Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          cSOIRvUCPbHfqwBLQ69w7ukQb2AJX0Ax6IPHt8yO81E=
Subject key identifier:   96:5F:A7:9D:73:FA:E7:CE:CD:31:F1:32:AE:F9:E9:53:7F:94:F4:77
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       018F58F087A252B9D12E6C024DA597477817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 16:01:49 +0000
Manifest this update:     Wed 08 May 2024 16:01:49 +0000
Manifest next update:     Thu 09 May 2024 16:01:49 +0000
Files and hashes:         1: 5wGLnNKxxNjcF2lOsoAiYds0P4A.roa (hash: mTiIIDSTWRo6MdiM/VhiQcwcj4ULiI8K690oMWB/1d4=)
                          2: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 2STb5rE47ArsQbxSKe3350YG71/at7r7dzDlq9YY/GM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:87:a2:52:b9:d1:2e:6c:02:4d:a5:97:47:78:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: May  8 16:01:49 2024 GMT
            Not After : May  9 16:01:49 2024 GMT
        Subject: CN=965fa79d73fae7cecd31f132aef9e9537f94f477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:7e:fc:5f:16:90:23:68:99:1c:8b:5f:ce:
                    8f:a4:3e:83:c5:80:ad:aa:06:d8:cc:8c:7e:c7:f9:
                    16:13:bd:c5:d6:7d:2b:3a:4e:57:3b:bb:70:89:45:
                    d5:be:9e:54:eb:0d:1a:c7:6d:ff:4f:90:2c:04:41:
                    63:80:d8:9b:6d:57:ca:3b:99:9c:8c:42:cd:50:86:
                    87:3b:c8:18:72:72:62:eb:6e:1d:81:95:29:03:38:
                    3c:2a:1d:9c:5e:25:7f:6f:1c:b4:39:7d:5e:93:e9:
                    8c:b9:c3:fe:d8:38:a7:27:b0:59:94:81:d5:fc:5d:
                    cb:13:6e:d1:22:18:24:31:97:38:9e:88:8a:6f:57:
                    9b:3a:80:a9:c6:29:fd:f6:22:a7:40:1b:82:03:f8:
                    1a:7c:a1:3a:6a:23:da:32:6e:50:b9:74:e3:b5:9a:
                    df:9a:25:d4:09:61:72:d4:18:8d:a9:71:cb:17:48:
                    c8:3a:0d:8d:64:f9:42:c4:16:5f:2f:df:6b:a8:7d:
                    53:a4:d3:4a:6b:b2:46:c5:60:14:1b:3e:ae:2d:8c:
                    30:72:22:d4:cd:4f:71:f7:e2:ae:0d:c1:b1:03:f9:
                    01:e0:65:1f:89:91:0c:3a:91:7b:0b:a4:5b:42:b6:
                    10:f1:86:2b:25:43:02:6e:dd:d6:17:85:bb:8d:45:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5F:A7:9D:73:FA:E7:CE:CD:31:F1:32:AE:F9:E9:53:7F:94:F4:77
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:d1:e7:ce:2f:68:87:e6:73:f8:78:66:38:f8:1a:f9:51:
         09:cc:7f:85:2d:55:1b:65:7e:80:af:6f:8d:07:71:e3:6f:8e:
         26:e3:33:81:fb:25:90:02:5a:c6:38:56:56:b7:e4:f0:17:14:
         2b:d4:3e:4b:42:92:4c:93:05:0a:68:d6:8b:2e:60:8e:82:d9:
         1d:5a:1d:48:ec:22:45:52:e6:cd:d1:5a:f3:d9:1d:55:18:6a:
         20:39:b5:22:58:a5:21:7e:54:a7:00:b4:af:73:a7:cf:d4:75:
         4c:b2:2e:29:57:38:52:1f:6a:4e:c7:3a:28:27:81:9c:eb:15:
         27:9e:0c:8a:92:da:66:eb:52:f9:ff:fb:7c:62:e8:c8:f7:9e:
         2c:6f:8f:24:4a:72:5b:54:bb:c2:41:2e:1d:4c:5a:d2:65:c3:
         d2:0f:6c:8b:cf:88:23:e3:1a:23:6d:96:df:2e:43:13:9d:c2:
         08:40:0e:91:7d:7d:5a:f8:8d:5d:67:5d:00:75:d2:d2:c6:8f:
         9c:73:78:84:ff:24:8d:9a:4e:db:0a:8b:90:9f:21:77:c1:e8:
         6e:b7:78:33:51:4f:fc:9a:dc:61:af:77:8c:7f:42:97:44:f7:
         fa:3a:f9:78:d4:6f:e0:f6:bb:6f:48:7e:1b:0d:83:10:ec:06:
         29:40:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:40:43 2024 by rpki-client on console-ams.rpki-client.org