3:23:45:40:69:43:68:da:
                    a6:c9:10:89:ea:e0:1e:3f:e1:39:b0:1f:31:fa:10:
                    b2:d5:01:38:7e:50:a7:39:cc:d2:d8:a2:7d:99:13:
                    03:61:bb:bb:06:ca:e3:74:e8:07:a4:f0:94:03:6d:
                    96:cd:65:a1:71:e5:02:1e:7b:28:c0:16:23:40:0f:
                    ea:dd:c2:30:ad:b8:77:3a:d3:1a:1d:3f:c8:c6:d8:
                    f8:2f:cd:d8:ab:cc:60:cd:30:3d:81:cb:cd:18:b4:
                    18:1a:ad:18:3e:bb:52:9f:4f:40:40:da:fe:18:cf:
                    e9:be:78:94:35:0b:63:d8:c4:f8:b7:12:47:00:dd:
                    40:b6:28:be:8c:f2:ec:30:2c:9a:a0:fd:2d:e1:b9:
                    25:17:8b:85:a2:e4:77:a6:37:87:54:2e:9d:fe:90:
                    ee:bc:23:1a:22:a5:c1:8b:8a:e2:5f:fa:f9:f9:cb:
                    eb:f0:43:e6:bb:6b:1e:57:d0:96:3e:e4:09:f9:09:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:6D:05:8B:85:3D:9C:CB:D7:0B:CA:F7:85:A6:A4:69:5D:67:0E
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:6e:6a:72:70:e4:9c:0b:b3:c3:ac:fc:a1:26:48:c3:d0:
         ff:00:43:73:a8:d1:28:06:c8:b9:fb:83:a3:96:85:66:59:6f:
         3d:81:6d:7f:04:d7:c7:79:b2:52:a0:f1:85:18:c6:89:b4:5c:
         f1:20:18:be:6c:9f:5d:9c:10:31:ee:c7:e7:a6:70:22:aa:0a:
         93:24:3e:16:87:28:ca:2b:f6:51:cf:84:8d:bd:49:8e:e7:66:
         ac:da:c4:5f:aa:a8:a1:be:8a:83:65:66:33:1d:ce:92:bc:32:
         18:b9:79:11:f3:fb:07:fb:92:90:7d:e2:a6:f0:92:6e:79:d0:
         44:6f:4d:2c:72:81:85:7f:64:8f:ca:ba:96:2a:9e:3b:aa:db:
         33:17:54:5b:c5:62:6a:85:96:f9:1c:f4:d4:23:73:ad:af:cc:
         7e:18:46:38:4a:c2:8f:0a:a0:1f:53:04:96:de:dc:b5:f9:ea:
         de:e7:51:fe:a8:e5:b4:00:31:ab:f7:96:68:2b:ae:d2:fb:91:
         f1:1f:96:6a:7e:b2:2e:63:75:0e:e2:f3:7b:67:fc:58:72:a5:
         f1:c3:62:0d:18:47:86:3c:5d:8a:73:ee:c8:82:bd:77:a1:00:
         8e:4e:af:72:a3:c9:80:55:db:60:cb:0c:af:93:9f:66:8e:fe:
         c4:9f:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:50:39 2024 by rpki-client on console-ams.rpki-client.org