Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File:                     tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier:          pfYLZvL+W9t2ZILFbuUeD6Agrl4tIC+2B4jZCKob4vI=
Subject key identifier:   B8:BB:68:F6:94:93:A1:6F:4D:90:AF:74:92:05:25:A3:CF:C1:D7:FD
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer:       /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial:       01936669AB64BEEDBC5EDC464BA0F2789B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 03:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:21 +0000
Files and hashes:         1: WQUS7VK4iJIkZrfE7-uPBajlizU.roa (hash: 5A+RSd9zbXqbpZ+m+O/a9JolpGhxGweYbbxkrC/XQ3c=)
                          2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: 0SUhoXbDl7u6B2D1RrBNjPpzeM3yyYhauNZwBUrxzzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:ab:64:be:ed:bc:5e:dc:46:4b:a0:f2:78:9b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
        Validity
            Not Before: Nov 26 03:00:21 2024 GMT
            Not After : Nov 27 03:00:21 2024 GMT
        Subject: CN=b8bb68f69493a16f4d90af74920525a3cfc1d7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:41:b9:f6:9b:b9:0d:40:83:71:15:1e:d1:
                    d8:99:87:8e:87:16:8a:4b:bf:3e:2d:2a:ea:26:88:
                    40:74:bd:9e:f1:3e:53:1c:a8:54:f3:81:cc:88:a7:
                    ac:91:92:7b:7b:5a:26:ab:52:d2:9b:10:36:70:2d:
                    a4:ca:35:b4:ca:13:73:df:d5:6a:1e:5e:e6:89:9e:
                    05:0e:08:77:34:68:7e:c4:be:2d:88:30:5e:2c:0c:
                    00:68:f4:36:86:e2:b4:8b:23:70:86:96:4d:50:d3:
                    73:c9:a3:fe:84:91:83:74:66:37:77:1e:5e:fc:c3:
                    29:fe:e7:84:a3:15:06:84:fd:e1:12:f6:21:0e:cb:
                    84:0a:09:8b:75:b8:ad:a0:a9:13:3c:e2:bc:fa:e6:
                    44:8b:61:6c:5b:16:5f:10:c0:db:5e:c3:6a:eb:2b:
                    81:66:b9:d4:4a:9c:a8:cc:d9:0c:bb:7d:d5:9a:c6:
                    28:bc:37:e7:ad:0f:13:2a:1b:54:c7:af:9e:3f:08:
                    1d:76:97:36:dd:1e:d6:39:d9:95:ef:dc:4c:a5:26:
                    71:77:2b:8e:32:de:aa:60:ec:2f:bf:e2:f5:2f:ab:
                    fa:d2:7e:e2:94:1a:bf:32:2b:c2:ff:f2:12:19:d0:
                    0c:14:c9:71:e5:88:95:ab:1d:38:22:05:fa:47:48:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BB:68:F6:94:93:A1:6F:4D:90:AF:74:92:05:25:A3:CF:C1:D7:FD
            X509v3 Authority Key Identifier:
                keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:5a:b2:28:f4:69:5e:56:87:08:0f:f9:b2:0d:bf:33:7e:
         6e:f9:f6:fb:42:cf:01:38:25:db:42:01:17:19:cb:5a:b6:c9:
         6d:81:b3:0c:9e:01:c2:e5:81:0f:4d:0a:06:07:25:57:01:c6:
         af:37:ac:e2:fa:f0:ec:64:c0:c0:cb:9f:5d:22:99:3e:4c:9a:
         48:fd:53:82:13:17:88:eb:4f:86:85:c6:ff:5e:3b:30:00:0d:
         c7:60:40:4a:ce:0d:17:82:93:66:4e:e1:7d:cb:24:65:f8:8b:
         bf:6b:bf:f5:97:8b:83:7f:5b:a7:19:d3:93:99:0f:23:15:f8:
         6c:ca:c8:10:19:05:a4:d3:65:55:09:33:f5:76:58:16:e8:4c:
         d8:cd:f9:20:2e:4d:b1:24:61:f6:ea:a5:e2:72:96:bd:f3:c0:
         e1:06:d3:9b:52:5f:a4:e0:a9:43:19:d3:f3:da:e4:47:94:a2:
         c0:04:32:85:1a:e6:1b:e7:06:9b:98:a6:41:e3:2b:50:6b:57:
         53:87:6f:05:e7:9e:c2:27:38:65:57:ad:70:e3:e6:b4:3f:71:
         c0:fe:b7:b6:0c:b2:78:74:5f:39:1c:39:f2:fb:f9:7d:11:16:
         0c:34:d9:4d:74:09:9d:8c:a5:b7:a0:c0:5c:a9:51:43:5d:93:
         3c:d8:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:00 2024 by rpki-client on console-fra.rpki-client.org