Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          BJji7p3YdMMtqcFrHKIkQPXOJl+/LBrmUrVML0QcFMM=
Subject key identifier:   2C:D9:B0:8C:61:28:52:0A:E8:53:11:20:41:E5:C1:80:AE:D5:4A:D1
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       018F1747CBE39666EEEC7D9D7A4284EFC8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          085A
Signing time:             Thu 25 Apr 2024 22:02:12 +0000
Manifest this update:     Thu 25 Apr 2024 22:02:12 +0000
Manifest next update:     Fri 26 Apr 2024 22:02:12 +0000
Files and hashes:         1: 9FFG-z_chFllZJv8W8d0PlG3jX8.roa (hash: 93szWSEGfRYcu3voC+gA9HObGs2BeQhDMMETcRWcU/8=)
                          2: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: L8+l+AHPMfIDeQhYjhruuMDTdWxN+4RyBC5l6dnjNSc=)
                          3: MgAl-93Aa5G7YYaEHccaZeVLNL0.roa (hash: v1NQgm6ZquUz7/+hAOK55RphXxxmzytUHDllXf8A3gU=)
                          4: N_SZcKDnEW5-qgh6u5KcNUEsOfY.roa (hash: EEsQQQL6ZHR8MBng2IYwxzqyVffnMUgFZsMoz9Qm/eU=)
                          5: bQ4yuI7vtU_cGKfCBbHm04HjUtE.roa (hash: dx1yuo8puE3X8jciCd8HS1CIwakxb0t8G4XviWDqCOQ=)
                          6: goNNlWpp0GAHEhFcaNcAq01c6uQ.roa (hash: 44jDG/bTSF0PVFBRtyba3lvRLLtNrQ0m67TbRxyt39A=)
                          7: ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa (hash: TTtTv4KiuU9QNZ1icGbYNnxZrUMvfNsO4dY2FpYJxlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:47:cb:e3:96:66:ee:ec:7d:9d:7a:42:84:ef:c8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Apr 25 22:02:12 2024 GMT
            Not After : Apr 26 22:02:12 2024 GMT
        Subject: CN=2cd9b08c6128520ae853112041e5c180aed54ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:57:6e:37:6a:eb:19:04:eb:eb:e4:c4:f1:
                    a6:43:ed:8b:8b:0f:83:82:04:f5:94:bc:d6:d4:d9:
                    ef:b4:da:88:2f:83:ab:25:fd:01:5e:28:c2:94:e2:
                    ea:73:3c:02:72:a1:89:84:85:f2:ce:cf:37:4f:8c:
                    6e:c1:f7:b8:1f:98:6e:d2:35:55:09:bd:27:0a:8b:
                    14:39:f7:89:89:98:a3:ad:c6:50:fe:e7:f3:fb:6e:
                    68:f8:ab:10:ca:b9:d3:86:55:6f:65:0f:d7:95:48:
                    e6:56:7a:cb:c0:7b:2f:2b:7e:64:db:1e:40:29:33:
                    05:ea:8f:45:e5:22:ca:d1:4f:49:a0:f1:9c:38:1e:
                    0d:0e:10:bf:5e:f7:54:a3:70:46:48:e9:6e:24:6c:
                    d6:e3:04:ff:50:da:82:75:f8:25:24:e0:22:f6:45:
                    80:27:a0:82:fa:86:67:cd:7c:c7:17:ad:d8:75:fd:
                    d4:a0:b1:22:5f:22:39:d0:f3:30:a3:75:9d:61:86:
                    ca:09:55:d7:35:cc:e0:f4:3f:06:9b:13:f5:f6:69:
                    26:a6:75:21:29:f0:81:85:00:7b:13:da:d0:c1:46:
                    06:fa:06:6e:5f:f1:20:02:05:18:ff:83:bb:25:1e:
                    29:2f:e6:6e:e4:6c:30:b2:e5:db:f0:8d:30:28:33:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:B0:8C:61:28:52:0A:E8:53:11:20:41:E5:C1:80:AE:D5:4A:D1
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:c9:1e:4d:b5:01:47:ee:46:67:83:71:74:0e:0c:b1:84:
         7a:8f:c3:13:ec:9c:bd:d8:a9:dc:b8:75:cf:96:4a:c0:7e:c6:
         7f:82:fe:d3:25:4a:05:da:5b:ee:bc:6e:93:61:f7:a7:ca:69:
         61:91:a9:b6:ee:70:f0:f7:e3:a9:04:c7:7e:31:03:ce:cd:09:
         29:8f:b2:24:74:7b:e2:48:1a:15:b1:8e:da:36:13:72:91:de:
         3e:18:ac:96:ea:c3:48:06:99:e1:d6:35:76:db:ee:98:39:1a:
         54:4c:f0:80:c1:3a:c9:63:3f:b0:7a:f7:4f:89:69:af:bf:f0:
         69:eb:bf:50:51:3b:d5:46:49:dc:49:f4:68:e0:45:e7:d4:15:
         44:3d:73:cd:4b:bf:6f:c3:b3:84:1c:d4:4c:a1:29:b7:46:55:
         8d:52:a1:af:d0:8e:2b:6e:a8:b7:e6:60:c4:e5:3d:c9:39:ab:
         3a:80:21:92:ef:b7:ed:bb:e6:1f:4b:90:21:39:16:b0:6d:b0:
         a5:33:28:1f:f4:72:c9:6c:a1:d7:85:7f:35:98:9e:bb:64:12:
         76:5d:ae:6c:2b:b3:4b:1f:a8:0a:3d:3c:12:10:22:c8:8b:d0:
         43:7f:2a:44:01:9b:62:e0:1e:7a:30:78:83:6b:ef:db:d2:d9:
         10:99:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:40:06 2024 by rpki-client on console-fra.rpki-client.org