Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
File:                     1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft (raw, json)
Hash identifier:          Umo8bfkz7nssY1tqJu2sxsC++Xn0VoxuZ3C4FJwybi4=
Subject key identifier:   86:E8:25:D2:D9:7D:9D:24:7E:63:C7:A9:ED:DB:36:F7:10:EE:5F:36
Authority key identifier: D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71
Certificate issuer:       /CN=d5b8670ca93364f3443f82e3011eac1537197771
Certificate serial:       0190513386440820DD91B4B4A81C205F6D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
Manifest number:          0807
Signing time:             Tue 25 Jun 2024 21:00:49 +0000
Manifest this update:     Tue 25 Jun 2024 21:00:49 +0000
Manifest next update:     Wed 26 Jun 2024 21:00:49 +0000
Files and hashes:         1: 1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl (hash: +cU7WMxCAV4wOdQgy8THbKzNDyEWiD8TxEMvYG2q6J4=)
                          2: 8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa (hash: gOkaqBzPciks+NrpzUI0YJR74x7pdPDs14GcPhejgCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:33:86:44:08:20:dd:91:b4:b4:a8:1c:20:5f:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b8670ca93364f3443f82e3011eac1537197771
        Validity
            Not Before: Jun 25 21:00:49 2024 GMT
            Not After : Jun 26 21:00:49 2024 GMT
        Subject: CN=86e825d2d97d9d247e63c7a9eddb36f710ee5f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:d7:44:05:12:ac:9e:ce:64:33:97:9b:76:
                    b6:03:3d:a7:ec:e2:1c:e5:9a:df:f5:9f:e0:4e:d6:
                    19:47:3f:fd:74:65:b3:7e:19:ac:3c:25:95:1f:d9:
                    61:d6:76:8e:32:ce:4d:8f:b0:20:87:a0:61:fb:62:
                    d1:f7:3d:cf:ba:22:8c:82:0b:98:82:fd:a7:65:0d:
                    a6:0a:69:c7:08:9a:22:92:5f:ec:a2:a1:c9:af:8b:
                    e8:e3:03:ef:73:ae:c8:6e:e0:f5:7f:82:9e:a8:86:
                    0e:62:e0:84:39:27:2e:32:23:64:d8:16:7f:6a:2e:
                    14:b4:16:8e:d1:5a:ae:e5:00:e9:0e:ff:02:95:e7:
                    d0:c5:99:c0:41:c6:ec:1d:72:ad:4b:11:0a:8f:ad:
                    f7:2c:35:6b:ae:30:7f:f2:39:e6:be:ef:6a:50:65:
                    f2:8e:49:ad:62:ae:50:eb:11:47:7a:35:25:0f:c3:
                    aa:be:66:33:bb:ba:7b:de:3c:e1:fb:aa:eb:58:56:
                    19:76:e7:52:2f:19:03:27:f7:c2:f9:fc:01:fa:e3:
                    09:2a:1e:52:27:7a:4d:85:30:fa:3e:fe:c4:de:8f:
                    9c:72:6e:c2:f9:d7:e2:6a:ab:87:52:95:1d:2c:be:
                    17:25:ef:f4:36:c7:2f:aa:b4:de:69:ae:bc:6f:ab:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E8:25:D2:D9:7D:9D:24:7E:63:C7:A9:ED:DB:36:F7:10:EE:5F:36
            X509v3 Authority Key Identifier:
                keyid:D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:38:b0:a6:6a:88:f6:c5:28:b8:9f:64:4d:e2:c1:b0:50:
         c9:ab:0d:9f:32:2e:d2:e0:8a:af:7a:2a:da:a7:df:30:4c:50:
         72:32:4f:3f:53:7e:a0:46:bc:b9:e2:90:87:63:0d:a1:05:e8:
         19:1b:bf:c2:0f:87:0c:cd:af:73:49:b2:d1:16:c0:eb:27:f2:
         94:cb:80:97:0a:0f:bc:b4:87:6a:b8:12:1b:dd:81:1a:19:b0:
         48:2a:50:45:a6:f9:13:cc:94:14:4d:5d:ef:8b:3b:be:d2:9b:
         3b:7d:1e:87:28:95:2a:d9:de:43:35:b6:c1:c1:c9:c0:21:66:
         e8:51:7f:3a:8f:77:40:06:d0:d3:b9:a7:36:86:bf:aa:90:93:
         18:69:ca:a8:f5:5a:27:1b:47:a3:a9:47:6d:5c:b3:b0:47:e4:
         e8:3c:8e:bc:5d:ba:4d:d6:38:8b:62:e3:d2:78:8b:5d:68:b9:
         9a:93:4c:81:58:e9:51:e3:49:ed:a0:6c:4d:8b:a8:c6:b3:8f:
         d3:7e:2a:23:c1:69:3f:69:33:15:05:58:9c:13:1e:bb:be:71:
         c7:d3:25:17:f2:09:fc:19:1b:31:01:61:91:46:cb:cc:c5:01:
         14:01:a8:37:d2:eb:2d:87:19:4a:9a:16:ac:b4:85:6d:a7:9e:
         c3:11:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:03:57 2024 by rpki-client on console.sobornost.net