Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File:                     BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier:          QvZ77M8VYER+zRCHabHOuyXEQy+n7xNzSwmWu8SnK0s=
Subject key identifier:   FB:D7:C0:36:98:84:9E:38:6C:8B:AA:A3:A0:4C:65:1E:B1:A7:00:31
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer:       /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial:       018F34E3D49C01AF02AD28F8B31B80B5387F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number:          114D
Signing time:             Wed 01 May 2024 16:01:37 +0000
Manifest this update:     Wed 01 May 2024 16:01:37 +0000
Manifest next update:     Thu 02 May 2024 16:01:37 +0000
Files and hashes:         1: 7WJVTfeZTk2qg-T-IV1BuWvfjhs.roa (hash: Vy8PSyf8Q30yJuzTBFiXeSX+IvCVR+BSVQFELl6wfMs=)
                          2: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: 77OQTzXXVGbIksJ7IB9EENcMJxGL5/s94cI0ImqZPzs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:e3:d4:9c:01:af:02:ad:28:f8:b3:1b:80:b5:38:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
        Validity
            Not Before: May  1 16:01:37 2024 GMT
            Not After : May  2 16:01:37 2024 GMT
        Subject: CN=fbd7c03698849e386c8baaa3a04c651eb1a70031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:8f:87:2c:8a:e4:76:90:e7:23:18:00:5e:
                    f2:84:4e:5c:fe:fe:48:6e:61:a5:1e:10:50:c4:53:
                    c8:aa:19:f9:10:82:49:96:dd:b3:95:79:a3:6d:15:
                    ec:88:6c:40:dd:2a:78:a3:40:6e:ec:73:6e:fc:38:
                    61:4f:ae:92:18:7d:26:b6:fe:c0:5d:f1:64:77:f1:
                    a8:94:ca:e0:d3:7d:ff:85:9c:c2:f5:c1:d5:26:8d:
                    80:9c:c5:48:21:2d:6f:99:47:2a:24:25:ce:e1:19:
                    2e:09:69:77:eb:d8:f5:4d:35:c4:b5:f4:92:98:45:
                    5f:18:46:4c:7a:80:2c:d7:29:ee:50:4a:68:0f:c0:
                    70:04:74:80:30:69:42:36:ba:e3:ca:ea:77:10:18:
                    69:46:2b:52:a3:f7:15:a5:17:38:bf:ad:90:a1:92:
                    23:97:93:4d:b1:25:90:36:8b:1e:9c:fb:ef:69:f4:
                    22:97:7a:cd:f0:fc:40:f7:f8:e6:09:59:ce:cb:a7:
                    0a:79:ee:8b:38:9f:19:aa:1a:71:a1:86:2a:7d:69:
                    99:fa:33:89:c8:30:34:53:87:53:64:86:e5:62:81:
                    c8:2a:00:d0:be:3a:d7:b1:db:86:0c:ed:24:f9:19:
                    be:af:83:b2:a3:0e:c4:1c:ba:21:5d:e6:17:29:6e:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:C0:36:98:84:9E:38:6C:8B:AA:A3:A0:4C:65:1E:B1:A7:00:31
            X509v3 Authority Key Identifier:
                keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:8d:33:81:b4:cf:ef:98:f3:4b:2c:61:09:52:fe:73:07:
         5d:6d:db:c7:6a:36:aa:a4:a3:8f:56:2a:23:79:b8:3a:4c:cc:
         65:44:2f:80:bf:1f:5b:f6:aa:30:d5:a3:2a:a3:12:3b:cf:3d:
         46:b5:ef:13:cf:9a:61:9d:6a:cc:a0:7d:95:ce:2f:64:88:75:
         53:e5:d6:29:cd:5f:64:2e:f3:8b:f8:d1:28:ec:97:9b:5e:83:
         c8:f0:63:80:b2:60:13:ef:6c:9e:ee:15:be:5a:5b:79:42:62:
         dc:87:2b:88:7c:be:d8:f9:5f:1e:2a:a4:ba:4b:55:2d:23:94:
         ec:09:0d:b0:ae:c2:93:3b:d9:db:22:fc:e0:ae:28:03:59:fa:
         b2:41:d5:7e:87:40:a0:85:36:d8:f6:80:9d:e3:d6:95:b1:43:
         83:51:68:c3:26:7c:74:7d:9f:12:7b:1b:5b:6b:fa:b1:1f:65:
         43:9f:a8:e0:f5:89:ed:6e:73:70:88:72:d3:37:88:f0:bd:5f:
         54:f8:b1:b2:73:74:42:9c:78:00:ee:d1:f7:d0:7a:16:fe:d4:
         97:5a:6a:bc:6e:91:de:d1:f0:30:4d:61:72:f6:87:9b:1d:79:
         80:a8:ec:17:74:0a:8b:7c:ef:4c:75:31:1b:e8:50:8e:06:79:
         56:23:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:29:54 2024 by rpki-client on console-fra.rpki-client.org