Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          sdzwOhZ8UkojRzZQ5ecXO0S3oFw/w4xneSgruJUFpBQ=
Subject key identifier:   C9:10:49:83:D0:6A:47:51:8F:19:81:18:14:F7:B7:43:39:D6:12:E4
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01967341D66453C00038444B9D65128AFC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0D3B
Signing time:             Sat 26 Apr 2025 18:00:16 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:16 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:16 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: /xmruefiBNDddW+RYwc9QLH3xuXm7FZYyuqcBIdgZI4=)
                          4: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:41:d6:64:53:c0:00:38:44:4b:9d:65:12:8a:fc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 26 18:00:16 2025 GMT
            Not After : Apr 27 18:00:16 2025 GMT
        Subject: CN=c9104983d06a47518f19811814f7b74339d612e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:53:13:60:30:4b:e5:65:be:30:f7:da:75:
                    58:e3:2a:f1:e1:16:03:ca:6d:bc:51:40:87:18:51:
                    00:78:66:9d:e7:fa:e1:d3:f4:ce:6f:a4:7b:ae:64:
                    f4:72:33:30:4a:ed:36:77:b1:bd:e6:74:fb:ea:1a:
                    0b:60:aa:67:37:6b:1e:5d:c6:e6:43:9f:2c:8e:4c:
                    c7:62:78:28:10:37:56:87:35:26:4b:30:ed:e3:8c:
                    59:90:41:ec:85:97:27:02:b3:2d:da:d8:e4:ff:0b:
                    91:bd:74:07:7a:8f:7f:e5:52:a0:00:e6:c2:5d:b5:
                    90:b4:90:1c:4a:17:89:35:27:83:15:cc:02:ec:b5:
                    43:e3:96:6b:7b:b3:fc:d2:88:df:f9:ce:53:58:6d:
                    fd:29:ce:85:c9:b1:c2:61:bc:46:1e:88:36:ba:40:
                    67:8f:40:13:5c:09:00:6f:df:d4:a6:6b:90:0f:78:
                    6d:e2:56:f7:31:68:e2:df:b2:01:9e:28:a4:fd:7c:
                    75:e2:1b:34:a3:5f:e4:c2:07:4f:22:30:c5:1a:ad:
                    97:13:a5:f7:88:f1:2e:a2:86:40:59:db:9c:18:2b:
                    55:bc:ee:46:d2:7b:6c:0c:02:47:8f:a8:ab:b7:04:
                    6c:3a:87:a5:ca:fa:58:5d:95:c1:63:ec:ef:44:3f:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:49:83:D0:6A:47:51:8F:19:81:18:14:F7:B7:43:39:D6:12:E4
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:f2:15:a2:02:dc:2c:e5:72:e5:6b:a5:89:a6:eb:c9:ca:
         ee:13:5f:b0:60:1d:87:09:77:59:3e:33:00:16:30:a3:26:5b:
         44:12:5c:82:16:be:31:f4:1f:f2:ca:14:da:56:4e:14:0c:74:
         33:bf:90:c0:d8:ac:aa:5e:0c:78:7a:18:14:6d:03:ff:e6:4c:
         3b:7b:1b:b8:da:44:f6:30:d0:b5:c5:08:2c:3e:47:fc:0a:11:
         db:4b:02:07:63:59:a8:fd:7f:bb:96:98:b2:88:6a:af:21:c2:
         76:7f:15:89:ac:07:b1:dd:f1:60:ee:a4:91:ab:86:d0:39:c8:
         de:ed:21:9e:d8:4d:d6:6d:d3:57:ba:94:75:dc:20:38:cd:c2:
         ff:9b:a7:39:da:62:32:64:1b:f4:d8:ca:95:40:f3:c6:be:0a:
         66:5c:5a:d3:21:71:6b:a8:e6:f4:45:d2:64:27:6d:59:a3:79:
         ef:e0:aa:2c:68:8d:3c:16:79:c3:95:42:b6:ac:54:1f:ac:55:
         d9:bc:b6:db:21:57:8c:1d:38:d4:87:1e:d2:d3:5d:bc:6d:b5:
         ab:20:1f:4e:f1:84:0c:50:42:5f:48:86:b4:85:56:70:80:b6:
         50:f8:03:0b:04:53:fc:f3:74:17:0f:3b:83:f2:5a:0b:3f:be:
         18:b7:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:51 2025 by rpki-client