Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          G0PmJKD/WsxYeX2HIcUgE5rb7ml6RtO3jLinobXbwsM=
Subject key identifier:   0E:A1:B3:72:1C:C6:17:D3:F9:38:30:D5:1B:05:15:CA:CB:1D:FC:93
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       018F847E42DAD5AD407C7BBA7BE699C32509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          0D95
Signing time:             Fri 17 May 2024 03:00:18 +0000
Manifest this update:     Fri 17 May 2024 03:00:18 +0000
Manifest next update:     Sat 18 May 2024 03:00:18 +0000
Files and hashes:         1: 5xyMZ6CVQu92HGQmddxdhmaw9VQ.roa (hash: ySWQPdfPPyrjTvIA8UMRfuq2O2NgxoDW0qbHrIVa92k=)
                          2: 69sRGrf1eKIuqbxJPKmIq8nl_3A.roa (hash: NdHPWAUQ3whH/aSg4roIAiS1Ms//6kEtxmH68PHAHvc=)
                          3: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: w5NdViZqzcH621H4PFbaM0/ROh7hmpfciQ6ZrgGjXoo=)
                          4: av5MSDY5iSrv7TwlZZF1JwJ4p10.roa (hash: h7DmU0E7b2NmTbVlaMOnlHskDV1UFg/7beenphi6PkU=)
                          5: qfxvedgG9P_3nghUIKFxrBhZg3s.roa (hash: oFR8742y/pdJyYE4uLmrYv3JNxZO2gzKDtL041ot2t4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:42:da:d5:ad:40:7c:7b:ba:7b:e6:99:c3:25:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: May 17 03:00:18 2024 GMT
            Not After : May 18 03:00:18 2024 GMT
        Subject: CN=0ea1b3721cc617d3f93830d51b0515cacb1dfc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:30:8c:c7:2c:98:b5:36:09:5b:2c:bf:da:
                    5a:72:b0:91:3f:31:72:3c:18:8d:d7:87:21:e1:9e:
                    19:34:2a:c4:01:7f:73:36:f0:1d:90:35:65:28:41:
                    ca:cd:19:7a:31:ba:1e:ec:1a:7d:8c:ad:e1:55:3d:
                    6e:82:7f:12:c4:a6:99:bc:88:12:1c:d9:87:c2:02:
                    35:0d:64:0b:6d:db:77:e9:b8:56:03:e3:f7:07:33:
                    17:9f:81:64:b2:57:53:d7:7c:86:bb:ee:46:4b:18:
                    99:95:2d:94:e4:2a:6d:40:87:9d:d9:2d:b7:cc:94:
                    56:b6:45:e0:a3:d5:72:5d:f9:6d:d2:69:43:e0:11:
                    10:34:8a:3f:44:22:23:d5:64:d5:4f:c1:cb:fb:76:
                    22:75:77:ec:49:8d:4e:81:b0:af:b2:75:bc:d7:a4:
                    de:d7:f5:8f:b1:90:65:d8:50:4c:e1:26:63:59:17:
                    99:d4:e2:87:a3:f7:61:01:35:b2:78:9c:d2:51:4e:
                    50:35:f3:9e:69:4a:4a:0f:0e:97:2a:2a:b5:f7:5f:
                    ee:5f:f9:02:30:d9:23:e2:ff:ee:25:b5:26:99:fe:
                    12:41:54:fa:00:dd:b5:26:65:8c:57:a4:ad:ba:0d:
                    5d:61:9d:37:72:00:7e:f9:f4:ce:9f:62:ea:b0:4f:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:B3:72:1C:C6:17:D3:F9:38:30:D5:1B:05:15:CA:CB:1D:FC:93
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:95:dd:8b:b8:5f:28:c3:24:b1:5c:6b:4c:d1:c3:05:8a:
         b8:ed:99:15:8d:3e:26:d2:95:83:b5:d8:22:83:15:cf:40:b6:
         a1:c2:1e:d7:a8:59:88:fd:ce:94:39:76:98:43:0d:c1:2a:8a:
         c5:de:51:38:95:7b:d3:fe:ed:d9:6a:ad:34:93:6a:0a:42:ed:
         fb:79:c2:ab:ad:ed:7c:62:fd:66:88:cf:f1:7d:ad:5c:da:3b:
         7f:ba:b1:4e:c7:a4:3d:92:fc:cf:ab:54:ab:16:5f:05:d5:3e:
         dc:e1:e0:31:7b:b5:44:bc:ff:26:d7:7d:25:b2:af:61:70:9f:
         dd:fb:78:3f:82:21:67:6e:ef:22:06:54:dd:83:14:a2:9f:8a:
         06:cf:93:96:c9:8a:67:8e:2d:72:6a:cc:d4:a8:45:a5:90:d8:
         6c:0f:f9:ae:d1:78:0a:a4:4d:f0:cf:58:14:61:81:42:6c:11:
         24:1e:10:c9:e3:3d:72:ae:33:9b:07:cf:ac:60:4f:8f:45:ab:
         c1:bd:dc:aa:a2:36:36:c0:cb:9b:74:8d:0b:e8:18:05:0f:dc:
         12:0c:1f:85:4a:42:4c:b3:93:c8:74:dd:96:78:50:9d:fc:04:
         be:94:cf:c4:d3:e8:67:3c:50:dd:a8:c4:81:eb:e1:b7:43:53:
         11:9d:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:29:14 2024 by rpki-client on console-fra.rpki-client.org