Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File:                     B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier:          iuQ7ZNbFkcDPdLHCrLQiZr4pv73pBmgjM9p5okxt4YY=
Subject key identifier:   E7:DC:29:8A:6A:9D:CA:EA:83:C1:39:88:9C:AF:65:A7:49:D0:CD:94
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       018F8F700938CAD2A0371ED0ECDD35451AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number:          07E1
Signing time:             Sun 19 May 2024 06:00:35 +0000
Manifest this update:     Sun 19 May 2024 06:00:35 +0000
Manifest next update:     Mon 20 May 2024 06:00:35 +0000
Files and hashes:         1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: CdwGdGntfBmWgh5H+/8I+qyB1/fE+F7eW4MCKPaf8jk=)
                          2: eGKl9XQcRZgU6Zsmq9gulruGNas.roa (hash: ahkNFwKUPByD+Hv15O6XZQXHqfi6F25Qu/PPOEGGESc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:70:09:38:ca:d2:a0:37:1e:d0:ec:dd:35:45:1a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: May 19 06:00:35 2024 GMT
            Not After : May 20 06:00:35 2024 GMT
        Subject: CN=e7dc298a6a9dcaea83c139889caf65a749d0cd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:a9:6f:ed:56:40:61:97:8e:bc:03:f9:97:
                    3f:0b:94:36:68:1a:59:6c:ec:2f:cd:a3:e4:67:47:
                    6e:1f:a1:d0:2c:c9:78:93:41:9c:6c:52:ae:0d:eb:
                    72:91:b2:08:cd:ed:8c:21:23:a6:c4:7a:6a:c1:79:
                    09:c8:b6:ae:1e:21:b3:51:5c:6d:fb:0b:5a:d2:a8:
                    d7:cb:cb:57:94:22:76:dd:6a:62:17:f1:01:af:90:
                    5b:9c:4c:8b:0d:a5:aa:96:cf:aa:87:35:a9:ce:fa:
                    ca:7e:ca:50:5b:22:70:0f:8b:c3:c1:64:ab:38:94:
                    00:7c:b6:dd:8b:54:ab:57:af:e9:cf:03:b9:99:0c:
                    9a:bf:83:b4:a1:82:df:e2:33:2b:fa:8d:f0:88:e7:
                    13:db:05:fc:5c:ca:a5:a5:ed:05:15:2d:42:16:f2:
                    47:56:cd:46:d2:1e:73:d2:82:cd:08:3e:41:e2:68:
                    d8:1b:53:a2:10:5d:3a:ae:4f:a9:e9:a2:11:16:43:
                    a4:00:e8:04:eb:c5:9b:15:b1:70:95:d6:9c:1c:aa:
                    64:31:3b:5a:93:59:d1:48:89:b0:85:9e:44:0b:3f:
                    dc:11:69:13:d6:7b:ba:fc:0d:9b:2b:38:d5:14:11:
                    fd:bf:58:ce:1b:9f:37:10:94:23:5d:81:65:27:ff:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:29:8A:6A:9D:CA:EA:83:C1:39:88:9C:AF:65:A7:49:D0:CD:94
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:47:80:07:22:e6:88:7f:61:c0:5e:ce:21:c2:5f:73:65:
         98:55:c1:93:1c:3b:fc:d7:a5:0a:04:c7:ac:e3:09:16:09:88:
         e1:40:71:a7:f7:fd:4f:d1:18:b5:15:6d:c2:44:ef:83:2b:41:
         a5:da:f0:56:7b:9a:be:80:b4:c4:4a:42:c4:aa:f1:77:93:fb:
         11:69:20:2b:b8:32:f1:1b:90:c3:e3:3d:e4:3d:74:79:b6:a8:
         0d:80:46:d7:c0:56:63:46:53:14:1e:31:92:93:1e:df:66:3b:
         8a:00:40:9a:cb:76:19:e4:d6:b3:ed:ee:40:5a:d0:1e:72:58:
         57:15:62:10:89:f3:ce:46:f6:b3:83:11:07:16:fa:70:92:59:
         b0:8f:9d:09:f5:73:b1:02:63:fc:20:7e:92:60:da:ed:e2:8e:
         83:5d:ec:82:d6:01:9f:57:e5:40:77:73:08:b6:f7:07:45:8b:
         0f:fe:4e:fa:35:cb:4a:b6:14:7b:83:e5:a8:4f:07:b1:e7:23:
         04:10:79:ed:a9:43:9a:ca:ef:fb:ea:44:80:be:e7:b4:de:4f:
         b0:0b:19:31:fa:33:db:c3:26:b5:4b:9a:92:2c:7d:2f:87:a0:
         94:e8:20:0d:95:4b:ba:d3:0c:4a:c4:87:85:7f:9a:b2:a6:c3:
         03:59:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:46:49 2024 by rpki-client on console-fra.rpki-client.org