Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          iRoum3QW01JkHPPca0SdTgzNbLxVTRgqbR9WaXiG/Ic=
Subject key identifier:   10:9E:0F:FA:4D:13:93:1A:77:BB:29:F8:00:29:16:F2:2E:D7:8C:DF
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019044F89D53CC10FA3C2A034948F58AD3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          0B38
Signing time:             Sun 23 Jun 2024 12:01:01 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:01 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:01 +0000
Files and hashes:         1: GHIDKcj-ZRk56dIzt5ZUUs0XvuU.roa (hash: 1qH42kVMrMvIdSHdgvWOFMTo86QVyNp3JG+cVNJAJx0=)
                          2: TE8OSuJH3pb3sgwBzMUigdgvqFQ.roa (hash: UuIBeKE24vnIbQDyOV3hpBiianU/0tMxxwKuvilWQ+o=)
                          3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: PxAurVRc9cTamINII523pPRW5vIMgLFlPSgDzyRFVtE=)
                          4: pFpHYTJDzfp3gTgn_kI_y53S9sg.roa (hash: EXc8I99N0J+DO/potKMlGPdBPQNPugAZrut2T1EEIwo=)
                          5: xYL1pCeXlNRKXYKyeuNnd4_f3j0.roa (hash: QiilZ7pPMOgLxT8/8awMd05o1z/YMsxaefTli4U6Bh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:9d:53:cc:10:fa:3c:2a:03:49:48:f5:8a:d3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jun 23 12:01:01 2024 GMT
            Not After : Jun 24 12:01:01 2024 GMT
        Subject: CN=109e0ffa4d13931a77bb29f8002916f22ed78cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:93:00:0e:ca:45:16:38:85:50:07:13:f6:
                    95:ea:a9:f7:5a:2b:c0:5e:f0:02:e4:c1:a4:7f:46:
                    74:51:04:d1:a0:09:09:36:31:3e:dc:09:e6:38:73:
                    f8:b6:81:8e:90:1b:63:fd:97:a5:97:95:c2:a1:3d:
                    ad:6b:5f:3b:f6:80:40:c9:9e:80:49:9a:0a:23:99:
                    82:9c:c9:d9:2f:66:8d:1f:b8:44:a0:53:40:87:a8:
                    25:40:24:7e:3a:b3:85:76:30:9c:10:2b:b4:29:1f:
                    39:62:bf:4c:81:8b:a7:e3:96:16:19:67:31:9a:34:
                    50:79:fd:35:e5:88:6d:be:cb:02:e6:24:fa:a6:ac:
                    25:02:7a:41:0a:da:58:45:da:32:79:7c:9b:30:3f:
                    b0:e6:21:f3:67:53:1d:1a:ba:1f:60:5d:c3:76:92:
                    29:ab:86:0f:63:23:3c:e6:21:bf:ca:bc:85:2d:7c:
                    ac:1b:a2:b9:26:24:c3:97:74:2f:1e:34:76:af:b1:
                    44:f3:34:e0:14:ba:de:f4:f0:f0:2d:b3:a6:c9:ac:
                    21:c4:6b:36:e6:6c:9c:1c:15:6b:f0:e8:18:da:f8:
                    58:2f:b9:7a:0f:93:3b:48:54:44:66:5e:b8:a6:33:
                    ec:66:29:85:c1:1f:27:67:8c:b3:0e:83:6f:0a:89:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:0F:FA:4D:13:93:1A:77:BB:29:F8:00:29:16:F2:2E:D7:8C:DF
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:42:17:ca:57:6f:3d:3e:3b:ab:f7:6b:34:2c:09:05:ba:
         e7:2e:a1:5b:cb:51:c1:bd:0e:d8:4f:94:3b:af:48:7a:e6:e2:
         fa:ca:1d:75:bc:0f:81:e3:cf:ff:49:39:f4:63:69:db:13:b2:
         57:71:fd:f5:94:5d:f5:9d:9c:68:8a:e8:cd:59:c6:c2:ae:65:
         e9:46:2b:1b:91:86:91:5a:b4:35:3a:59:40:12:1e:9b:fe:60:
         bf:ed:8c:e5:67:96:fd:79:70:50:ed:1f:83:c8:80:0c:f1:67:
         1f:91:1f:e4:73:38:14:e6:33:94:a0:44:78:c8:b8:0d:7c:51:
         2b:98:12:36:e1:72:4c:52:24:e2:a2:b1:83:49:ab:5f:3a:50:
         6d:2c:a0:a9:b9:6d:db:d1:93:8b:51:1c:2c:8e:e8:ee:2f:91:
         1f:3c:c1:07:7d:37:9d:72:d2:40:19:33:07:d5:54:93:66:45:
         ab:d2:96:07:e4:26:30:84:10:85:ab:ae:01:b3:17:7d:8b:68:
         bb:5b:32:c6:03:73:80:dc:9e:85:8e:4f:a1:28:de:59:ce:ce:
         31:1d:28:66:24:a9:68:ea:84:fb:bb:6f:c5:40:d4:7f:43:cb:
         29:34:77:07:0e:74:fa:d0:eb:b0:bb:e5:0e:f3:19:08:8c:7b:
         d8:e8:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:22:23 2024 by rpki-client on console-fra.rpki-client.org