Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          asyYpT9hXcXVzmrB3aHtBsqP/yp/X+ybZ4m+Y/c6Cc8=
Subject key identifier:   8E:E2:7C:BD:62:FA:71:E6:CA:5E:26:E1:51:3C:A1:54:59:85:2C:6F
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       018F40E7B075A043DAE5568889F2972B746A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          0D72
Signing time:             Sat 04 May 2024 00:01:16 +0000
Manifest this update:     Sat 04 May 2024 00:01:16 +0000
Manifest next update:     Sun 05 May 2024 00:01:16 +0000
Files and hashes:         1: 5xyMZ6CVQu92HGQmddxdhmaw9VQ.roa (hash: ySWQPdfPPyrjTvIA8UMRfuq2O2NgxoDW0qbHrIVa92k=)
                          2: 69sRGrf1eKIuqbxJPKmIq8nl_3A.roa (hash: NdHPWAUQ3whH/aSg4roIAiS1Ms//6kEtxmH68PHAHvc=)
                          3: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: lANMjuathAD35Kgm9ECem0oIe59tFy1aKhg0GvXrX1U=)
                          4: av5MSDY5iSrv7TwlZZF1JwJ4p10.roa (hash: h7DmU0E7b2NmTbVlaMOnlHskDV1UFg/7beenphi6PkU=)
                          5: qfxvedgG9P_3nghUIKFxrBhZg3s.roa (hash: oFR8742y/pdJyYE4uLmrYv3JNxZO2gzKDtL041ot2t4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:b0:75:a0:43:da:e5:56:88:89:f2:97:2b:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: May  4 00:01:16 2024 GMT
            Not After : May  5 00:01:16 2024 GMT
        Subject: CN=8ee27cbd62fa71e6ca5e26e1513ca15459852c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:73:7d:10:67:e5:90:77:d2:bd:61:05:ab:
                    a4:53:f3:bd:07:91:7f:97:ff:77:cd:21:3f:dc:8c:
                    20:39:46:7f:1a:9b:6c:27:d9:d2:05:a7:e8:22:cd:
                    66:ca:cd:f6:af:b9:1b:6c:9e:46:dd:4a:b9:fb:38:
                    44:95:f2:97:b0:29:26:e5:ba:33:a7:c2:6f:5b:af:
                    6b:e1:60:f4:9c:5d:73:dc:eb:99:e6:4a:14:ca:b3:
                    df:38:ef:4d:d5:ef:da:40:07:df:7f:74:a7:d0:4c:
                    07:ff:17:67:e4:4a:a4:c5:da:78:4f:f4:34:44:98:
                    8f:88:4f:d3:02:e5:e2:79:82:27:b9:34:14:da:43:
                    d7:96:56:c5:f6:9a:a1:9f:33:c0:dd:ce:9e:44:db:
                    d5:87:46:0d:94:4d:00:13:d0:41:05:73:a3:8e:a3:
                    e6:87:d7:86:c0:94:37:64:7a:c9:4b:2d:fb:08:c9:
                    67:2d:fd:87:20:53:d6:a5:d5:02:a2:98:99:7e:79:
                    89:71:49:70:c4:bc:53:59:8f:b2:94:86:32:b5:b6:
                    c9:b8:8f:13:4c:72:54:c3:8d:30:ef:19:6d:64:be:
                    93:5c:97:33:9f:ff:c4:40:2a:8a:d5:d8:8d:60:b4:
                    93:04:02:7e:a6:a6:1a:dc:0a:3d:6c:b6:b9:ad:da:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E2:7C:BD:62:FA:71:E6:CA:5E:26:E1:51:3C:A1:54:59:85:2C:6F
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:be:75:8f:14:ae:fd:c0:52:05:88:64:ab:ef:83:17:26:28:
         bc:c0:37:3f:51:ed:00:1a:60:11:5d:be:74:c0:ae:3e:2e:51:
         f6:0a:b5:2a:f5:88:95:8a:07:12:1c:dd:27:33:01:8f:2d:01:
         f1:a3:2b:75:ed:c4:6d:76:44:d8:63:0f:7a:52:e6:7e:ed:ac:
         0d:a9:51:c7:af:24:a6:92:5d:61:cf:bc:13:e5:84:a3:8a:54:
         fa:92:78:38:8a:a4:f7:8e:03:fd:72:59:3b:a6:b5:91:ea:dc:
         b6:f7:eb:df:b1:7c:15:f3:d6:bd:7d:5b:e8:bd:e5:03:5c:bc:
         0f:fa:f0:0c:c7:bb:e3:5b:a6:a4:6f:e9:fe:5c:6d:cc:3e:65:
         5a:20:c2:49:2b:b7:ca:54:66:5f:45:6e:10:90:6e:78:50:8b:
         59:e1:90:be:75:a8:60:2d:59:86:e5:4e:d0:8a:45:5e:33:4e:
         39:a1:29:b5:38:b4:ef:0e:e0:4e:4c:20:c6:00:89:d7:ab:de:
         1e:cc:06:7d:65:f1:9d:93:ca:34:1e:ab:2e:5c:67:f8:af:ba:
         13:14:75:80:3d:c2:a0:ce:1d:66:95:fd:24:38:36:c3:df:28:
         a2:ef:5c:c1:a1:96:60:61:77:38:92:93:3f:a0:15:5f:fc:67:
         cd:0e:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:13:58 2024 by rpki-client on console-ams.rpki-client.org