Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File:                     B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier:          H92wSzY8ZkImYGhGbQgK/q/z5QVFP1l5q6ncJda1mok=
Subject key identifier:   C7:FE:FE:B5:0D:58:18:BB:46:DB:88:64:94:CE:AD:D8:B3:8B:58:EB
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer:       /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial:       01901DEBCE5E86AF0B9D1A2FDBA74F1A3CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number:          0849
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: pvMZ+RdUvYEhHVyPyqWCpv355zWcMy2nHEI0rH6IdVE=)
                          2: Wps5zB5HXSoh-aThSrhBkudXZQM.roa (hash: pXypMrh+Cp4Odo0DNRSbecVbraHkewSm/x9jEul+Juc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:ce:5e:86:af:0b:9d:1a:2f:db:a7:4f:1a:3c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=c7fefeb50d5818bb46db886494ceadd8b38b58eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:a1:49:45:25:0a:69:50:c0:95:80:79:9a:
                    59:31:4a:7e:6e:6b:76:0b:33:d3:d0:5b:60:a8:b7:
                    a4:3f:1b:6c:24:dd:50:35:0e:dd:25:a0:06:a0:38:
                    a7:24:d2:2d:b7:96:5c:0f:e1:dc:15:db:22:f9:a8:
                    7d:21:c3:ec:8a:ea:27:5b:4c:28:75:94:4c:02:de:
                    96:e5:b5:bc:01:5a:e3:11:f9:46:51:6f:5f:27:22:
                    a6:73:8f:9d:a8:44:d8:c7:df:55:5d:db:80:b6:16:
                    93:66:1c:32:71:f9:58:f4:f9:67:91:09:83:d6:9d:
                    22:96:28:e3:e2:1d:0f:51:d8:70:9d:55:ac:39:75:
                    f3:14:0b:95:93:0f:f4:78:70:42:3e:55:26:99:c3:
                    30:83:d0:17:eb:fd:2e:24:7d:3c:6e:18:a5:9c:9b:
                    45:0e:18:67:ef:10:20:e5:a1:4e:34:63:d5:a3:e0:
                    e8:7e:74:31:38:94:fa:8d:fc:76:f4:63:8f:b2:89:
                    fb:ac:b6:13:ab:9d:c3:93:0b:be:2b:2e:b5:33:e0:
                    13:0a:d2:5b:c8:d5:ec:61:34:ee:f4:16:54:65:16:
                    67:8a:39:9c:85:ba:21:6c:89:1c:9a:fa:17:f7:df:
                    75:6a:bc:f3:dc:f7:a9:76:67:48:c4:48:36:f0:64:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FE:FE:B5:0D:58:18:BB:46:DB:88:64:94:CE:AD:D8:B3:8B:58:EB
            X509v3 Authority Key Identifier:
                keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:e2:3e:56:76:4e:f4:9f:d8:9e:cc:4d:c2:33:39:63:67:
         ad:2f:50:80:c6:99:93:fe:54:e6:b5:40:d4:5c:ce:0f:05:00:
         62:83:fb:02:fc:15:b0:b9:ab:da:21:0d:35:cd:51:47:84:e1:
         fb:23:7c:06:93:e2:ce:3b:a1:f5:a5:12:39:7a:9c:3c:23:80:
         08:4d:03:f0:66:7b:24:99:03:ba:03:27:22:6c:41:82:93:aa:
         16:65:5e:e7:95:a2:c9:11:00:6f:de:21:52:d9:01:7c:63:88:
         b5:5c:1a:31:75:5b:5b:e3:14:ef:e8:bf:ef:9e:19:01:2c:88:
         64:07:b5:2b:23:f9:65:6c:c9:df:5b:c4:20:79:1e:b5:6a:a4:
         3a:2f:e7:72:c9:ba:27:c7:20:ec:e0:32:7c:26:39:77:e2:41:
         ef:58:75:27:1f:e7:38:cb:67:a2:8d:95:d2:15:5f:6a:b6:31:
         0e:04:0a:fc:59:16:90:e8:d2:79:3d:6b:a0:dd:73:11:44:83:
         75:f1:7b:a1:eb:6d:08:58:e0:e8:e3:d2:6b:e5:00:ac:8d:ad:
         9c:57:4b:07:ad:03:e7:f1:3c:31:e3:fb:f5:16:c3:e0:19:b6:
         35:77:12:23:5c:ee:61:31:3b:8e:13:e3:cd:40:42:5e:05:69:
         72:63:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:29 2024 by rpki-client on console-fra.rpki-client.org