Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          KhX8zVsRpjrtRm32RhUXN/Mzb6qo7ySovi7Mvj/KCUU=
Subject key identifier:   CD:D8:AB:EC:27:F7:33:FC:60:7E:E6:17:FC:2A:97:85:00:9D:C7:EA
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       019355AD7D10BA31A8F73B306666C613EF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          1085
Signing time:             Fri 22 Nov 2024 21:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:53 +0000
Files and hashes:         1: 48AacTrpGGLgdMCduqYLc9CkRCU.roa (hash: khercJWZvOX1CWx5GlxW1xah93QAXPs18dBkXv3jYJg=)
                          2: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: two7bdVRqGQgtc0P/BN89SkFrpG91NIVXiL4acYULYw=)
                          3: IAaDdl7wcIKVADTRMTUgdu3FyTc.roa (hash: NuzauLzh44joC5UpB8owLTvXGEdLBuc/jWAj4ly6Oiw=)
                          4: OUx6GPHPnzsQnqEqThAqd3s23w8.roa (hash: cftY8AE0/w0CzGovFuebr5nqkpyNao2CG66kKd6pZPA=)
                          5: Obw24SFg-Zzms8Ido4pBF5Dt24E.roa (hash: s1cKqIglPV697bgqEX4oYD9q1avpxrj+PTqn5q70UMM=)
                          6: PN45jNTHs3b0DEAjhakCjN9ijG0.roa (hash: Jx7TMsvLTzxljG0926T13PLkcqQTkILPkjIsN5631FM=)
                          7: ZbplHCox8DH-pUJBFdab1Zi-1H0.roa (hash: HLf2i/WTjMDx3evMSzCS0XNMOGj6JWR7SSGs4MSOR8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:7d:10:ba:31:a8:f7:3b:30:66:66:c6:13:ef:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Nov 22 21:00:53 2024 GMT
            Not After : Nov 23 21:00:53 2024 GMT
        Subject: CN=cdd8abec27f733fc607ee617fc2a9785009dc7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:e8:40:29:11:28:f5:2d:d5:e1:c6:c9:82:
                    1b:39:ad:db:eb:b7:f3:a7:8e:13:ab:d7:14:5c:09:
                    66:b9:48:c2:89:92:26:bb:fc:27:7a:da:4e:45:06:
                    10:a6:76:14:39:a6:7d:7d:56:7f:75:f0:0c:e2:0c:
                    ed:2d:0e:cc:1f:60:c1:37:06:69:06:56:41:de:67:
                    47:36:a2:87:68:ad:a8:99:b8:a9:d5:6f:b6:4f:f0:
                    0b:41:1b:bc:db:fc:ca:3a:43:71:b4:ea:68:c5:e7:
                    55:d5:7c:01:b7:40:83:75:8d:75:0e:da:fd:3d:81:
                    4e:87:83:ae:85:fa:29:c3:e8:3f:f3:ad:c1:29:ec:
                    5a:5a:20:ad:c2:74:3b:cb:46:7b:dd:96:9c:99:8a:
                    e9:1b:df:bc:e7:06:62:1c:00:f7:f8:e3:33:ea:10:
                    51:49:4c:62:56:a6:ff:1e:3d:eb:75:62:87:22:19:
                    8f:e9:74:39:ab:f6:7c:ce:80:bd:05:48:68:f2:8d:
                    60:e0:9b:d2:4d:80:47:2d:d4:68:c4:26:a7:3f:5a:
                    fc:e6:f7:5f:c7:05:37:e4:71:84:ea:c3:3d:69:bd:
                    98:4a:c4:7a:0f:07:5d:fc:3f:91:af:da:be:e0:29:
                    ad:ba:23:b4:df:d8:5c:8d:17:5e:e1:9e:07:be:09:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:AB:EC:27:F7:33:FC:60:7E:E6:17:FC:2A:97:85:00:9D:C7:EA
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:02:5a:39:62:71:aa:80:e3:fa:dd:8e:44:c2:c7:31:e2:
         1b:9d:dd:ff:9e:34:31:99:08:7b:f5:21:3a:36:7d:e6:5b:bb:
         57:24:31:67:1f:16:8c:32:02:97:1a:64:6a:53:89:f8:df:0c:
         be:4f:77:e1:0d:22:07:ea:80:16:e6:72:cd:bd:b5:04:fe:62:
         38:e8:ef:45:eb:47:e7:8e:c1:73:98:7c:9a:35:81:64:8b:42:
         10:6a:b6:81:35:cc:0c:21:41:9d:70:1f:3a:44:8b:a8:63:e7:
         76:08:08:9b:a9:86:e4:bb:18:b7:92:b4:f9:7f:46:ad:7d:85:
         98:b3:3f:4e:3c:84:2e:33:3a:8c:6e:67:68:be:a8:a1:f4:32:
         fa:45:74:85:20:f9:dc:a8:14:96:31:c3:04:37:ea:aa:fb:1a:
         1e:01:c8:43:8a:53:a6:4d:61:1d:e9:8a:dd:d2:e3:39:94:db:
         cc:c0:df:4d:07:26:c7:b4:2c:b0:fd:77:2e:da:40:5a:7c:d7:
         ac:44:fb:bc:0c:a3:72:3e:d9:57:b8:dd:ba:91:c0:5c:fa:fc:
         b0:07:b0:eb:61:00:54:08:ad:fb:07:4f:3b:6c:6e:36:86:7b:
         c8:08:c5:c9:df:06:d7:ac:42:f1:2d:39:de:f8:3b:40:f6:a6:
         00:86:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----