Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File:                     b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier:          ZIyHxLGj44Fnj8MDEZIeuoZ+bU8S5XH276xB78Df6KM=
Subject key identifier:   31:51:A2:7D:0C:C3:C7:6C:D3:A7:77:C1:DB:07:C8:50:E8:EA:08:9E
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer:       /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial:       018F874907A9F93E736082E81507B536DBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number:          0D07
Signing time:             Fri 17 May 2024 16:01:01 +0000
Manifest this update:     Fri 17 May 2024 16:01:01 +0000
Manifest next update:     Sat 18 May 2024 16:01:01 +0000
Files and hashes:         1: ImMM7tbci2HiDo2g_cX1cCi5juI.roa (hash: TuKI0/iJG1UCabSQKf3VEOVRDfdviGn1M7elFFzzw6U=)
                          2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: 3T9VBdJbZaqcY2qSbKB4W7kRNGYHMXzHKpF92fzM8GE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:07:a9:f9:3e:73:60:82:e8:15:07:b5:36:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
        Validity
            Not Before: May 17 16:01:01 2024 GMT
            Not After : May 18 16:01:01 2024 GMT
        Subject: CN=3151a27d0cc3c76cd3a777c1db07c850e8ea089e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:28:bf:42:04:a7:41:73:07:d6:9d:11:b9:1f:
                    2a:09:be:10:37:e5:ae:54:7e:4d:65:a1:0c:fc:1e:
                    60:4b:16:cb:1b:23:9d:20:39:36:a1:56:9e:af:3f:
                    fd:fd:b1:02:dc:bb:bd:e5:42:0e:bb:0d:90:70:6e:
                    ee:06:5a:5f:55:e6:7b:f0:90:3d:34:90:6d:28:a9:
                    2d:b7:1f:3f:92:41:40:51:1b:59:55:6a:07:39:f8:
                    2b:ce:76:b8:40:94:a2:92:91:3d:87:c2:a6:0d:17:
                    2b:aa:57:51:1a:51:5a:3c:9b:52:02:38:e2:a8:d9:
                    64:d7:b7:08:5a:a2:ba:72:b2:46:43:b6:d8:a7:83:
                    15:8d:58:4c:8a:a9:6a:f4:ae:ee:5b:27:f7:4f:09:
                    f2:17:c4:42:e5:b7:54:65:1e:80:45:d2:4e:0e:e4:
                    65:1c:29:24:0a:5a:1f:f0:6c:6c:af:6e:55:b8:09:
                    6d:cd:fa:89:29:39:f6:f0:49:89:40:1e:68:3e:3e:
                    55:d7:1b:36:5e:05:b1:a6:b3:2d:36:78:f2:cf:82:
                    c6:89:9b:b4:28:7a:13:77:c9:32:65:ad:c1:1b:b3:
                    b2:33:ae:19:ba:76:64:97:04:04:f2:a6:a9:90:89:
                    f8:af:fb:ed:16:8d:00:44:9b:84:aa:e3:74:f7:25:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:A2:7D:0C:C3:C7:6C:D3:A7:77:C1:DB:07:C8:50:E8:EA:08:9E
            X509v3 Authority Key Identifier:
                keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:82:36:c4:a8:da:ed:e3:c7:f4:c7:3d:9e:ce:d5:85:05:7b:
         8a:e3:70:25:66:b4:37:2a:42:5a:87:9e:23:39:f0:2e:a6:33:
         2b:8b:06:0a:2b:fd:c7:1f:39:ee:ed:33:8c:db:7a:5e:93:1c:
         a9:d5:94:32:97:cd:bb:7b:34:67:1a:83:1b:67:14:98:4a:67:
         16:53:c1:d7:9e:10:43:9b:c9:48:df:26:63:5b:4f:44:0b:f3:
         51:d0:be:9b:8e:88:71:a8:6f:2d:74:af:ec:4f:ad:41:2c:f2:
         13:d9:19:f8:6e:da:81:3d:96:96:ce:e9:eb:fa:3b:60:79:18:
         38:7e:8e:fa:12:53:48:4c:2f:e3:d7:84:01:98:83:41:6e:2b:
         fa:a3:1c:b7:50:06:31:5c:a2:da:16:94:ae:66:2e:e2:28:e8:
         c7:f9:9d:de:97:75:08:65:a2:f8:ae:5f:c7:31:f8:46:7b:fb:
         57:3c:47:9d:11:0a:20:d0:43:42:04:22:47:9c:f5:1a:a4:5e:
         e1:e9:97:dc:f0:85:90:e6:6c:48:9a:e1:9c:18:89:cf:6d:6e:
         ab:a3:56:47:09:2a:4d:46:c3:19:6e:8c:04:b1:c4:ee:ab:85:
         7c:22:01:01:b5:07:00:35:34:c5:dc:15:4b:78:ff:21:21:98:
         f5:f2:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:17 2024 by rpki-client on console-fra.rpki-client.org