Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          5USDDJM6f/LR8pjXMsLcTYoTbXKD1QHUXog//rF4tls=
Subject key identifier:   C6:F3:8E:89:F2:75:B2:1A:64:2F:52:35:83:01:AE:E3:B4:E0:1D:88
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       018F46B29011F3D2044F46D2746AF5E360E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 03:00:58 +0000
Manifest this update:     Sun 05 May 2024 03:00:58 +0000
Manifest next update:     Mon 06 May 2024 03:00:58 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: q9/di8d2lMKgDFKhoe8crCZvCdz9S8ykqd5+QMVHHdk=)
                          2: e91100DKzfvWNJ0tMjpnZk7XODQ.roa (hash: vmNC4Vsd6UBZRWcsmFbPrLWEaHaIOXa33LsIR7f/7Kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:90:11:f3:d2:04:4f:46:d2:74:6a:f5:e3:60:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: May  5 03:00:58 2024 GMT
            Not After : May  6 03:00:58 2024 GMT
        Subject: CN=c6f38e89f275b21a642f52358301aee3b4e01d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:35:10:8b:e9:fc:d2:5d:14:f7:6e:35:04:
                    5c:e7:b8:da:f9:15:d8:04:4e:6b:19:a6:d1:e4:ef:
                    77:57:29:43:0b:29:ce:bf:b7:12:35:6b:34:84:ce:
                    06:d5:e2:c6:9e:c7:7c:14:25:89:cd:a5:12:e0:2b:
                    64:49:25:7b:90:f5:82:f9:26:18:6d:bc:f1:14:da:
                    41:bc:1d:20:cc:b9:c6:33:2b:2a:91:a6:6a:0b:cc:
                    f9:49:63:cf:a2:35:2e:b1:41:e4:5e:f3:04:22:83:
                    3e:86:3e:35:fe:3f:15:f9:d8:2b:5a:75:fd:7c:4e:
                    63:23:da:ca:c9:73:8d:89:68:24:bf:d5:1d:5b:f1:
                    bb:9c:fa:74:93:2e:10:8c:a9:0e:bd:0a:f8:38:72:
                    ea:4a:c5:a6:c4:a7:36:e3:5b:0a:44:a3:4f:1a:ca:
                    2e:18:11:e5:67:96:25:1f:32:e9:70:70:7a:ca:6c:
                    e8:5a:53:67:0e:84:56:d7:6e:0f:0a:ae:f7:19:ca:
                    4b:db:f6:92:bb:f9:14:23:d9:7d:35:fa:44:3f:a7:
                    b7:9f:10:95:42:0f:44:2a:59:62:1a:1d:3a:73:ba:
                    8a:df:07:bf:d1:6a:51:f9:c0:d1:3b:3a:bd:62:7b:
                    d5:61:e8:40:e0:5c:b8:cf:1b:56:f2:22:4a:60:ec:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:8E:89:F2:75:B2:1A:64:2F:52:35:83:01:AE:E3:B4:E0:1D:88
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f2:e4:01:4a:16:28:7a:14:52:58:1a:a6:9a:a3:55:f3:e1:
         a0:8e:5c:89:ad:8a:30:78:e0:c6:6b:32:9c:74:b0:d7:5d:fa:
         5c:d0:87:e8:5a:8d:5e:1c:77:31:d7:b7:05:c3:90:a3:ea:24:
         e1:82:2e:02:7c:89:86:12:34:b2:70:16:c6:85:e1:78:1c:21:
         64:86:1a:53:97:6b:ef:b7:30:a0:30:8d:9d:25:0e:28:04:e5:
         32:18:b2:45:1b:4d:1b:01:f1:0b:30:04:83:21:c3:52:bb:18:
         be:01:7e:a6:d8:1f:90:9d:f1:78:07:19:ee:7d:46:b7:c5:ae:
         95:ec:4a:c5:d4:5c:d9:cb:e3:e5:9b:cb:27:5f:a0:cf:74:1e:
         32:67:70:2b:7b:12:e1:fb:94:d3:3b:76:25:ed:52:55:0b:7c:
         f1:d1:ac:2d:87:16:49:08:9e:8f:1c:4b:3f:f1:fd:ac:3b:13:
         eb:72:86:14:b1:fb:65:b1:76:ed:02:fd:24:28:0e:e7:fe:6a:
         cf:6a:d0:a3:84:41:16:c3:0d:f4:30:54:37:3c:03:16:a2:2a:
         47:ec:3c:51:9c:98:b0:d5:d7:50:9d:6f:65:b6:14:22:f0:be:
         62:9d:35:67:af:c8:f1:86:fe:fd:b6:de:c0:e7:98:c1:2e:c1:
         cf:44:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:53:35 2024 by rpki-client on console-ams.rpki-client.org