Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File:                     t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier:          Gom/lVGioBRgPGOIqB140ODLNKEjUoN8kn+5U4/Ohoc=
Subject key identifier:   D4:00:04:B4:8F:C8:5A:B6:DB:A9:8E:4C:30:18:92:25:E5:C0:00:ED
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer:       /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial:       018F9917C0EE8B0965993D11289A5AEED3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number:          1186
Signing time:             Tue 21 May 2024 03:00:21 +0000
Manifest this update:     Tue 21 May 2024 03:00:21 +0000
Manifest next update:     Wed 22 May 2024 03:00:21 +0000
Files and hashes:         1: jc5BvvGLc0z8TUQ2FxcVuBM_wWE.roa (hash: YMz7ABEQRWI8Mj45qDwXVu2NF68o3uA17BzdBcI0pK8=)
                          2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: UgtpBRAAq2z/jtHStNVE5z3Tz9Nk5bz6e/denu5N5Kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:17:c0:ee:8b:09:65:99:3d:11:28:9a:5a:ee:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
        Validity
            Not Before: May 21 03:00:21 2024 GMT
            Not After : May 22 03:00:21 2024 GMT
        Subject: CN=d40004b48fc85ab6dba98e4c30189225e5c000ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:ee:ca:06:92:7e:7f:bd:48:9a:10:f1:8e:
                    c9:e4:cd:cd:72:22:b4:58:1a:69:51:f3:14:a2:f1:
                    9a:63:41:b5:da:68:74:e9:65:8f:a3:26:d4:32:03:
                    e1:5d:12:c4:33:3e:bc:d2:71:a8:b2:40:61:2e:9d:
                    46:e5:c3:6e:42:ef:a0:b5:24:89:b9:54:10:46:83:
                    e1:c1:13:e8:06:72:26:58:9b:be:09:2f:6a:14:41:
                    da:12:66:e7:f7:ee:a0:24:de:a9:94:8b:d5:29:9f:
                    23:5c:70:39:c9:56:dd:c1:29:eb:7b:b3:1d:17:dd:
                    c2:48:0c:4e:e2:a8:39:4e:d4:e9:97:d4:80:1a:a6:
                    0e:85:53:d6:68:1a:13:ae:ac:85:56:b3:5b:8d:90:
                    55:5f:b5:dd:71:4b:40:0e:4a:8b:d3:c1:7d:71:e7:
                    0a:3f:95:0f:b8:4a:5a:ff:f1:a2:68:06:6b:81:df:
                    63:7c:2a:2d:bb:91:bf:ad:4d:6c:2c:fa:6b:46:8f:
                    76:8b:3a:59:7a:ab:6e:30:ef:7f:cb:22:7a:e3:05:
                    9e:d4:91:95:4f:64:93:a6:d4:85:b0:3d:e5:05:8d:
                    ab:a3:a8:a7:27:0c:c7:38:58:61:23:96:05:84:7c:
                    46:a1:75:9c:a8:7b:1e:17:6c:52:90:0c:cd:26:aa:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:04:B4:8F:C8:5A:B6:DB:A9:8E:4C:30:18:92:25:E5:C0:00:ED
            X509v3 Authority Key Identifier:
                keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:55:4f:3b:6d:87:b5:18:bc:21:d4:f4:8a:25:a2:22:ec:
         62:49:72:f0:5e:dd:69:df:37:9c:5d:29:ff:36:c5:d7:8e:34:
         49:7d:d8:b0:90:e3:1e:6f:a2:28:86:52:4d:55:bf:a0:c9:df:
         a8:f7:2a:e4:ac:73:ea:49:06:d0:f9:9e:8a:9a:4e:28:e5:e7:
         21:79:5a:bd:15:f8:fa:73:04:d0:20:b6:da:d4:71:b6:9e:49:
         f9:85:5b:43:2a:99:d6:61:b6:11:b4:a5:d4:4d:b3:7a:25:53:
         8f:bc:52:27:64:89:14:00:13:60:f7:5f:18:81:66:57:5d:58:
         60:9e:e5:cd:21:38:81:01:ac:4b:07:83:50:18:0f:8a:ba:52:
         63:36:e0:82:e7:cc:c0:8c:e7:83:fb:80:36:54:f2:2c:ca:87:
         f0:db:66:09:9a:ed:1b:66:83:f2:46:4c:7a:69:d7:d8:f3:13:
         03:25:96:d9:83:46:0e:1b:15:45:d4:9a:85:1b:bb:8d:d1:90:
         3c:21:a2:9e:88:cf:94:d0:31:96:b1:87:ee:05:36:6d:6d:14:
         fb:28:b1:bc:8c:d2:5a:90:95:ce:8c:c4:f6:5e:26:a6:1a:54:
         62:53:6a:71:c3:42:9c:77:8c:e4:a6:b2:7f:b2:ba:24:0e:3f:
         34:f4:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:46:05 2024 by rpki-client on console-ams.rpki-client.org