Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          at7QrIPg/DtCudWuSTDqcZcHCt/KeJadYLWXm/dNN8M=
Subject key identifier:   0B:0F:69:B6:01:DB:10:0D:B1:3E:38:29:E8:6A:AB:BC:5B:83:0C:FF
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01947F140B90155E3626EB38BB90594EEE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0C38
Signing time:             Sun 19 Jan 2025 15:00:07 +0000
Manifest this update:     Sun 19 Jan 2025 15:00:07 +0000
Manifest next update:     Mon 20 Jan 2025 15:00:07 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: aDhkvDoF1Oy1MpmHP+x7JgmNutyt1Pucjxn+pszMcs0=)
                          4: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jan 2025 07:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7f:14:0b:90:15:5e:36:26:eb:38:bb:90:59:4e:ee:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jan 19 15:00:07 2025 GMT
            Not After : Jan 20 15:00:07 2025 GMT
        Subject: CN=0b0f69b601db100db13e3829e86aabbc5b830cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:67:0e:56:87:89:9e:44:2c:f5:90:49:83:
                    52:b7:fd:a3:74:85:f4:8a:ac:a1:78:01:d3:9b:b3:
                    35:af:12:1f:88:e3:6c:33:1c:67:8e:b3:af:2a:b3:
                    fc:46:20:05:49:c6:14:b0:c4:70:ec:fd:c4:20:40:
                    59:fc:04:74:00:d1:da:68:e1:61:e7:3c:bd:af:c7:
                    f5:a8:2c:38:44:03:c1:ba:bd:33:74:a1:24:af:b3:
                    99:86:86:57:34:69:71:f1:10:73:42:a2:59:b9:87:
                    b0:0e:5c:5f:37:96:49:42:f6:a1:ab:06:09:bc:42:
                    93:af:33:8f:ab:93:0a:85:33:c1:4e:77:8b:33:97:
                    59:fd:11:60:1c:c7:60:a6:b5:39:7b:46:50:ec:8f:
                    0b:44:46:ec:ce:2d:fd:58:0b:c7:da:b4:29:df:21:
                    85:c9:88:c4:18:4b:e9:6b:0f:05:f6:22:46:ae:ad:
                    dd:7a:95:99:c4:e4:80:14:c4:02:40:5d:64:85:e7:
                    01:cf:d6:ad:e5:a9:2b:49:8a:2d:fc:50:3c:2e:51:
                    3e:3f:63:bb:10:df:27:63:6e:b9:0f:b5:90:7e:bc:
                    3e:d5:23:d3:e4:33:ee:df:e9:02:4e:12:42:0f:e0:
                    1d:06:7d:91:9b:23:3d:b7:d2:78:79:a8:52:bc:93:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0F:69:B6:01:DB:10:0D:B1:3E:38:29:E8:6A:AB:BC:5B:83:0C:FF
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:1c:a6:a8:63:27:7b:08:5c:72:6d:2e:7b:01:a5:5b:9f:
         56:13:7f:22:9d:7e:41:23:3d:f3:8b:50:f3:8c:ad:a7:f5:f8:
         e7:43:27:44:22:df:de:20:48:9b:d6:49:2d:99:ad:34:c5:72:
         84:0d:7e:ff:84:2d:bf:23:1f:53:06:d2:31:7b:da:20:a5:75:
         cd:b0:03:3e:fd:69:67:11:c0:b8:cb:3f:93:b2:ab:ac:18:95:
         18:6a:67:75:12:0f:35:32:ba:cc:18:39:32:5c:c4:50:ff:0b:
         f3:00:ed:1a:8b:06:34:4d:5e:2a:e6:42:00:69:4b:be:e0:07:
         a0:10:d6:12:0f:0c:21:bc:50:37:57:de:58:c0:e4:b6:1d:6f:
         4c:41:ce:43:5b:60:68:3d:9a:56:96:b3:03:6d:e1:14:f9:4c:
         6f:59:9e:d5:7f:ae:44:06:36:93:f7:b8:79:df:dd:b7:ed:c1:
         1f:a8:a0:2c:8f:c9:c4:d1:cd:f5:5c:d2:83:ca:f4:01:44:d0:
         22:68:8a:d0:37:d9:30:ec:82:35:02:3a:6c:d0:d5:02:a5:63:
         65:62:74:00:56:f0:33:9c:51:4b:78:67:50:b7:ba:59:e0:7a:
         9f:f0:4b:8e:c7:fd:3f:a1:87:6a:ff:72:b1:60:ed:79:77:83:
         4a:ba:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 16:42:03 2025 by rpki-client on console-fra.rpki-client.org