Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          EMw1BuPTNb5MrEryvRIzudEpA4DKj7x0vg3Q53x9z+M=
Subject key identifier:   43:6E:B0:BD:FA:BF:9A:21:2C:54:06:9D:9A:69:16:53:19:A3:42:5D
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       018F22DD8544F9D698C3EFF35A855B6CFC70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          1143
Signing time:             Sun 28 Apr 2024 04:01:33 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:33 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:33 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: YOEqVyxV43cKGaRrBjUzY1mf52IK9K6q4mqF7aE7xkM=)
                          2: nJk2bwqq285erhSbZyAiNCW75P4.roa (hash: 6FvwYLCzc7ZKDGFoWdTMvqYDGgO995kA/v69jjAiktE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:85:44:f9:d6:98:c3:ef:f3:5a:85:5b:6c:fc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Apr 28 04:01:33 2024 GMT
            Not After : Apr 29 04:01:33 2024 GMT
        Subject: CN=436eb0bdfabf9a212c54069d9a69165319a3425d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:49:34:92:66:24:d7:86:1a:51:ed:4b:81:
                    49:41:d2:de:25:42:8a:da:4d:39:0d:1c:47:9e:d4:
                    41:c0:b8:53:24:b5:d3:c9:e8:f4:08:5d:6d:9c:2d:
                    84:46:9b:77:14:46:ea:f1:c1:ac:9e:87:6b:67:f9:
                    0c:1d:a1:72:71:0f:7a:21:00:b2:2f:f3:82:9f:7c:
                    48:a9:7c:74:5c:9e:7d:72:d1:7c:28:22:7a:c1:02:
                    2e:c4:ef:72:78:f4:f5:30:06:d0:f9:bb:d8:f2:e6:
                    0e:09:99:3b:7d:46:a8:9c:e1:28:28:f5:37:c8:24:
                    b5:70:94:91:a6:fd:b4:39:d4:15:6f:d6:bc:66:1d:
                    27:23:63:3d:ae:13:e6:5c:71:ea:fa:c5:31:05:53:
                    b2:5d:b6:4d:f3:b2:00:e8:c6:9b:88:ec:3e:46:04:
                    6c:81:dd:51:15:05:84:54:ea:35:4a:e4:82:f4:7b:
                    b2:19:01:28:5c:b3:59:67:15:40:4a:99:05:9c:bf:
                    72:17:a3:2d:90:83:1d:f2:2f:b9:b5:50:14:56:4e:
                    d6:7c:a0:a6:75:0e:e1:87:db:a7:b0:91:a1:f0:75:
                    37:65:e9:ca:fe:de:a1:48:66:b8:cf:fe:f4:cc:c6:
                    87:18:57:30:5c:57:53:31:c2:c2:a3:fd:65:8d:83:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:B0:BD:FA:BF:9A:21:2C:54:06:9D:9A:69:16:53:19:A3:42:5D
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:c8:e6:ab:98:d4:7c:4e:7f:61:12:ca:4c:d7:35:7f:cf:
         64:4a:e6:55:7d:06:8c:0f:27:21:c4:ab:f1:d8:a8:58:ff:7f:
         e5:55:90:9b:80:86:69:2d:e9:b6:d1:f2:cb:94:a2:8a:77:89:
         96:e0:54:28:1e:dd:b0:16:e6:7f:8f:94:2b:a7:dd:0d:c3:02:
         ce:b9:bb:e8:8f:4b:98:81:cf:78:47:53:43:4d:3a:f0:6e:5c:
         7f:3d:eb:13:6d:e0:58:9b:e7:04:13:c8:2f:04:db:e2:46:18:
         89:e4:36:3e:b7:6f:bb:a4:96:81:81:02:13:be:d3:69:58:84:
         fe:1b:33:f7:93:cf:28:8f:26:e4:cb:30:4e:1c:20:24:08:08:
         30:72:b9:36:70:e2:bd:0d:45:70:02:98:22:6c:4f:d9:62:c4:
         1b:eb:39:25:ed:4b:f3:77:76:16:48:71:8a:93:c4:c9:77:2b:
         a3:9a:d9:1f:bd:30:d1:ff:57:4a:6a:af:3d:99:19:40:61:b8:
         57:0c:1b:31:23:2d:27:27:9a:33:f3:76:ba:65:01:3d:d2:6b:
         24:11:99:7c:0c:0e:be:5f:71:58:db:8f:c0:a9:3c:40:36:3e:
         71:87:cb:8f:21:07:15:e9:28:9c:c9:87:68:94:e2:81:35:cd:
         63:e1:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:37:24 2024 by rpki-client on console-ams.rpki-client.org