Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          Cfoy6wQJQRWq2XgYNNtgifKTqlWPXpmkfVMZfaovrpY=
Subject key identifier:   75:1B:24:A1:31:DD:EC:44:0B:0C:27:0E:49:71:EA:CF:04:0C:A8:4A
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       01901CD8AB244053F60924C3D19AFE48EEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          0ED6
Signing time:             Sat 15 Jun 2024 17:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:19 +0000
Files and hashes:         1: SBzamSvrwjErj8mdO-NxnabwkR4.roa (hash: vKiTmCdWmbLjEiAcTl7Ov1YXawFiM7D1Bm9YxgWMJ64=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: ElltrCRi1MkbktgGrx+aWEOzpljGfWuCwQKlrSRRJvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:ab:24:40:53:f6:09:24:c3:d1:9a:fe:48:ee:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Jun 15 17:01:19 2024 GMT
            Not After : Jun 16 17:01:19 2024 GMT
        Subject: CN=751b24a131ddec440b0c270e4971eacf040ca84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:68:78:44:a3:e6:7d:26:ee:7c:46:30:5f:
                    87:4e:45:9b:f7:5b:97:52:e5:8a:0c:06:7c:bf:24:
                    bd:84:b4:98:77:b0:16:85:ab:d7:9e:ed:6e:5f:29:
                    f9:ae:eb:a5:29:d0:ea:a1:b5:8a:86:9a:aa:2c:01:
                    04:f9:9b:b9:a1:fd:79:03:48:71:61:33:45:d4:c4:
                    80:6d:29:ac:c2:b9:f2:a7:64:28:74:55:bb:8f:8a:
                    55:4f:4f:d8:7b:d1:dd:70:5a:90:49:23:9f:b8:b7:
                    66:d6:b2:32:37:3b:02:6b:af:e7:25:70:e2:2a:b9:
                    4c:b8:96:1b:28:f2:17:fe:2a:19:de:21:37:99:6f:
                    c2:a1:82:57:7d:0c:53:6c:6f:02:07:04:3c:80:37:
                    94:31:57:96:4a:03:a6:8d:55:d3:69:e5:ca:84:09:
                    90:e5:91:77:9b:ac:83:2c:01:5e:19:ea:72:3f:18:
                    b3:64:99:ac:14:b3:71:9c:95:dd:11:12:76:d3:47:
                    b5:8e:10:c2:af:bb:9b:07:ac:38:f5:2a:77:87:21:
                    37:2b:bb:72:04:ef:3c:ee:65:2c:09:20:65:56:ce:
                    c5:16:ff:f2:14:4c:a8:0a:cd:0c:d6:2f:cb:75:f2:
                    5c:2b:2f:67:d7:26:92:e9:48:45:1b:aa:dc:91:65:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:24:A1:31:DD:EC:44:0B:0C:27:0E:49:71:EA:CF:04:0C:A8:4A
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:08:b4:7d:1a:5e:c0:79:0b:5e:87:7c:e7:f0:71:f2:96:
         da:31:bc:72:de:df:0e:f7:fb:6e:de:38:02:94:e8:5c:ce:55:
         b3:64:ce:d1:b5:9c:bd:02:36:b0:da:c9:ec:e5:a6:20:9c:a1:
         2e:2d:7e:e0:dd:99:47:b3:20:10:3c:35:6e:7c:83:69:1e:2f:
         39:8a:e0:ee:b6:74:e7:b0:89:f0:b6:87:e1:c4:f8:25:4c:fd:
         e7:30:f4:09:fd:38:90:2c:7e:68:d0:f3:b5:5e:4c:36:ba:58:
         44:b9:5e:c8:e0:63:48:fd:2b:fd:72:3c:c3:e9:f1:16:7a:95:
         f8:35:25:93:b7:44:18:03:75:10:bb:7b:21:5e:04:af:da:85:
         cf:4b:a2:32:22:75:1b:af:2b:6f:c0:08:8b:a5:12:6f:6a:1e:
         48:cb:a3:6e:68:20:91:76:7b:77:a2:50:a6:d9:d3:7a:fa:dd:
         7c:05:42:55:e5:a8:04:59:98:5a:c7:02:63:0b:19:76:63:4a:
         61:e4:54:08:5a:08:90:b4:cb:76:ca:ba:94:06:0f:86:6f:b4:
         55:18:27:e4:0c:b6:b5:d4:2e:88:b5:e8:41:29:90:22:6c:30:
         ee:05:8b:b9:3a:e5:0d:96:43:ad:dd:25:7d:21:20:01:08:85:
         8f:ae:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:14:20 2024 by rpki-client on console-ams.rpki-client.org