Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File:                     tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier:          xCRrQvwlfSlR3fmGnATLN5UAnWLvUkYHD5u0xE+0iRM=
Subject key identifier:   03:E4:62:E8:D2:B0:66:4E:9E:F4:75:EB:60:D8:D3:DC:CE:66:D2:F3
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer:       /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial:       018F87B6B6FEA6FC42B2F4545DB188D33504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: WQUS7VK4iJIkZrfE7-uPBajlizU.roa (hash: 5A+RSd9zbXqbpZ+m+O/a9JolpGhxGweYbbxkrC/XQ3c=)
                          2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: BWmAH4foGGeGcc5Z5MkpMoLPBkeTRsScG9eALUTViMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b6:fe:a6:fc:42:b2:f4:54:5d:b1:88:d3:35:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=03e462e8d2b0664e9ef475eb60d8d3dcce66d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:7b:0f:99:3b:81:d6:4f:13:01:de:46:b6:
                    d1:f4:6e:1d:55:88:7f:b1:8b:25:76:f2:77:09:ac:
                    34:52:98:33:d0:11:28:9d:1d:99:45:d7:a6:56:7f:
                    7c:4c:8d:9c:e6:0a:44:00:ab:0a:f9:16:19:e3:35:
                    32:72:dc:f9:38:cd:cd:32:23:76:eb:23:ea:70:c3:
                    04:15:92:db:31:b5:43:e3:1d:99:dd:0a:83:95:1f:
                    54:0c:b4:ba:23:31:c4:a8:22:ae:5d:96:6e:f6:14:
                    e2:bf:78:d3:64:34:86:50:5a:88:b0:5c:25:ed:a1:
                    5b:a9:62:cc:d7:29:ec:bc:8e:84:1e:4d:ee:12:50:
                    72:2b:4f:cf:8e:84:95:24:dc:a2:a6:47:5a:16:58:
                    6a:68:2f:94:b5:21:8c:d1:1f:f4:7e:2e:1b:33:ca:
                    0f:0b:79:3e:57:9d:95:e9:81:24:4c:de:2f:5d:81:
                    75:63:c6:d0:5d:68:ca:b1:52:ac:e3:74:60:bb:bc:
                    64:b4:92:a3:0e:d3:31:2c:4e:12:fc:2b:1f:cc:bb:
                    ac:a8:ba:73:40:d7:18:ed:e4:7a:2d:36:27:a4:60:
                    56:12:2d:9e:c2:a7:4d:99:e5:86:17:d6:81:bf:f1:
                    87:39:73:e4:29:fe:1a:fa:cd:73:d9:37:3a:b0:c2:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:62:E8:D2:B0:66:4E:9E:F4:75:EB:60:D8:D3:DC:CE:66:D2:F3
            X509v3 Authority Key Identifier:
                keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:cf:e4:a0:d6:36:17:7c:a6:fc:31:22:93:13:d7:71:b4:
         1e:eb:7b:ef:ed:a0:c3:ea:e9:50:af:dc:22:90:db:9e:4a:ff:
         f1:7e:88:ef:a7:0d:8b:d4:1f:1f:04:8a:0d:c9:18:ac:09:4a:
         18:99:10:ec:47:6b:fa:94:7c:f9:72:d8:b1:0e:7c:93:0b:cb:
         98:0e:79:84:92:b2:31:0f:5c:00:98:5e:f5:0e:8f:30:23:ea:
         b9:52:a5:0d:da:6f:fa:43:8c:20:e4:a0:79:f4:a0:2b:3f:32:
         da:a9:ce:60:28:a4:26:fe:33:b6:47:92:71:63:21:b4:3f:cf:
         14:e1:66:8b:eb:d8:b7:09:2f:3a:2d:e9:34:92:1e:6f:1b:cb:
         0f:93:a8:99:f2:85:d9:b6:55:6c:ef:21:a8:2f:0b:ae:ce:26:
         7a:5a:a1:20:64:77:9b:d4:87:3e:a7:21:03:9c:4f:a1:95:10:
         a0:c8:88:35:bd:c3:18:0c:84:80:70:5b:91:38:ba:f3:b3:4e:
         06:d2:45:eb:6b:95:d7:f3:d0:d9:19:f5:83:3c:b0:bb:9f:72:
         5e:ce:d5:90:0d:0d:e3:7d:39:2d:9b:06:ee:f4:29:f6:77:ac:
         e3:f9:cd:dd:85:70:a8:82:df:fa:f5:da:c1:f3:17:ce:49:e2:
         e2:cc:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:07 2024 by rpki-client on console-ams.rpki-client.org