Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File:                     B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier:          iR2aTgOGeKBUBB41tOqKp4gy+hd6l+RSTdti5yElFOc=
Subject key identifier:   05:E1:9F:06:83:17:4C:CE:21:01:2C:59:51:35:B5:5C:F8:0F:57:A7
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer:       /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial:       0190448B4BE7557CD89027EC456F75721CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number:          085D
Signing time:             Sun 23 Jun 2024 10:01:37 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:37 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:37 +0000
Files and hashes:         1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: Av7yifhxBvjeLMi5IlUXKNwrBtCN5Pv9lFQCV17h+I8=)
                          2: Wps5zB5HXSoh-aThSrhBkudXZQM.roa (hash: pXypMrh+Cp4Odo0DNRSbecVbraHkewSm/x9jEul+Juc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:4b:e7:55:7c:d8:90:27:ec:45:6f:75:72:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
        Validity
            Not Before: Jun 23 10:01:37 2024 GMT
            Not After : Jun 24 10:01:37 2024 GMT
        Subject: CN=05e19f0683174cce21012c595135b55cf80f57a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:fa:15:99:42:12:26:38:a7:26:3f:1d:e6:
                    82:ce:02:f7:ec:7c:24:9f:73:fd:b4:a2:46:cb:0f:
                    d9:99:39:a7:dc:d0:b2:1a:68:11:fe:f2:87:ed:3a:
                    34:e5:7e:b1:7c:17:87:30:2c:5a:f1:67:47:79:67:
                    d9:b1:91:96:f4:89:dd:a6:23:a5:e9:59:0f:88:e7:
                    19:62:38:81:29:ae:7f:f3:e0:37:f2:1b:79:b3:2c:
                    b9:d0:07:bd:66:8e:e9:1f:71:51:0c:4a:48:15:2c:
                    3f:3a:ae:f7:ba:98:81:16:a5:1a:76:5e:48:0d:79:
                    ba:39:a6:17:84:85:bf:24:74:c1:e2:62:b6:85:c6:
                    e3:b1:3f:f8:6d:f4:14:c1:42:8f:84:1d:f7:cb:bd:
                    b3:fb:f1:ce:40:dd:bf:25:61:57:ed:28:fd:76:1c:
                    97:89:29:8e:79:6c:87:4a:c7:89:85:be:e6:50:95:
                    84:f6:e3:a2:63:59:d9:b4:dd:a7:84:f1:9d:27:b0:
                    eb:dc:17:7d:97:9e:1f:b0:9e:74:ce:b4:ba:03:a2:
                    b1:c3:52:20:70:5c:4c:6a:0d:d0:0e:07:42:96:be:
                    74:22:bb:6c:0e:fb:56:db:2f:32:70:b2:a4:5f:df:
                    ad:ec:0b:bf:3f:79:62:c3:e7:17:03:05:cb:92:ba:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:9F:06:83:17:4C:CE:21:01:2C:59:51:35:B5:5C:F8:0F:57:A7
            X509v3 Authority Key Identifier:
                keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:6b:35:22:d0:b0:45:d3:11:af:e6:de:e4:ac:31:f4:a9:
         0b:eb:3e:e4:cc:d0:cb:c6:a0:36:64:57:2e:07:2e:fe:82:ab:
         72:83:36:7e:07:c8:9d:ce:d8:ce:77:74:a3:0f:3e:f2:9a:83:
         01:df:02:17:41:c3:ba:05:02:c8:94:67:3c:c2:70:01:dc:50:
         07:c9:f3:49:75:bb:ac:b1:ff:1d:bd:38:4c:6c:73:d4:40:a2:
         cc:61:b4:81:9c:15:22:c3:41:9c:13:42:35:87:5a:a7:3d:d7:
         93:a7:1d:05:bd:fa:cb:be:62:a0:d2:1a:59:2d:f4:e8:f0:b5:
         11:8a:35:6b:a5:21:f2:db:a6:80:cd:ff:cb:ba:39:87:02:23:
         a7:3b:58:b6:82:11:21:1f:d2:34:d7:d3:ae:72:fe:4b:34:4b:
         f3:92:f5:a7:6a:fd:4a:3a:d7:af:f8:e1:a5:bf:77:b8:17:66:
         b9:b1:d8:d2:4e:49:1c:a1:c7:9a:dd:97:09:66:8e:a5:9d:18:
         29:bb:36:b6:86:e9:1d:a7:51:3c:96:c5:f5:8a:72:11:c9:48:
         d9:8a:72:de:d2:17:17:2e:ac:e3:21:5c:bc:bf:61:12:a6:97:
         f3:49:08:fa:ab:25:40:f7:5b:61:af:f4:46:34:a4:a6:65:65:
         ba:8b:bf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi0vnVXzYkCfsRW91chyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2
MmMwNDMwHhcNMjQwNjIzMTAwMTM3WhcNMjQwNjI0MTAwMTM3WjAzMTEwLwYDVQQD
EygwNWUxOWYwNjgzMTc0Y2NlMjEwMTJjNTk1MTM1YjU1Y2Y4MGY1N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lH6FZlCEiY4pyY/HeaCzgL37Hwk
n3P9tKJGyw/ZmTmn3NCyGmgR/vKH7To05X6xfBeHMCxa8WdHeWfZsZGW9IndpiOl
6VkPiOcZYjiBKa5/8+A38ht5syy50Ae9Zo7pH3FRDEpIFSw/Oq73upiBFqUadl5I
DXm6OaYXhIW/JHTB4mK2hcbjsT/4bfQUwUKPhB33y72z+/HOQN2/JWFX7Sj9dhyX
iSmOeWyHSseJhb7mUJWE9uOiY1nZtN2nhPGdJ7Dr3Bd9l54fsJ50zrS6A6Kxw1Ig
cFxMag3QDgdClr50IrtsDvtW2y8ycLKkX9+t7Au/P3liw+cXAwXLkrqToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXhnwaDF0zOIQEsWVE1tVz4D1enMB8GA1UdIwQY
MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt
YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew
LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKlrNSLQ
sEXTEa/m3uSsMfSpC+s+5MzQy8agNmRXLgcu/oKrcoM2fgfInc7Yznd0ow8+8pqD
Ad8CF0HDugUCyJRnPMJwAdxQB8nzSXW7rLH/Hb04TGxz1ECizGG0gZwVIsNBnBNC
NYdapz3Xk6cdBb36y75ioNIaWS306PC1EYo1a6Uh8tumgM3/y7o5hwIjpztYtoIR
IR/SNNfTrnL+SzRL85L1p2r9SjrXr/jhpb93uBdmubHY0k5JHKHHmt2XCWaOpZ0Y
Kbs2tobpHadRPJbF9YpyEclI2Ypy3tIXFy6s4yFcvL9hEqaX80kI+qslQPdbYa/0
RjSkpmVluou/5g==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:31 2024 by rpki-client on console-ams.rpki-client.org