Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File:                     p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier:          iObms4lxiAiLzHYPv+Fp9WsqA6UAQLVXqIiDurfkxbY=
Subject key identifier:   16:CB:70:71:19:26:DE:4A:92:4B:F7:F9:08:4B:6F:90:60:46:87:87
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer:       /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial:       019043E62499432659B942DA65B509EFD43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number:          0EA7
Signing time:             Sun 23 Jun 2024 07:01:14 +0000
Manifest this update:     Sun 23 Jun 2024 07:01:14 +0000
Manifest next update:     Mon 24 Jun 2024 07:01:14 +0000
Files and hashes:         1: clItUqdoXFKPCQyY9fx0oAUKGpI.roa (hash: louGrZEHNq3k3En8k8npSVHkPDa1hojbHf/52qkHo/0=)
                          2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: xYWARSnWwizmvcyHArVTwscfsKR8DJ8gdD96t4nsxCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:e6:24:99:43:26:59:b9:42:da:65:b5:09:ef:d4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
        Validity
            Not Before: Jun 23 07:01:14 2024 GMT
            Not After : Jun 24 07:01:14 2024 GMT
        Subject: CN=16cb70711926de4a924bf7f9084b6f9060468787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:d4:04:f3:5e:06:2d:fc:8b:1a:80:50:4b:
                    42:55:dc:e0:92:cb:39:c0:23:ef:e5:82:33:a8:53:
                    21:5b:06:61:78:b2:fb:6c:08:85:d1:62:54:97:03:
                    90:ab:f9:e6:bf:bf:f2:c9:ef:aa:13:e9:3c:1e:40:
                    3f:5c:b0:37:63:0e:5a:07:49:18:c3:30:54:c3:88:
                    fd:20:bf:f4:ab:c7:82:c0:27:d2:a1:24:3a:31:43:
                    93:96:58:31:af:2a:00:53:a2:89:94:c9:d0:87:a4:
                    f6:3f:ac:54:0b:30:cf:08:89:ba:8b:49:51:6a:8d:
                    78:7a:39:67:98:82:32:21:3a:0c:6e:1f:f8:71:c1:
                    d1:a8:d4:53:9c:12:1a:59:18:46:91:02:29:99:b3:
                    70:ad:5e:5f:ce:56:a2:1d:5d:28:81:ae:33:83:52:
                    5b:81:12:58:b0:57:0a:c8:b5:0b:1c:8b:55:2e:83:
                    43:ea:5d:d8:0d:2d:c9:43:ec:87:0c:55:c0:ad:bd:
                    c2:ca:5f:fd:a1:61:df:5a:93:bd:ad:51:13:9c:76:
                    db:96:22:6e:0b:e5:2f:a5:fd:ee:19:01:62:f3:3b:
                    57:ce:78:05:64:48:c2:aa:c3:e1:c9:9b:08:d9:39:
                    32:6b:e2:eb:d1:ee:ba:4f:ac:af:d5:b1:82:79:6d:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:70:71:19:26:DE:4A:92:4B:F7:F9:08:4B:6F:90:60:46:87:87
            X509v3 Authority Key Identifier:
                keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:04:52:c7:47:fe:4b:bc:94:f3:90:9b:92:44:0e:a1:2d:be:
         c2:98:fd:4b:f3:b6:bb:57:61:b1:41:8a:37:ce:4a:96:ea:84:
         95:d3:ab:35:c7:61:9c:a3:77:2b:65:a8:f5:2d:01:51:28:69:
         84:9c:a0:62:95:83:14:e7:a7:22:96:82:4e:84:30:6b:a2:9c:
         6a:2d:86:c7:40:e2:70:0b:b6:4c:e7:59:49:72:f2:32:f0:9e:
         72:63:66:eb:70:7e:df:26:5f:4c:a5:cf:fd:4d:07:50:0d:a1:
         43:fc:9a:bf:ad:61:90:65:05:de:0f:dd:7b:00:e4:44:9b:b4:
         15:6f:2c:c7:9b:44:f0:3b:72:d4:72:4d:5e:91:8b:47:5e:1a:
         e9:34:05:34:6e:e0:bc:b5:9d:1c:e2:4e:3f:07:72:54:b1:98:
         fb:c4:6a:4c:75:cd:bf:14:5a:c8:8d:69:9a:d8:d6:59:be:48:
         45:4b:65:7f:7d:f9:82:fa:6a:d4:83:98:b9:00:54:eb:c3:41:
         0b:6e:ea:0a:dd:bb:c2:c8:06:c8:25:d7:37:04:be:5e:f6:21:
         59:e3:2b:9b:6d:02:a2:2b:37:1a:8b:eb:60:03:a1:4f:8c:cb:
         16:43:a8:05:ad:c2:ce:dd:5c:9e:cb:a6:5d:b0:da:2a:6e:a9:
         52:80:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:13:10 2024 by rpki-client on console-ams.rpki-client.org