Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          bt85Z0L5JSCRDkPd2w/antMCZI31ezqJVn1QN6oNDlo=
Subject key identifier:   D8:3C:33:8D:57:E3:84:4B:C4:AA:B7:5F:58:3A:CD:9A:9C:A0:83:93
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       018FB26A6C11E3E5045E140747BB3DA1E9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          063B
Signing time:             Sun 26 May 2024 01:01:09 +0000
Manifest this update:     Sun 26 May 2024 01:01:09 +0000
Manifest next update:     Mon 27 May 2024 01:01:09 +0000
Files and hashes:         1: Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa (hash: E9QuOpsJt3WWAQmPTsAaJVKm4LJn8B+KPrsU7qRdbWc=)
                          2: HB8Cm2pLjebMcj4OoJQv0fABZsY.roa (hash: UljQoxaG0zud6s4ArsAKP19kdWk6dP1112SMV69V36o=)
                          3: MAXZTMOIkdmvwOtOSxRT4d9V0HQ.roa (hash: OAAsiaIoVWs5YaIX8hinIFpmOAVZYAt6NtBN6RbOhts=)
                          4: _JppHjpM3kKh5wiTLut7j2H5ZxY.roa (hash: 0iJxz1sWSE63EVfNAFRkNGVYEEqn1YsZAyBPL7SaIZs=)
                          5: kinZNaw5TfeDCJOlRl8hPqbpnyY.roa (hash: VTN+ILF9dzwvGDzgdTEAKeN/gwpJIZajtmFL7VAbcWc=)
                          6: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: HWjrc6MC3U58n03m3lfbrXjIIjcPCyoj4r0TjrAO5Iw=)
                          7: ybS-EzQPwrApIgbEorR_sY798fE.roa (hash: lDTyKZn7BpjHSH4bVKOrG+FhzPW6IkaHc7lUMfClApA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:6c:11:e3:e5:04:5e:14:07:47:bb:3d:a1:e9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: May 26 01:01:09 2024 GMT
            Not After : May 27 01:01:09 2024 GMT
        Subject: CN=d83c338d57e3844bc4aab75f583acd9a9ca08393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:6e:0f:8f:04:8b:d7:bc:d5:13:da:f6:f1:
                    83:85:a8:8b:5a:fa:60:65:29:ba:10:1f:d2:d3:c4:
                    36:45:44:73:76:ae:5c:a4:d8:c3:9c:08:16:37:ee:
                    33:40:25:f4:d9:7e:29:df:fc:0c:72:31:3d:0a:35:
                    6b:c8:2e:8f:00:7e:83:3a:50:72:66:4c:bd:e8:d6:
                    79:b9:dc:ac:e2:9b:d3:30:3d:40:ba:ee:d6:7d:74:
                    b8:42:3d:2a:b9:6c:17:fe:f0:52:c3:80:9f:53:ec:
                    52:16:bf:26:b8:6e:35:b7:dd:bd:82:ec:ba:b3:d2:
                    b2:e1:c7:7b:d0:64:de:6e:c0:22:55:a8:5b:26:02:
                    b1:63:6f:6e:5a:57:ff:a6:45:f3:de:0f:0c:3d:ae:
                    3c:82:c0:7a:f2:4d:b0:69:d5:db:7e:30:26:61:50:
                    ba:b0:bb:4b:c9:86:5a:36:26:21:c3:7e:2d:e3:3c:
                    da:90:75:6f:d5:ec:74:d9:b0:6e:4a:dc:4a:c9:77:
                    26:a0:f7:db:66:ba:11:57:82:52:a8:19:d9:f3:3f:
                    ab:da:37:ac:45:42:a2:3e:8c:65:20:72:6f:42:13:
                    58:67:0a:5b:3c:4c:62:b4:32:a5:c3:50:ec:de:01:
                    9b:06:6f:51:28:ad:a1:f0:68:0e:bd:8f:b9:51:60:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:33:8D:57:E3:84:4B:C4:AA:B7:5F:58:3A:CD:9A:9C:A0:83:93
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:7c:d6:a3:e0:f1:f5:5f:12:9f:67:df:01:27:da:20:2c:
         c9:a6:94:c6:1d:1a:05:ac:20:53:80:db:d0:66:12:7e:1d:17:
         5e:64:78:52:40:23:1e:55:38:ee:45:75:28:18:b5:6f:0c:da:
         a6:10:0d:f5:dc:43:89:b3:7f:71:92:bf:26:68:da:d4:5e:db:
         d3:77:51:d2:b6:06:81:e8:65:cc:d3:03:c7:ef:4b:aa:f1:41:
         16:9d:9c:78:6c:bf:f7:57:a6:09:f6:51:85:aa:8f:da:26:75:
         ea:e8:11:3e:26:4a:36:a9:02:d4:3b:a0:f9:44:e7:28:af:70:
         ff:7a:22:a4:08:e0:42:5a:0c:66:e9:bd:b7:1c:75:ce:1e:60:
         67:a1:d1:b5:ed:a1:d4:b6:6b:1d:64:86:a8:b3:69:c5:6b:cb:
         4c:08:be:2c:bb:92:d3:3c:a7:42:1f:2b:54:6a:72:e1:50:25:
         e7:5b:ed:60:c9:f1:fd:2a:99:c9:20:91:8e:de:2b:e6:a0:d1:
         89:16:c4:40:7c:4b:21:ee:32:1b:6d:b0:47:65:8b:9d:2c:2c:
         90:cb:ac:bd:06:2e:1a:98:c5:b6:bf:2d:a8:8c:8a:5a:7f:74:
         44:7f:41:81:5a:e2:c4:a7:43:59:f4:09:6e:24:01:a6:88:2f:
         87:07:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 06:56:41 2024 by rpki-client on console-ams.rpki-client.org