Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          SAqF8YPvCNtohoB///u5LkKlKHgb0KrGiugmP+LPFu4=
Subject key identifier:   7D:C1:04:66:F2:9C:38:42:6D:3E:F4:DF:D0:5C:AC:F1:7B:32:84:FC
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       01901BFF275D0952BF9B321F0AFE5F14082B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          07A0
Signing time:             Sat 15 Jun 2024 13:03:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:44 +0000
Files and hashes:         1: TgiC2ylJxMdU3j10-zOONTUm03Y.roa (hash: 6Sro1HgNUj4i0ofCHX+KNGR444cPZTykYPiE4cp4wV4=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: RrmzPoWyeH0jjPL9JuEeNOydzVef/5gucv+svwGRGto=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:27:5d:09:52:bf:9b:32:1f:0a:fe:5f:14:08:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Jun 15 13:03:44 2024 GMT
            Not After : Jun 16 13:03:44 2024 GMT
        Subject: CN=7dc10466f29c38426d3ef4dfd05cacf17b3284fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:f2:a6:43:0a:23:ca:ac:00:f9:fe:9c:cf:
                    a7:53:0b:93:ca:15:96:23:cc:39:15:d1:11:26:6f:
                    29:31:ad:01:0e:d7:09:a4:85:23:da:db:fd:1a:4f:
                    53:54:87:33:4d:b7:58:bb:8b:d2:9a:09:79:39:a5:
                    62:08:bf:65:ca:a0:17:6d:43:7b:1f:ee:df:db:93:
                    50:cb:23:75:db:2b:ae:9f:e6:d9:d7:15:ad:0c:66:
                    13:71:57:1c:73:d4:1f:24:d8:e8:35:ba:c2:b5:7e:
                    44:8c:35:53:a4:ff:fb:21:05:d1:89:e5:7f:92:a2:
                    4a:89:d4:36:a7:81:4b:3e:3f:f9:59:5e:f0:f8:d6:
                    34:7d:39:3b:52:57:22:9e:37:69:cd:1d:15:39:b5:
                    01:80:8a:c8:71:ef:75:d9:ac:76:94:b4:12:65:1d:
                    76:75:72:c8:01:c7:60:2e:80:66:70:9b:d2:fe:73:
                    f0:ac:8e:1c:c5:a8:7e:81:b7:39:e2:da:8c:3a:17:
                    ab:4f:da:b5:98:15:fd:11:f0:c0:ad:64:fd:f6:b9:
                    3a:2c:8a:0b:f3:3e:cc:44:85:8c:cd:96:48:a8:99:
                    8b:8c:4b:89:2d:bf:61:44:29:c1:4c:9a:99:7d:d9:
                    99:a2:11:7c:96:ed:20:f7:28:a5:d2:11:b4:15:68:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:04:66:F2:9C:38:42:6D:3E:F4:DF:D0:5C:AC:F1:7B:32:84:FC
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:12:a0:21:45:34:f4:d5:ed:d0:50:e8:a5:45:f9:d6:d1:9b:
         09:89:3b:74:80:37:2e:a8:95:90:fd:6d:93:89:65:af:57:7f:
         70:57:be:06:ab:bf:42:1e:f8:87:7f:39:2e:fc:57:9a:de:a3:
         9a:02:b4:9c:37:b3:0a:02:44:d8:9c:fe:e1:8f:bc:c0:8d:86:
         cd:d9:49:59:0a:5e:a0:c6:ba:8e:77:5a:6e:f3:0f:49:6e:13:
         ec:93:14:3d:da:cc:b6:ff:68:ae:da:79:2b:3c:c1:30:2c:4d:
         a3:9e:e1:e6:6e:c4:75:db:1f:88:c6:1a:4d:2b:61:02:ef:21:
         87:3e:7d:03:e1:fb:26:b5:77:0a:6d:26:1e:8a:50:2d:23:ac:
         08:6f:8f:f3:96:e8:39:a4:87:32:5a:3a:b6:36:11:fe:cb:3f:
         c2:5b:c5:04:53:66:7f:e0:99:3c:48:a4:10:0d:32:15:9a:81:
         1e:4b:ed:f2:ef:d5:80:04:0b:fd:ae:00:10:a3:45:53:ca:f3:
         5b:86:73:01:a7:af:4f:c2:8c:a8:b3:ad:6f:39:59:a5:dd:16:
         b4:6e:03:b1:a4:37:e6:d3:7b:e7:4a:46:07:bc:0c:1b:4f:9a:
         48:6f:46:bd:93:6c:1d:67:14:7d:bc:05:27:58:50:0a:ee:29:
         d1:ab:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:54:10 2024 by rpki-client on console-ams.rpki-client.org