Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          7Ss4KQTCk0LG/Od9JYXKKwwi8KdPFewzzD+tHqGxAxk=
Subject key identifier:   CF:E6:05:B0:59:FC:BC:AA:AD:9F:98:C4:8E:3F:FA:37:DF:2F:14:EE
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       018F411E857CE3A2A05C42F76BDEA56B3CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 01:01:10 +0000
Manifest this update:     Sat 04 May 2024 01:01:10 +0000
Manifest next update:     Sun 05 May 2024 01:01:10 +0000
Files and hashes:         1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: Xaa8PFJ1/doqj9V8UOsYXpbKGZgUg44oyerFYi0P73E=)
                          2: ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa (hash: VJWotTfXivUwS+LqgheMrXL+/hpyIrB9X5QtamS7mac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:85:7c:e3:a2:a0:5c:42:f7:6b:de:a5:6b:3c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: May  4 01:01:10 2024 GMT
            Not After : May  5 01:01:10 2024 GMT
        Subject: CN=cfe605b059fcbcaaad9f98c48e3ffa37df2f14ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:53:85:36:30:ba:10:12:8c:f1:e0:09:ad:
                    2e:8c:47:01:24:66:59:95:1c:2f:4f:48:ed:4e:c1:
                    7d:f0:24:15:76:52:42:a2:f6:1b:a6:40:93:67:2a:
                    de:a3:e7:58:0e:8a:66:51:7f:20:7c:9e:5c:97:eb:
                    76:9b:7d:9c:dd:8a:86:35:0f:9a:f2:b8:b5:df:fb:
                    e2:d4:fe:db:b4:62:44:d2:fe:54:b3:5a:b5:21:ee:
                    50:f5:0a:41:ff:4e:06:d6:05:1a:f9:0d:03:d1:ef:
                    b8:b0:9f:92:ab:27:9f:6b:42:a8:1e:35:a5:05:99:
                    4c:12:e6:f8:c3:1f:79:49:38:90:e5:7f:b7:01:17:
                    b5:f0:59:0a:0e:4a:b4:a9:7f:fd:c7:94:e6:38:22:
                    31:55:4a:eb:0e:b8:57:5c:af:16:b0:45:41:5c:08:
                    69:61:dc:a8:11:2b:bf:74:ac:7f:11:f5:8d:7a:d3:
                    a7:e5:3e:68:09:df:1c:4a:cf:28:59:a4:b1:d3:b6:
                    01:59:b6:4a:7b:42:e2:c6:de:09:67:7e:b9:cb:2d:
                    49:ab:3a:7c:33:7f:8d:a2:7c:91:db:7a:61:bf:48:
                    a3:fd:dc:1a:a2:ca:73:95:67:2d:a2:ac:a7:af:e0:
                    27:0b:5e:b7:4d:a5:32:b2:82:57:f0:45:6e:06:0d:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:05:B0:59:FC:BC:AA:AD:9F:98:C4:8E:3F:FA:37:DF:2F:14:EE
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:91:1f:89:92:54:83:69:dc:ed:a6:a4:16:df:d3:68:55:
         c9:c9:a2:c2:c9:99:70:6d:d8:d0:0a:d3:a2:13:49:2c:4d:f5:
         2a:4e:b7:d5:04:7d:f5:b8:1f:4e:be:85:d6:a2:7e:3e:77:4b:
         09:fb:38:6b:33:98:0a:1f:08:a6:36:1d:c6:ef:85:b8:69:30:
         bf:90:0a:e2:61:10:bd:ef:fd:ec:8e:b2:9c:3d:87:02:d7:1c:
         cc:ea:ac:28:cb:d2:d5:ef:a8:42:ac:91:8b:2c:57:75:2e:d6:
         da:18:76:a0:c0:4d:3b:f2:79:17:dd:d4:99:1e:59:25:a8:aa:
         ea:2d:ea:e9:5e:3c:8a:09:ea:fc:02:2f:7d:3a:f3:2b:06:e2:
         96:7e:3d:c6:20:a5:14:6c:d8:a4:c6:0e:05:5c:8d:e2:11:4c:
         72:49:d4:0a:b5:c3:90:26:99:e8:e3:7c:60:f8:aa:b7:de:51:
         39:a7:a9:9a:1b:91:5a:7e:d2:68:a2:30:5d:6c:ea:b9:6c:8d:
         fe:41:5c:ea:f3:2c:0c:40:9c:50:73:c0:83:ce:87:cd:32:26:
         5d:c6:56:dd:25:be:26:f9:06:40:3a:5e:1a:38:f1:f6:eb:d9:
         9d:00:0c:c7:a9:ab:48:3a:79:28:32:ad:a5:12:02:71:6b:41:
         e9:7c:97:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BHoV846KgXEL3a96lazzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5
Y2RiZmUwHhcNMjQwNTA0MDEwMTEwWhcNMjQwNTA1MDEwMTEwWjAzMTEwLwYDVQQD
EyhjZmU2MDViMDU5ZmNiY2FhYWQ5Zjk4YzQ4ZTNmZmEzN2RmMmYxNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2clThTYwuhASjPHgCa0ujEcBJGZZ
lRwvT0jtTsF98CQVdlJCovYbpkCTZyreo+dYDopmUX8gfJ5cl+t2m32c3YqGNQ+a
8ri13/vi1P7btGJE0v5Us1q1Ie5Q9QpB/04G1gUa+Q0D0e+4sJ+Sqyefa0KoHjWl
BZlMEub4wx95STiQ5X+3ARe18FkKDkq0qX/9x5TmOCIxVUrrDrhXXK8WsEVBXAhp
YdyoESu/dKx/EfWNetOn5T5oCd8cSs8oWaSx07YBWbZKe0Lixt4JZ365yy1Jqzp8
M3+NonyR23phv0ij/dwaospzlWctoqynr+AnC163TaUysoJX8EVuBg0H4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/mBbBZ/LyqrZ+YxI4/+jffLxTuMB8GA1UdIwQY
MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt
ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm
LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbISRH4mS
VINp3O2mpBbf02hVycmiwsmZcG3Y0ArTohNJLE31Kk631QR99bgfTr6F1qJ+PndL
Cfs4azOYCh8IpjYdxu+FuGkwv5AK4mEQve/97I6ynD2HAtcczOqsKMvS1e+oQqyR
iyxXdS7W2hh2oMBNO/J5F93UmR5ZJaiq6i3q6V48ignq/AIvfTrzKwbiln49xiCl
FGzYpMYOBVyN4hFMcknUCrXDkCaZ6ON8YPiqt95ROaepmhuRWn7SaKIwXWzquWyN
/kFc6vMsDECcUHPAg86HzTImXcZW3SW+JvkGQDpeGjjx9uvZnQAMx6mrSDp5KDKt
pRICcWtB6XyXCQ==
-----END CERTIFICATE-----
Generated at Sat May 4 03:12:57 2024 by rpki-client on console-fra.rpki-client.org