Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File:                     jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier:          C0rEdhgLOsmzBsCyBuCsxVpFtKM9ryZ66cYDMcq4WNc=
Subject key identifier:   90:2A:50:1E:7E:0C:54:57:B2:48:50:BC:CB:E5:2F:7E:17:46:3B:B0
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer:       /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial:       0190753FDB77C1314C3C916644630145E8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number:          11F7
Signing time:             Tue 02 Jul 2024 21:00:37 +0000
Manifest this update:     Tue 02 Jul 2024 21:00:37 +0000
Manifest next update:     Wed 03 Jul 2024 21:00:37 +0000
Files and hashes:         1: 1-7BuW4c18A9-shwSRnUQpTejiQ4.roa (hash: YEQE3pfREqMPVnaqay7yi2xcUejDaFyQkq6Zl/K9vj0=)
                          2: B9IdnEavUOWqbg89LlBdOtqSME8.roa (hash: 1AofKW2xzq1yv8vFWS9X0apsqX21P2ljST1p14RXRko=)
                          3: LeEgTB-iHYqDiB9kLYxdJMiHgr0.roa (hash: KukJ6Yy0FRMML3fIebP2Chf/Kb7eNOVymFJkaJ2xgfU=)
                          4: RvpKbI8x-yYCjPQZqpyJsK8t3Co.roa (hash: xh3+pFsXpbnNCnvxohTy0aSmb2flguzy3/jSq4CXgAw=)
                          5: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: eehDLvbQnOOgrUzyoQg2NoNni3WlgasFOy6uySuzRPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:3f:db:77:c1:31:4c:3c:91:66:44:63:01:45:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
        Validity
            Not Before: Jul  2 21:00:37 2024 GMT
            Not After : Jul  3 21:00:37 2024 GMT
        Subject: CN=902a501e7e0c5457b24850bccbe52f7e17463bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:33:9f:be:f0:b0:9b:17:7c:98:73:3c:4d:
                    bb:00:2f:64:3b:33:9f:51:01:e6:18:90:d0:6d:01:
                    b4:80:e1:af:ce:5c:a3:4d:92:b5:c5:00:58:2e:5f:
                    1c:e0:f3:2c:25:b6:67:bf:bc:d2:a8:36:15:9a:68:
                    b1:90:0f:10:c1:55:29:8a:04:a3:c2:52:6e:ec:ef:
                    74:b1:15:1c:90:80:62:8e:de:94:7f:70:07:5b:13:
                    08:18:ba:39:36:02:1f:c8:e1:7c:e3:6e:b0:55:e8:
                    56:18:9d:52:a1:92:de:d0:14:da:b5:49:66:6d:8b:
                    99:9f:b7:45:1d:05:6a:86:46:80:f3:22:80:64:6c:
                    dd:e0:42:b5:6c:8d:65:de:85:59:e6:a3:fa:86:ce:
                    9a:c0:12:ad:2a:4b:fc:46:0f:e8:d7:92:d5:bb:62:
                    d0:b8:33:8a:c5:65:50:c4:df:97:36:3d:21:4b:fd:
                    e9:89:22:90:00:fa:75:1d:2a:93:fb:ce:40:ae:72:
                    ea:64:28:ed:6a:6b:67:81:06:70:bb:71:2e:44:d4:
                    01:55:01:c4:61:70:7f:fe:65:7f:7f:32:7b:3c:2f:
                    00:19:40:a2:89:35:a8:ff:ae:40:21:be:24:0f:1e:
                    32:15:4c:90:91:99:5b:84:a6:cb:9e:78:b6:f2:dc:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:50:1E:7E:0C:54:57:B2:48:50:BC:CB:E5:2F:7E:17:46:3B:B0
            X509v3 Authority Key Identifier:
                keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:5d:b8:3a:54:68:90:f1:0d:2d:10:67:5a:5a:a9:24:c5:
         2b:ba:21:a5:d4:c4:be:4a:06:26:13:c6:cf:4f:c3:57:d3:d9:
         77:94:c1:aa:41:1e:64:65:9e:b9:fc:88:77:01:73:71:ca:f4:
         e7:24:d2:63:7c:4d:e3:f8:9f:83:61:70:2d:65:03:9e:05:93:
         18:0e:24:99:9e:b3:5c:60:56:71:52:61:c6:59:75:27:7e:d1:
         d0:78:46:f4:1e:a3:1e:35:77:7e:e7:8e:d2:84:8d:53:75:af:
         15:ca:9d:02:9e:e7:c8:76:78:63:e5:46:a1:ec:b8:c5:92:ce:
         3f:78:32:8c:e2:f6:cd:f9:bd:dd:76:08:ef:e8:0b:b4:7b:27:
         71:70:40:da:f3:42:b4:33:a4:fd:d8:ec:bf:be:0c:47:f3:bb:
         0b:c1:81:92:48:b6:46:87:86:27:27:e3:7f:18:d5:2b:40:b7:
         e5:17:ea:91:de:65:26:81:ce:a0:1e:a1:b5:fa:1c:d9:6e:98:
         a4:03:9d:43:73:4f:b6:f1:57:22:f0:ee:45:1f:28:b0:59:7d:
         53:31:3b:37:d5:32:03:62:fd:66:24:d0:e5:8d:41:67:08:5d:
         df:74:b5:fb:76:fb:39:0d:c6:9a:9c:fb:fc:75:9f:3d:92:0e:
         b0:79:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:52:18 2024 by rpki-client on console-ams.rpki-client.org