Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          R788+dP9ZE0R57JB0eTykPfWS7BZEmYTPpdYFJnIgGw=
Subject key identifier:   9E:16:63:24:B4:1C:E1:C2:51:CF:93:0B:25:AC:B8:D7:C9:31:56:BA
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       018F89375634CE677332E6F73F6B93954C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          098D
Signing time:             Sat 18 May 2024 01:00:56 +0000
Manifest this update:     Sat 18 May 2024 01:00:56 +0000
Manifest next update:     Sun 19 May 2024 01:00:56 +0000
Files and hashes:         1: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: gF+HqTBE6eJCK2/TrCfwk6Mc9+SucV4zMyQC/MxyZkk=)
                          2: l9S2Pocj4w_fSTZYPUZFOp7ToEA.roa (hash: 7Erk0LaIkCro4C3VJ5O52PfA4eXgEprIxXO9cPB75Es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:56:34:ce:67:73:32:e6:f7:3f:6b:93:95:4c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: May 18 01:00:56 2024 GMT
            Not After : May 19 01:00:56 2024 GMT
        Subject: CN=9e166324b41ce1c251cf930b25acb8d7c93156ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:12:dc:62:43:df:78:75:0a:40:06:b0:13:
                    79:4a:78:25:5d:c2:4c:2f:8e:a6:23:3e:8f:7b:d7:
                    8b:cf:a7:ab:23:32:29:59:f4:98:ae:3f:0a:46:30:
                    49:16:e7:4f:ac:80:e1:ee:71:89:7b:31:c9:01:76:
                    6f:03:c7:14:75:59:ed:eb:01:2a:53:f7:62:6d:c3:
                    b0:5b:ac:b4:45:d6:ec:f6:e4:bb:2a:e9:9e:62:28:
                    b5:c7:2a:35:22:7d:00:30:04:f6:da:26:12:0b:a2:
                    93:8c:7e:6f:d5:d5:75:1d:27:2e:26:13:a7:07:50:
                    8f:b5:66:45:90:71:a7:e5:e3:bd:db:c0:af:44:42:
                    eb:62:25:1d:94:ef:f3:a7:0a:67:92:c0:58:f5:27:
                    89:6b:50:27:c7:3f:28:97:26:ff:2a:cf:c9:14:70:
                    09:b9:a6:20:77:2e:7c:e0:a6:86:61:97:54:02:5a:
                    b7:3a:2d:52:d2:41:df:a7:5c:2d:b4:79:b5:6d:82:
                    d1:d5:04:ce:b4:63:d7:49:c3:0f:1f:d5:25:57:97:
                    36:fb:54:a9:05:d6:53:73:fc:01:cf:54:28:3f:bc:
                    70:72:a0:3e:43:76:65:b4:c7:bf:cd:94:a5:2f:4b:
                    70:0b:6b:e5:b7:32:0d:e3:4f:24:80:68:92:e1:6c:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:16:63:24:B4:1C:E1:C2:51:CF:93:0B:25:AC:B8:D7:C9:31:56:BA
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:29:a0:06:e3:5a:67:d7:bb:91:bc:85:44:ad:11:67:c0:
         de:6d:5c:1a:5b:a8:26:db:7d:0a:92:78:a1:ba:dd:62:92:f9:
         7e:40:98:90:a4:5b:b6:85:89:ac:df:bf:62:de:b4:73:15:d2:
         f1:fc:05:f6:66:f7:00:8a:31:41:17:f0:21:ef:5f:2b:c3:f9:
         fe:12:1b:0f:14:90:de:1d:d6:d7:86:28:2a:2a:e7:19:94:e5:
         98:88:a0:23:a7:29:70:7d:70:8a:05:2f:f1:bf:6e:3a:53:ed:
         b2:8b:c4:9d:09:17:f6:1c:2d:85:c2:5c:d8:da:02:5a:2e:14:
         07:d5:52:91:4e:80:2a:14:b4:a8:de:67:11:c6:05:8a:ef:f3:
         a1:54:f1:9f:3a:07:4c:cd:cc:02:0f:c5:83:50:b0:f2:08:17:
         f6:8d:ca:6a:a8:5c:4e:63:50:7d:4a:44:01:de:5d:64:85:e6:
         bc:89:49:ea:70:d0:2a:ce:1f:25:d3:01:39:9e:85:10:d0:e0:
         1c:ed:52:a1:5b:93:d5:f6:ea:e8:29:99:cd:a3:08:7f:49:97:
         6b:44:ce:ac:05:8f:fe:ab:ad:fe:99:c6:92:81:d2:c6:82:39:
         c4:c8:25:27:63:6a:05:43:d8:22:20:a7:a8:4a:bb:29:89:a7:
         9e:76:4e:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN1Y0zmdzMub3P2uTlUyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2MzNjNhODgwZmM3MWYzMjJkMTcwZjc0N2VjNTJhMmE5
Y2MwZDUwHhcNMjQwNTE4MDEwMDU2WhcNMjQwNTE5MDEwMDU2WjAzMTEwLwYDVQQD
Eyg5ZTE2NjMyNGI0MWNlMWMyNTFjZjkzMGIyNWFjYjhkN2M5MzE1NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufUS3GJD33h1CkAGsBN5SnglXcJM
L46mIz6Pe9eLz6erIzIpWfSYrj8KRjBJFudPrIDh7nGJezHJAXZvA8cUdVnt6wEq
U/dibcOwW6y0Rdbs9uS7KumeYii1xyo1In0AMAT22iYSC6KTjH5v1dV1HScuJhOn
B1CPtWZFkHGn5eO928CvRELrYiUdlO/zpwpnksBY9SeJa1Anxz8olyb/Ks/JFHAJ
uaYgdy584KaGYZdUAlq3Oi1S0kHfp1wttHm1bYLR1QTOtGPXScMPH9UlV5c2+1Sp
BdZTc/wBz1QoP7xwcqA+Q3ZltMe/zZSlL0twC2vltzIN408kgGiS4WwcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4WYyS0HOHCUc+TCyWsuNfJMVa6MB8GA1UdIwQY
MBaAFG48NjqID8cfMi0XD3R+xSoqnMDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAt
MjAyMjJhMDRkMzUzLzEvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAtMjAyMjJhMDRkMzUz
LzEvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2wpoAbj
WmfXu5G8hUStEWfA3m1cGluoJtt9CpJ4obrdYpL5fkCYkKRbtoWJrN+/Yt60cxXS
8fwF9mb3AIoxQRfwIe9fK8P5/hIbDxSQ3h3W14YoKirnGZTlmIigI6cpcH1wigUv
8b9uOlPtsovEnQkX9hwthcJc2NoCWi4UB9VSkU6AKhS0qN5nEcYFiu/zoVTxnzoH
TM3MAg/Fg1Cw8ggX9o3KaqhcTmNQfUpEAd5dZIXmvIlJ6nDQKs4fJdMBOZ6FENDg
HO1SoVuT1fbq6CmZzaMIf0mXa0TOrAWP/qut/pnGkoHSxoI5xMglJ2NqBUPYIiCn
qEq7KYmnnnZOTQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:20:30 2024 by rpki-client on console-ams.rpki-client.org