Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          CZCUJFyxf2/Hqr8h5yZvNjhFOIxh8JiDCTRn7sVFOx8=
Subject key identifier:   AA:57:D6:8E:1B:34:27:54:1A:37:F8:7F:90:3D:05:3C:5A:B9:AA:9F
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       018F855B85DD12C22702A59F4438B1077A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          0265
Signing time:             Fri 17 May 2024 07:01:58 +0000
Manifest this update:     Fri 17 May 2024 07:01:58 +0000
Manifest next update:     Sat 18 May 2024 07:01:58 +0000
Files and hashes:         1: 7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa (hash: QDQDp66qUB/PS0udUW8HZwiMOu3YUPHCWXgV2/sElsM=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: pONsgr1GjK6G8OGwI/NKPf9ks+6tHewkknpZx1jvBj0=)
                          3: J-kd64Lxe71y3aoQd9uES4CBajY.roa (hash: 1TElPVbC1q4SKUGEEDTBOj8I9N3Hmx1yVF7toUmF9UA=)
                          4: RpZ1L63zaNHGGh4kH23ohNCgaik.roa (hash: k9PjSLfSvLznJaAWQ+EhcCEtI4KgwXydwpfcB+WbWxw=)
                          5: xsH33TZ1dL6-z_SDbPIKC_0aerc.roa (hash: ftoo6olQJ3LU2TZfJWTG7QnGc5Cbwgz7oTRFR+AGDtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5b:85:dd:12:c2:27:02:a5:9f:44:38:b1:07:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: May 17 07:01:58 2024 GMT
            Not After : May 18 07:01:58 2024 GMT
        Subject: CN=aa57d68e1b3427541a37f87f903d053c5ab9aa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:27:02:5b:9d:46:f0:43:3c:1a:64:fc:35:
                    04:82:df:58:8e:32:6a:04:d8:12:b3:24:c5:3e:c7:
                    68:b7:e4:f8:21:2d:85:10:3c:58:3d:05:9a:50:9e:
                    22:78:aa:96:87:d2:41:65:16:cf:df:e2:a5:4a:7d:
                    53:bf:ef:ff:28:99:24:94:31:d2:2d:3b:56:16:31:
                    45:33:1a:29:05:c4:c6:71:51:85:17:ae:8c:32:27:
                    68:19:1a:31:00:ed:f6:a3:3e:b5:4d:6e:31:c7:5c:
                    92:04:74:36:9b:a8:ab:4c:f3:94:7d:dd:fc:40:ed:
                    06:7e:e9:3e:05:28:b7:60:e9:e4:49:d0:6e:5f:2d:
                    94:41:cd:7a:a3:3c:59:d5:86:ff:fa:1a:dc:1d:4e:
                    cb:50:b9:01:e9:24:4b:e0:56:ab:0e:0d:c5:8d:b9:
                    f1:03:a2:36:e8:8f:68:ef:1a:fa:91:eb:2d:87:f7:
                    51:7d:e4:78:29:13:ae:7e:6f:ba:8a:4e:b7:00:5d:
                    87:ed:30:ab:45:43:9d:96:90:ea:4a:0c:3d:c8:9c:
                    78:4a:e4:5a:d9:05:c0:5d:78:83:16:0d:cb:5f:a0:
                    83:54:df:34:99:7c:01:39:a9:26:56:2b:9c:0c:59:
                    01:45:49:1d:d0:07:e5:c2:ba:42:a6:ba:1b:c3:29:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:57:D6:8E:1B:34:27:54:1A:37:F8:7F:90:3D:05:3C:5A:B9:AA:9F
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:6f:66:74:41:8c:ad:12:de:2b:7f:a1:05:64:0b:98:0a:
         0a:9e:e0:15:37:94:49:ab:75:65:53:1d:10:be:20:f8:df:7f:
         a3:b0:7f:c9:6f:39:b0:fc:48:a6:ed:a9:73:b0:27:70:a1:3d:
         66:8d:c1:c6:5c:22:4d:a0:bb:17:b6:57:9e:a5:00:22:0b:e7:
         74:5a:00:7e:78:6a:ac:fa:0f:88:4c:d3:f6:69:41:f5:0c:b7:
         34:1c:d2:60:0c:bc:38:d4:a3:1f:10:f9:cd:43:61:08:7c:04:
         31:b9:ed:b8:a9:70:86:f3:a2:6f:f5:f7:6e:a0:c7:74:70:ff:
         d7:17:7e:2e:b8:5e:88:ef:3d:8a:dd:f4:9d:41:8f:32:4e:c2:
         e5:b7:87:4f:b1:ef:7b:f2:81:bd:8f:27:ea:8c:39:85:f3:c0:
         20:2e:65:4b:70:bd:73:a3:44:d2:05:19:26:f2:c5:0f:31:59:
         75:bb:ae:a1:a1:42:b4:bb:cf:ec:ed:b7:f7:57:3a:a6:4e:53:
         4a:bd:5d:a3:c1:7e:72:64:90:d8:e1:f3:38:3c:84:a1:f5:8e:
         3a:be:22:3d:ab:2f:2d:a6:0e:c5:65:cb:2d:bf:b9:a8:ff:dd:
         36:d2:13:a2:83:0e:b2:18:42:61:ef:0b:36:07:09:29:71:b2:
         e2:9c:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:26:55 2024 by rpki-client on console-ams.rpki-client.org