Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          LjPHZbQhzQvzkh1Ze2CbNGnq6CdYzKGebQVKmLUjLDw=
Subject key identifier:   53:56:A8:1F:4D:0D:8F:6F:2C:B8:10:E1:A6:7B:5F:B2:B2:41:99:75
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       01901DEC24EF5A508920DD86D4FB48D961FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: hG/ZNiLuswpgWC2MaO7jvHsj9SVKBs6wewnVQ24moh4=)
                          2: nJk2bwqq285erhSbZyAiNCW75P4.roa (hash: 6FvwYLCzc7ZKDGFoWdTMvqYDGgO995kA/v69jjAiktE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:24:ef:5a:50:89:20:dd:86:d4:fb:48:d9:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=5356a81f4d0d8f6f2cb810e1a67b5fb2b2419975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:a0:f6:61:b3:9c:f2:28:6e:58:22:17:c9:
                    e7:f2:a2:8a:6c:b6:65:38:12:d3:ea:5a:1c:f4:80:
                    6a:a9:39:ed:b6:54:4b:78:aa:9e:39:db:94:6c:8f:
                    4a:7e:c2:7a:d5:c6:00:28:58:c8:3a:c5:48:11:fa:
                    72:9a:67:62:bd:60:b2:a5:ed:ce:60:ff:f0:2e:2a:
                    55:a7:ee:cc:79:98:60:2a:6b:74:86:19:8e:85:ac:
                    1d:09:45:d4:e8:f3:6b:1d:ca:0e:ba:36:28:ec:f2:
                    b9:63:f8:f0:52:e5:6d:2e:bf:ab:56:33:c8:51:2a:
                    d0:b5:8f:75:85:16:4d:c5:ac:2a:1d:5c:19:cd:39:
                    ca:8e:ac:1f:d4:95:de:20:a5:94:a1:0d:d1:55:5a:
                    39:76:9a:79:d3:27:8f:79:62:90:5b:9c:95:37:7c:
                    2d:de:55:c5:af:3b:ce:c2:8a:12:f1:cb:ce:7c:e3:
                    6f:e2:73:a9:41:eb:85:d9:ac:fe:8a:da:b3:97:e6:
                    2a:b6:28:b3:f6:17:42:eb:8b:92:21:c7:d3:be:0e:
                    c4:b4:c8:be:ca:96:d3:8d:88:7c:5f:f1:da:61:7f:
                    62:eb:bc:b8:aa:25:e7:d1:f2:14:f4:b8:c8:56:f3:
                    7b:11:ec:d2:e8:61:1b:bf:28:c1:9f:a9:66:28:ea:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:A8:1F:4D:0D:8F:6F:2C:B8:10:E1:A6:7B:5F:B2:B2:41:99:75
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:2a:27:9a:6a:c9:b3:a6:42:31:56:dc:7f:bc:dd:29:27:
         ac:aa:7f:7d:b1:5b:6a:1f:60:6f:08:46:5e:5a:35:93:ae:22:
         6a:bb:42:70:be:a6:90:d1:05:3c:2e:b0:b7:7f:78:0a:63:e5:
         0c:66:9b:0a:ed:2c:6c:51:f0:f4:08:3b:0e:91:7f:12:aa:63:
         e2:83:91:52:5c:45:d1:77:3c:8a:a4:43:2f:ae:5a:fa:4f:e4:
         d6:10:5f:28:98:1c:7a:28:e5:34:22:f1:8e:08:a6:63:c0:76:
         f3:6c:4e:6b:40:ef:98:f1:a0:65:66:68:8a:58:28:b5:17:e8:
         95:ff:40:5c:a3:c6:cc:7d:7b:41:ef:b5:5a:ae:7f:da:77:d1:
         17:83:21:91:ca:ed:b4:0b:4a:f7:60:7b:14:f1:14:cc:15:ef:
         fd:c2:b3:09:58:22:f6:43:4f:06:85:68:9c:17:5a:41:38:75:
         e8:c5:d1:11:7d:e2:42:04:f8:ef:9b:0a:ef:ef:a2:ce:09:8f:
         5f:12:11:f8:54:ae:e9:2e:a7:63:de:5b:f9:8f:8f:e8:6a:d0:
         af:98:2e:4c:04:93:aa:ea:cc:83:ac:f4:16:51:15:d6:ea:63:
         56:f0:90:3a:73:1d:0b:1a:bb:99:4b:cb:e4:f8:5a:94:af:7f:
         e2:5c:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:33:05 2024 by rpki-client on console-ams.rpki-client.org