Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          jw1zHUqqlJC7Sg0SQFkfHPhassX/g9kTidUuC5EOm1c=
Subject key identifier:   BD:9F:AC:C1:CD:8C:27:54:8F:4E:BF:2D:B7:3F:BF:F8:F1:39:67:08
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       018F8749EADD1468E1CDA5820951332D7072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1145
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: IAvzKw60vtm0vuuFrXAYGfGynoU.roa (hash: Yf0VPpvEXUex/brZhZa0DSQ43+/El1hPq0tFajWjdnY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: 1zuWYHFLwdmKiLrGpzbFW1b2ITMomo2Mld3v3/fdaiI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ea:dd:14:68:e1:cd:a5:82:09:51:33:2d:70:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=bd9facc1cd8c27548f4ebf2db73fbff8f1396708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:ef:7e:69:3c:d1:2f:d8:38:cf:3d:1d:56:
                    d2:95:c8:42:19:fb:0a:70:c8:e3:98:59:fa:e2:0f:
                    60:5f:b3:9f:87:a3:a8:45:36:0d:89:b6:d0:e9:bd:
                    ca:3a:09:5b:01:bc:9b:2f:3d:9c:ed:d3:53:38:22:
                    c9:7f:bf:ee:0b:7e:01:1a:ad:47:e3:4a:d8:08:2d:
                    93:f9:36:8f:c4:c3:28:9e:22:07:a6:ff:36:32:13:
                    ae:a5:bd:17:df:0d:66:bf:b1:ec:16:a5:ca:38:f2:
                    28:db:2c:96:3d:b0:cb:77:88:7c:5d:2b:68:2e:86:
                    ef:71:0c:3e:fa:27:6a:b2:f0:eb:9a:37:fd:3e:05:
                    aa:47:34:88:29:15:21:3c:9e:61:a2:8b:2c:f2:62:
                    60:d1:ce:18:33:19:9e:b6:2f:03:e0:32:3c:8a:a2:
                    0c:ff:72:22:00:8e:01:f3:98:2b:be:f5:36:2d:f1:
                    4a:1a:8b:0f:c3:a7:3d:70:2d:1b:f3:b2:20:c3:e9:
                    bb:bb:bc:18:db:fa:94:ee:8a:10:50:03:13:08:b2:
                    c8:c4:87:51:96:d4:0e:04:d0:e2:02:56:4c:3c:7f:
                    cd:9b:50:1c:45:7f:70:54:b8:79:25:11:46:eb:1d:
                    46:58:f5:0a:12:5d:51:1e:30:6d:2e:90:03:82:74:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9F:AC:C1:CD:8C:27:54:8F:4E:BF:2D:B7:3F:BF:F8:F1:39:67:08
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:ee:11:91:19:95:6f:11:f2:ae:1b:ce:81:fa:be:e7:80:
         4e:d7:8a:cd:55:1c:60:77:8d:01:59:ce:f7:83:b9:53:6e:f1:
         53:fc:d8:bc:d2:50:c7:8b:09:1b:44:7b:40:fe:87:51:3d:a3:
         97:1a:64:f5:28:80:1b:3b:c9:e2:c9:1e:5b:f3:28:ce:de:ef:
         a8:ef:bf:e7:7f:63:fd:21:67:4f:d6:e0:55:aa:62:fa:5d:8a:
         91:66:76:3c:23:ae:33:ed:81:d2:1c:89:eb:f8:b9:58:43:49:
         1e:bd:bf:f5:25:b2:ea:17:45:b8:28:70:8f:05:b5:da:2c:ea:
         20:96:e3:aa:98:22:25:2d:6f:d7:66:3e:bd:bc:34:38:cc:e6:
         d5:d7:99:b2:f5:78:c7:e4:8f:45:78:70:47:05:98:92:44:13:
         4e:bd:73:a9:61:9f:0a:f0:e1:70:cb:fc:ca:79:90:fc:2f:15:
         9b:77:d5:ce:cd:7d:16:2f:6e:ad:2f:a8:85:76:7d:53:33:84:
         22:28:fa:e7:5c:60:71:71:36:5c:3f:51:70:68:55:45:8d:7b:
         83:96:d2:b0:d0:e6:06:34:61:64:34:87:26:f9:b6:53:b1:8e:
         74:c2:63:00:d7:cb:5f:45:d0:82:49:bd:54:84:fe:23:d5:59:
         2a:2e:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:12 2024 by rpki-client on console-fra.rpki-client.org