Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          aLO1g0bgAA1Dc3lu/64mpkTjjrvzpVP8VteXrWpDQws=
Subject key identifier:   77:6E:CF:89:0F:6B:F3:B9:2A:E4:D0:8D:D7:25:D4:86:58:8F:E0:DC
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       019369DAD50B368B5F5E10B4E62E317A6456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          1067
Signing time:             Tue 26 Nov 2024 19:02:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:49 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 9iKJnLVJIuqSoJlGUZHQvGZXY19sgEGnTpEjpqrEHps=)
                          2: JMgMg1xEnW7rFt3PVjkRAr7dTws.roa (hash: ZhtZvOXLYTKfN5RLxj25HbAImPIulfxYvdmZ0tGWzaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:d5:0b:36:8b:5f:5e:10:b4:e6:2e:31:7a:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Nov 26 19:02:49 2024 GMT
            Not After : Nov 27 19:02:49 2024 GMT
        Subject: CN=776ecf890f6bf3b92ae4d08dd725d486588fe0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:12:6d:00:c9:fd:d7:af:05:51:7c:ed:3d:
                    f7:8d:1d:da:bd:30:4a:cb:8e:cd:25:0d:68:03:dd:
                    64:86:79:de:5f:d3:2c:68:51:75:a9:d5:ad:7d:5b:
                    17:77:72:b4:cd:39:9f:29:03:22:95:b7:3b:6d:a3:
                    99:22:90:4d:4f:ec:0e:df:b8:16:d7:8f:f4:a7:40:
                    9b:6e:e2:7e:c1:57:13:ae:fe:bc:b6:52:1e:4b:bf:
                    08:0d:8f:63:56:e8:58:9a:51:73:3a:82:27:87:94:
                    65:d0:e6:ae:13:c5:4c:26:28:9a:52:d4:99:bb:77:
                    39:1b:fa:b6:bc:9b:26:00:1e:3e:97:69:7d:4f:b5:
                    51:ce:23:1d:d0:1a:d3:15:4a:34:57:5f:b5:0b:8f:
                    b0:25:bf:56:cf:73:df:be:64:c1:5d:a8:93:4c:33:
                    66:78:40:e3:d4:6d:40:c7:45:51:41:65:42:34:61:
                    ea:f1:54:97:ac:e8:ce:8d:df:fa:74:7e:09:f6:7f:
                    73:85:53:70:41:0b:0a:cf:30:bb:b4:02:78:0c:e4:
                    0a:c7:c4:c6:35:de:00:d9:d7:c7:34:99:5c:e2:93:
                    43:51:67:86:0d:13:0c:df:00:16:30:3d:b1:b1:19:
                    35:b1:73:8a:e4:37:75:79:26:4a:27:8b:aa:35:c3:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6E:CF:89:0F:6B:F3:B9:2A:E4:D0:8D:D7:25:D4:86:58:8F:E0:DC
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:2b:76:24:64:3a:6e:fa:9f:de:36:c5:ea:9e:ff:be:dc:
         3a:a6:34:bb:37:0e:3b:ab:0b:f6:0e:c8:77:52:76:66:60:be:
         21:d6:59:3a:33:29:6a:44:a8:b5:fb:2b:e2:c4:8c:ec:46:4c:
         16:76:31:fa:45:a4:80:87:7e:59:cd:7d:66:2c:ae:17:5c:d2:
         4e:0c:b1:ec:ae:07:53:97:e8:ec:76:64:f3:45:79:41:02:da:
         f6:c3:32:e9:8c:fb:af:9b:13:71:54:86:f9:ac:e3:1a:6b:65:
         fd:4c:db:10:ec:45:30:e1:34:fa:f8:e6:b1:f0:b0:bd:e3:19:
         04:80:8a:7f:f1:85:c6:fc:a2:23:67:92:d2:39:93:4f:85:a6:
         de:e1:33:c0:14:8f:01:21:58:ea:e8:e2:bc:5f:6c:f3:ba:9f:
         e0:c2:76:40:8d:66:94:56:3e:31:be:a5:5c:a6:ff:ca:4b:13:
         2f:a3:54:96:0b:63:4a:b4:88:4a:8c:2c:1f:d8:ee:6a:84:af:
         a8:ad:e2:bf:5a:72:e1:26:75:c5:00:8f:e3:9e:c4:da:b4:0e:
         ca:d2:2f:c9:33:b2:58:75:fb:8e:68:d5:56:eb:5e:89:38:a0:
         e2:44:56:04:f9:e3:5f:06:3e:51:30:bc:89:85:3a:a9:70:1f:
         0d:47:7c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2tULNotfXhC05i4xemRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx
YTA1NDcwHhcNMjQxMTI2MTkwMjQ5WhcNMjQxMTI3MTkwMjQ5WjAzMTEwLwYDVQQD
Eyg3NzZlY2Y4OTBmNmJmM2I5MmFlNGQwOGRkNzI1ZDQ4NjU4OGZlMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J8SbQDJ/devBVF87T33jR3avTBK
y47NJQ1oA91khnneX9MsaFF1qdWtfVsXd3K0zTmfKQMilbc7baOZIpBNT+wO37gW
14/0p0CbbuJ+wVcTrv68tlIeS78IDY9jVuhYmlFzOoInh5Rl0OauE8VMJiiaUtSZ
u3c5G/q2vJsmAB4+l2l9T7VRziMd0BrTFUo0V1+1C4+wJb9Wz3PfvmTBXaiTTDNm
eEDj1G1Ax0VRQWVCNGHq8VSXrOjOjd/6dH4J9n9zhVNwQQsKzzC7tAJ4DOQKx8TG
Nd4A2dfHNJlc4pNDUWeGDRMM3wAWMD2xsRk1sXOK5Dd1eSZKJ4uqNcMyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHduz4kPa/O5KuTQjdcl1IZYj+DcMB8GA1UdIwQY
MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt
NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk
LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGErdiRk
Om76n942xeqe/77cOqY0uzcOO6sL9g7Id1J2ZmC+IdZZOjMpakSotfsr4sSM7EZM
FnYx+kWkgId+Wc19ZiyuF1zSTgyx7K4HU5fo7HZk80V5QQLa9sMy6Yz7r5sTcVSG
+azjGmtl/UzbEOxFMOE0+vjmsfCwveMZBICKf/GFxvyiI2eS0jmTT4Wm3uEzwBSP
ASFY6ujivF9s87qf4MJ2QI1mlFY+Mb6lXKb/yksTL6NUlgtjSrSISowsH9juaoSv
qK3iv1py4SZ1xQCP457E2rQOytIvyTOyWHX7jmjVVuteiTig4kRWBPnjXwY+UTC8
iYU6qXAfDUd8uQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:37 2024 by rpki-client on console-fra.rpki-client.org