Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File:                     sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier:          76FBCEjG1cmKmUkPYc7VFdDv+l2lefR34Rh/nxymwtM=
Subject key identifier:   37:2B:34:24:65:F1:6D:23:BE:A4:75:55:E4:CE:AC:57:B3:B7:8A:DF
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer:       /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial:       018F7BB3BB6AFD8B1B9E1CE616BE2855D5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number:          1171
Signing time:             Wed 15 May 2024 10:02:07 +0000
Manifest this update:     Wed 15 May 2024 10:02:07 +0000
Manifest next update:     Thu 16 May 2024 10:02:07 +0000
Files and hashes:         1: WCd1Ev1e9Nofz4kLVtDG3PtwYDM.roa (hash: DWZ4bxuNeMTbx5mspJAFy1NOqcx0YA3RpGq3Hv69Qd4=)
                          2: WF8c-GyDpaWF6fN0Zw-fBXDUoPg.roa (hash: 0vTTSB5mBZPYbST31/2xJZbiivnSMtuI4xW3GRgPSfI=)
                          3: oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa (hash: W1ZeASeIjy9mI/4wmR2Nn7lWEu1/oQ/csuhOohWNeb4=)
                          4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: CXFwUakV4qL+7vDtHtI0nYruXdwlcJvo8xBeD2hq5tw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b3:bb:6a:fd:8b:1b:9e:1c:e6:16:be:28:55:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
        Validity
            Not Before: May 15 10:02:07 2024 GMT
            Not After : May 16 10:02:07 2024 GMT
        Subject: CN=372b342465f16d23bea47555e4ceac57b3b78adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:1d:c7:6c:fc:1a:59:5b:79:3d:bf:e0:05:
                    46:a6:df:9c:47:a4:e8:23:af:0f:28:dc:35:81:cc:
                    b9:ae:dd:3e:ea:d4:45:ae:fb:8f:17:3d:b1:7b:92:
                    ef:aa:b1:ec:53:1b:f1:ac:6a:f6:ad:de:bc:61:41:
                    6e:0e:ea:5f:ae:a1:8a:05:6a:a8:25:e0:cd:b3:41:
                    42:ad:0b:1d:a5:06:12:4c:1b:8a:03:bf:d3:8d:54:
                    fd:a0:35:3b:e0:c0:6d:d5:57:df:59:43:84:41:76:
                    1a:38:31:b3:81:8a:ca:89:54:40:8a:6d:48:bd:a2:
                    5e:b2:aa:17:7b:c8:cf:42:06:05:ff:79:94:63:34:
                    d1:ec:1e:88:03:59:ec:63:3d:88:c4:2c:12:d2:1d:
                    06:f4:5d:b3:8d:be:05:58:30:a5:e1:a8:4f:f1:7a:
                    e9:2c:b6:95:b9:d7:c6:19:a3:8a:a7:b2:c2:40:f5:
                    49:b4:8f:27:39:79:f7:3e:12:9b:91:bf:7c:46:25:
                    c6:31:b6:d0:87:d7:bc:bc:c3:59:cc:84:fd:c6:76:
                    6d:70:cf:f1:4c:c2:20:a2:d9:ad:7c:c2:5d:0a:09:
                    74:7a:44:2d:61:ef:47:ba:c9:71:45:13:06:d2:4e:
                    1c:7d:d4:bf:72:e7:7b:16:8a:3b:b7:9c:b0:5a:1b:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2B:34:24:65:F1:6D:23:BE:A4:75:55:E4:CE:AC:57:B3:B7:8A:DF
            X509v3 Authority Key Identifier:
                keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:b2:9d:c1:2f:c6:d5:ac:42:ff:dd:ad:71:42:1d:bd:47:
         95:e4:50:71:55:1b:5a:e4:d3:9b:09:b6:d2:3c:ea:fa:c0:7b:
         4a:00:21:b5:67:c2:ac:8c:f5:68:60:96:78:0a:66:ed:62:21:
         d3:1d:09:0e:44:26:b5:02:7f:bf:42:5b:61:20:68:f7:41:a4:
         4b:ef:60:47:01:1e:dc:13:ac:e3:73:d1:d1:c7:ec:d8:42:c9:
         6e:98:38:bf:46:0f:30:05:8e:b1:d7:70:73:60:9a:b7:c1:a3:
         48:60:e3:48:57:c3:e0:4f:d6:5f:57:30:44:30:0e:2d:b8:fc:
         5b:ba:4f:05:fb:f4:ed:1f:72:f0:47:06:e5:dc:f4:82:58:f5:
         26:d2:7c:c9:9a:3f:a0:05:51:2b:8d:8e:04:9a:4e:b7:96:07:
         36:f2:94:1b:8e:35:2f:80:de:d0:4f:d0:c9:79:4e:15:8e:05:
         e0:fb:ce:e0:36:e6:65:f7:ad:a7:fb:c6:e6:44:79:89:27:8e:
         ce:b2:f9:b7:a5:d2:ea:6c:7b:6f:54:85:97:c0:63:ba:1b:2d:
         08:8e:3e:8c:35:d5:59:fa:8f:64:34:5f:6d:42:15:82:97:ac:
         ec:9f:4e:53:46:f3:c9:96:1e:3f:c5:20:56:11:96:94:98:c9:
         da:d0:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:27:26 2024 by rpki-client on console-fra.rpki-client.org