Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File:                     B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier:          fgcN+jMkpVpRANC+gqqkiyz40rQthoBjxEHkH+l+jdg=
Subject key identifier:   F4:0F:93:46:78:09:DF:E9:54:EA:AA:77:DC:58:95:6B:27:9F:DA:4A
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer:       /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial:       018F4F4904BCDCBD1678A807BF8345323FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number:          115B
Signing time:             Mon 06 May 2024 19:02:16 +0000
Manifest this update:     Mon 06 May 2024 19:02:16 +0000
Manifest next update:     Tue 07 May 2024 19:02:16 +0000
Files and hashes:         1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: TiGoVadmX4/ulLgPXKxEK82vuqmq//nqYWC0Sl800KU=)
                          2: BHOrynnb72lZBtfWHoEeVXL8048.roa (hash: yE8ROULTpPijguR7tdW63RzIet9zh/vjyAjtzrJb+Y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:04:bc:dc:bd:16:78:a8:07:bf:83:45:32:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
        Validity
            Not Before: May  6 19:02:16 2024 GMT
            Not After : May  7 19:02:16 2024 GMT
        Subject: CN=f40f93467809dfe954eaaa77dc58956b279fda4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:f7:7b:4f:8f:e8:d3:02:d7:06:cc:12:99:
                    53:87:db:f1:35:a0:eb:68:f1:22:d8:71:f2:a0:6f:
                    d3:b7:2c:46:5d:56:11:82:30:a5:3d:78:41:ed:7e:
                    6b:32:6c:51:b2:db:dc:f0:17:48:e0:9d:c1:b4:c9:
                    6c:0e:a6:aa:98:d5:3b:1e:59:49:c4:de:0f:6c:e6:
                    6d:5d:94:b4:23:37:19:93:cb:61:79:d5:6d:c4:63:
                    87:80:3b:be:d3:59:e3:bc:73:69:56:d9:fa:41:94:
                    00:33:73:81:9e:8f:b8:a6:1b:00:fd:03:06:c1:02:
                    eb:f3:8e:f3:16:bf:7c:53:43:02:e3:0b:ee:5f:c5:
                    db:14:f8:d5:85:45:57:62:0d:b1:b1:41:3a:cb:71:
                    2a:ac:fc:07:e6:24:7a:a0:c6:cb:b0:24:73:72:0d:
                    d3:79:eb:cc:1b:0d:94:57:69:91:36:06:0f:b5:74:
                    79:e8:92:65:4d:18:cd:0c:9f:cd:49:1d:f5:9a:6f:
                    e2:28:8a:25:6a:b1:e2:5b:73:82:7c:87:6e:3c:88:
                    cf:02:e9:4f:f1:de:ea:dc:fb:66:99:ac:eb:8b:52:
                    7b:6c:d3:41:b5:99:d5:e3:c9:67:76:96:9d:88:8b:
                    1e:db:f4:3b:8e:f4:d2:c4:eb:b5:e5:74:e4:b4:10:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0F:93:46:78:09:DF:E9:54:EA:AA:77:DC:58:95:6B:27:9F:DA:4A
            X509v3 Authority Key Identifier:
                keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:61:68:25:e1:4f:aa:9d:aa:da:86:9b:55:9c:d0:41:ca:1e:
         fb:2b:7d:1c:ee:a3:0b:49:70:96:5c:72:28:08:d6:ac:c6:a3:
         f7:2c:7b:ff:68:80:93:27:a8:eb:0f:cb:65:45:ae:43:13:40:
         5a:39:48:57:6d:5e:b4:e4:d3:12:66:5f:3c:ef:bb:84:61:da:
         13:15:4b:e4:98:c7:b8:85:c9:09:99:66:9c:66:35:d9:5f:4c:
         b5:6f:7f:e5:f8:e5:8b:4d:07:49:39:e7:94:af:6d:26:a6:90:
         a9:a7:72:a6:ad:5d:72:e9:c4:50:f4:fb:89:95:0e:b8:e9:d8:
         a1:5f:54:08:e7:92:8a:8a:11:3f:49:03:86:b1:96:09:c2:67:
         c2:9a:5e:f7:44:97:89:35:3d:ed:a2:39:f7:c9:24:59:63:21:
         9a:cb:d6:31:fb:09:ef:88:40:85:a0:d8:3c:99:22:80:34:ec:
         e1:6e:8a:65:bf:06:43:fd:65:c0:65:af:35:09:d6:37:4c:f9:
         24:db:14:5b:05:8a:37:6d:41:c7:d9:b1:ba:5e:f2:d0:d1:e5:
         cc:32:aa:da:43:dd:e0:bb:b5:d0:af:57:b2:e6:18:48:cd:6b:
         6e:79:37:1f:be:ef:ea:3f:0f:95:05:8c:30:e6:2c:a3:cd:f8:
         7b:c7:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:26 2024 by rpki-client on console-ams.rpki-client.org