Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          ICl+xgXlwkKYw7cDvUlHwDwzS/OSjBqx/tipwDcRe6M=
Subject key identifier:   54:2D:2F:F2:64:EB:E0:36:99:BE:03:7F:3A:63:95:6E:87:65:99:70
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       018F83D97754ABB04E7C73A64818BFAB9FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          099A
Signing time:             Fri 17 May 2024 00:00:18 +0000
Manifest this update:     Fri 17 May 2024 00:00:18 +0000
Manifest next update:     Sat 18 May 2024 00:00:18 +0000
Files and hashes:         1: 3shWX3DxrNtCzPwSeGAt19cpNn4.roa (hash: 0PPh0ex7zNZYkTFsrrjmThrlWyhkD1FG7BfX/R4gp/Q=)
                          2: SsfpjCqWon-84JRVjqSSx794E_8.roa (hash: bZxOl1K6MiS79d4hSzmuqJSsUKG3JD2jqOC3SdesR+g=)
                          3: TVZbsuvMXhSB8LsB-pRlWVPs-c0.roa (hash: OXFCCYckn12FOfKijypk+UtENUckftkUlupzyTT0Y04=)
                          4: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: ndHdMO+5xLhSzuUejXMnbglcOBw1y0ZWe3PP9RzOkbc=)
                          5: mTugYz-dBB_vNDrCeiSuU6D72qQ.roa (hash: YtZ1SnIjXNEeH8LPMccb+ontvN2yWFJMIJlGcZj7kuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:77:54:ab:b0:4e:7c:73:a6:48:18:bf:ab:9f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: May 17 00:00:18 2024 GMT
            Not After : May 18 00:00:18 2024 GMT
        Subject: CN=542d2ff264ebe03699be037f3a63956e87659970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:7b:de:3a:3b:ee:c6:86:34:67:59:5e:fd:
                    95:a5:8f:3e:49:d9:ab:04:f6:d9:d3:5c:4a:c1:99:
                    a3:e4:cf:7f:2d:e7:7e:61:90:8d:f4:33:27:63:52:
                    73:5c:96:1b:b3:66:7b:5b:1a:8d:85:fd:3b:d4:c2:
                    19:ed:ab:b6:63:71:9d:8e:1a:ee:62:35:af:13:00:
                    b4:a4:0e:3d:21:fc:88:f0:bf:bb:2c:76:71:9f:53:
                    c9:c5:d5:70:9b:61:ce:5e:37:8e:49:d1:04:ab:10:
                    88:ab:db:be:6f:02:72:7b:a5:c3:5c:65:dd:85:c8:
                    30:4a:12:9d:15:15:db:d3:2a:16:0f:ef:40:14:03:
                    54:9f:0b:39:ba:64:74:dc:46:bf:a8:bc:64:b2:b8:
                    42:1e:15:8b:b4:f8:f3:1d:90:ee:d9:dc:d8:15:1b:
                    74:27:47:65:dd:d4:9b:ce:9b:16:18:14:fd:c7:dd:
                    e9:5a:d4:20:09:1b:4b:bc:31:2f:df:69:c8:cf:f3:
                    f3:f3:42:a5:61:4f:7a:42:d8:dc:7b:f7:90:4e:c6:
                    fb:f4:b2:14:ad:14:3d:d1:d6:07:8e:e6:60:21:20:
                    e0:c8:f3:1a:df:12:1e:db:a1:2e:4d:ed:50:a0:20:
                    18:ab:a1:11:c7:60:33:c3:94:a0:e8:ae:38:eb:ad:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2D:2F:F2:64:EB:E0:36:99:BE:03:7F:3A:63:95:6E:87:65:99:70
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:1a:88:11:e7:91:6c:e0:46:99:f7:7d:bd:cd:b4:d5:a8:
         b5:7f:1a:43:ff:06:fe:cd:03:d1:7c:de:a2:d4:7a:b4:da:41:
         a3:f2:49:fc:eb:91:c8:2a:a9:35:25:77:c0:15:95:18:71:7d:
         dc:e7:d2:cc:13:71:0e:8f:16:81:79:3a:1c:2a:cb:cf:3d:e6:
         92:74:de:d1:97:8f:5c:8f:c0:a9:51:cf:8f:46:9a:44:63:8c:
         35:0d:19:4d:70:d2:e6:f0:6c:37:07:e9:f3:5f:47:d8:34:22:
         04:59:31:63:cd:3a:fe:e1:98:07:5b:27:56:5a:84:0b:a4:5e:
         fb:10:65:60:17:97:d1:f1:19:62:fa:b5:57:2e:a3:b9:89:d8:
         62:67:cc:e8:b1:34:7a:3c:fb:3e:93:ed:ee:28:72:3f:d9:03:
         4c:85:99:d2:d3:0f:bd:f4:ee:57:9d:3a:80:03:44:8c:29:99:
         ea:14:1a:f5:c7:84:e5:92:bf:6d:ad:b7:f4:b3:28:ce:ae:c2:
         7a:96:01:8e:eb:7c:d0:46:8e:c1:2e:ab:e8:18:43:ce:c5:9d:
         bf:b8:99:0a:43:51:fa:ba:19:5c:cd:58:42:41:47:42:1f:29:
         bf:eb:6c:fe:6b:43:3e:3a:6a:a1:5f:f7:14:da:55:9d:98:29:
         1b:33:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:14:45 2024 by rpki-client on console-ams.rpki-client.org