Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          i+JfckoZ1bWdWGTERZLiPu9OahESR1H44ZZ5t6xL3HM=
Subject key identifier:   28:E0:DC:09:F5:0F:23:20:B1:54:B2:30:12:59:DA:19:F7:B8:B8:06
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       01901B20B63590EF09567C266180487D78EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 09:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:46 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: K+IjoGFZpA+XSn9X39UJ0sXZwCbFYcXjjhBGr3f2E+U=)
                          2: e91100DKzfvWNJ0tMjpnZk7XODQ.roa (hash: vmNC4Vsd6UBZRWcsmFbPrLWEaHaIOXa33LsIR7f/7Kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:b6:35:90:ef:09:56:7c:26:61:80:48:7d:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Jun 15 09:00:46 2024 GMT
            Not After : Jun 16 09:00:46 2024 GMT
        Subject: CN=28e0dc09f50f2320b154b2301259da19f7b8b806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:62:6e:07:2d:b5:6e:ef:21:da:23:b4:be:
                    05:4a:22:74:3a:4c:54:5d:e3:be:a8:1a:42:a6:ae:
                    8a:95:1d:d9:37:e4:16:51:a1:08:d3:22:8d:29:5c:
                    e6:da:47:0b:91:7c:65:ed:aa:fa:de:86:b3:9e:fa:
                    eb:18:9a:b5:de:d8:1a:11:d6:2e:e4:30:62:16:87:
                    96:ba:66:14:20:73:9a:d7:77:d7:d9:d4:5b:60:cb:
                    db:71:2a:47:fc:4c:64:fb:30:78:9d:ad:bb:3c:a8:
                    b5:5d:24:7f:6b:65:47:cb:a0:68:08:3c:94:ad:23:
                    1d:b9:b3:11:62:ad:30:4a:92:9b:fa:db:23:94:00:
                    56:9d:50:bf:42:0f:52:80:46:68:f1:eb:a7:b5:9a:
                    04:85:f3:93:f8:7a:fb:a1:8b:86:64:f0:77:fe:89:
                    74:3b:89:91:9d:86:91:36:39:c7:88:9a:4b:fc:e4:
                    99:e9:40:93:31:36:d4:75:51:12:40:cd:67:9f:83:
                    fe:04:00:b5:bb:3d:56:b2:75:de:6d:28:14:d3:07:
                    d4:2d:ef:22:8e:c9:3e:ed:d0:15:71:da:e4:a5:ac:
                    d6:40:c8:54:2c:77:ff:f3:32:d0:f9:24:db:4d:1b:
                    89:49:6b:f2:f8:48:2a:76:9b:27:98:98:02:1c:8b:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E0:DC:09:F5:0F:23:20:B1:54:B2:30:12:59:DA:19:F7:B8:B8:06
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:01:b1:10:72:a7:af:f4:24:ce:3b:d8:0f:c1:7e:a3:7d:
         f3:db:68:9a:de:a6:73:a1:2b:b0:8c:15:b8:53:8e:82:92:57:
         73:b8:fa:3f:6b:b9:27:ac:e9:27:47:c5:a8:ad:25:11:b3:3a:
         93:95:80:45:cc:bc:12:97:54:6f:62:24:06:50:b7:3a:be:9c:
         db:09:04:1b:b8:5f:90:11:bb:fb:da:01:1e:59:13:5c:8f:61:
         e8:13:ea:b0:c9:21:4c:10:2d:02:00:3f:2f:44:e7:cf:24:e6:
         38:fb:24:ae:c7:66:ad:e1:92:c7:a0:ce:eb:d1:34:83:66:11:
         f0:37:c2:e5:77:ce:a7:3c:70:1a:7f:be:04:7f:e9:52:f1:bc:
         21:e8:45:45:11:e0:ac:4f:a1:22:dd:d9:fe:d1:7f:31:8e:5f:
         53:fc:ec:e3:e6:b4:31:97:81:8f:de:28:34:39:e8:ce:e4:0a:
         f4:b9:5b:0e:57:73:83:7f:66:69:46:45:1d:bc:e5:3a:f4:f5:
         38:51:69:fd:69:f7:2d:fc:2e:a6:1a:5d:a0:ad:57:2b:b7:cb:
         b2:59:5e:15:43:df:21:2f:39:f2:78:69:a7:0a:7d:8b:77:f5:
         8e:0c:94:49:eb:17:c7:be:89:b1:41:0a:88:05:7a:66:48:01:
         f2:de:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:57:24 2024 by rpki-client on console-ams.rpki-client.org