Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File:                     B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier:          21h0Jh0jFGNxKeaiepVohl6tiAp+jotIgWrQfoTfOhE=
Subject key identifier:   7A:4C:0E:B7:E9:02:EF:D3:B3:82:52:F7:E8:DA:77:31:84:EE:64:2A
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer:       /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial:       018F497D290DB16149C4513160417F88BC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 16:01:30 +0000
Manifest this update:     Sun 05 May 2024 16:01:30 +0000
Manifest next update:     Mon 06 May 2024 16:01:30 +0000
Files and hashes:         1: 85Y-xuwmevo-7i4YUT6gXERukOw.roa (hash: WO9l9jEP1swmmQ1D9t7KQpqRP60JQDk1XrxbuYwUV4Q=)
                          2: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: aieryDNC9R4tGX2dxdTDHQ1F/y7wFXeyJeiNpphsYGY=)
                          3: hqn5OqIRzDFOWt4xxJhB7uICooU.roa (hash: BdaE0tZAgPAHAmb1+HDKEAcBF95nyj4qsCT959y+VQc=)
                          4: lGP_F4iu2e9Akp-qWmUKau01xzc.roa (hash: vjYa9Lw83IJZhd08DbYDtgqyqFDqk5YwcpZmf3W5KVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:29:0d:b1:61:49:c4:51:31:60:41:7f:88:bc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f2a175be20108641c649553213f212511667a5
        Validity
            Not Before: May  5 16:01:30 2024 GMT
            Not After : May  6 16:01:30 2024 GMT
        Subject: CN=7a4c0eb7e902efd3b38252f7e8da773184ee642a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:4e:8d:7f:98:bf:8d:33:05:19:e1:7d:23:
                    2e:87:dd:24:ff:08:17:06:af:93:9e:2d:d5:af:af:
                    84:33:7c:ae:dc:29:63:85:1a:e7:fe:bc:30:6c:8a:
                    c6:16:6d:b2:70:5e:f6:2f:8f:09:f8:fd:e0:b1:22:
                    ee:86:44:a8:a0:58:3f:c0:3b:57:0e:51:bc:1e:4b:
                    b9:34:76:55:33:55:ce:13:65:94:fb:fa:11:6f:88:
                    95:2d:ae:18:dd:45:45:8b:bb:d9:80:4e:4b:01:23:
                    76:df:e9:22:61:7c:b8:5e:76:db:61:66:b7:36:e9:
                    cf:fe:42:5f:c0:dd:bc:7a:d3:cb:d4:8a:7d:c2:4e:
                    76:31:4b:94:cb:58:f8:fe:bf:66:1a:74:f4:a0:b0:
                    45:5a:0a:69:58:75:c7:e7:46:61:48:61:99:bc:c4:
                    1a:b8:7a:7e:e1:23:d2:57:1a:f7:64:e1:45:95:99:
                    95:6e:03:b5:33:cf:6d:f6:97:b2:53:42:3c:99:ab:
                    6c:9b:e5:ac:56:2d:0d:0b:bb:6d:bc:93:f3:0e:c9:
                    a0:1b:d4:47:ba:30:0a:47:0d:fe:0e:38:e1:a5:50:
                    05:ce:ac:1d:4d:d7:22:d3:e8:08:44:a6:6c:cf:05:
                    ac:bf:e6:68:6a:76:ae:2e:47:61:a7:8b:bf:ce:d2:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4C:0E:B7:E9:02:EF:D3:B3:82:52:F7:E8:DA:77:31:84:EE:64:2A
            X509v3 Authority Key Identifier:
                keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a3:81:3f:70:35:a0:d1:9e:f0:32:a5:b2:36:65:c6:56:00:
         6e:2f:84:9a:47:58:7e:df:42:68:11:79:e8:b8:c1:32:29:45:
         22:b3:44:be:d2:ae:36:f3:3a:cf:9f:65:fb:12:c9:59:db:bd:
         7d:a7:e2:1f:69:d4:4f:a1:0f:fd:b3:c1:b9:f7:63:a2:8a:a7:
         61:bd:9e:d8:57:98:3b:a6:b2:a0:97:4e:67:f4:4b:f3:cc:79:
         a3:c8:25:a5:ae:56:52:02:e7:f9:9e:2d:de:74:94:78:bd:02:
         00:2c:d1:bb:9f:27:fe:42:e2:2f:50:88:46:e0:2e:ed:07:24:
         eb:55:1b:1a:79:44:a4:a1:f6:fc:06:6d:77:82:ce:08:3d:d8:
         a1:b2:5c:d3:91:81:6c:76:1f:d9:79:e6:75:6a:74:dd:49:d5:
         8a:0d:4c:44:41:4b:58:24:da:8b:ec:58:34:2f:01:90:7c:27:
         d6:67:17:d3:fa:7c:ea:e2:0b:61:8b:f8:df:2e:0d:4f:f0:a0:
         51:17:16:35:68:8a:59:93:ea:18:63:43:54:53:19:48:05:ae:
         6d:7d:35:30:f8:ba:bc:6c:11:22:12:e9:95:29:c0:b0:ab:0d:
         bc:eb:f5:26:b6:25:c1:07:a3:38:94:59:66:d2:3d:80:dc:9a:
         00:f6:73:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:10:44 2024 by rpki-client on console-fra.rpki-client.org