Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
File:                     7HmntUyMlNBsovaFlxokSfuPzs4.mft (raw, json)
Hash identifier:          WM1+8yX6uN6tkw1DwK4tqylgYkB7MNZAyLoSOB3wABE=
Subject key identifier:   5D:EB:0B:D0:FE:FB:E7:E4:1A:14:13:B6:83:85:A8:30:92:E2:60:94
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Certificate issuer:       /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial:       01905245FAAFDEC8901BE24CA0AE163C1424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
Manifest number:          03A3
Signing time:             Wed 26 Jun 2024 02:00:36 +0000
Manifest this update:     Wed 26 Jun 2024 02:00:36 +0000
Manifest next update:     Thu 27 Jun 2024 02:00:36 +0000
Files and hashes:         1: 7HmntUyMlNBsovaFlxokSfuPzs4.crl (hash: k+UnsxfI4sOFDNvwGjz7ssAejdxtTzIPBIYD2kTwRCc=)
                          2: CY9pxQP29DJmFDZcd4KmLPjqxdY.roa (hash: WhKTVhwXKp44nRtN57rhFQOTpocBZFovfMSF6/2r9ZQ=)
                          3: Kw2aRR5y3pBjZ2mLG8VzTBLdygY.roa (hash: 7DWepCb4gUSfs+JdZ6LnKE2zBQ11JtzAlvXWbrSwJC4=)
                          4: MYPH5XeE38V6Lca3I4JfxaSm6js.roa (hash: KCwgIglSq6OXzW0Yf00xDQiEWJ8/6OWeQR2JaZURpCw=)
                          5: UobsdjDTC0oRtb3S5cgdpjMaQQA.roa (hash: P4A9b/kw3kxGkvso1PBRJ2d4VrVDdWUOSKeFz8txf+c=)
                          6: iGjGn5gZjf3G3PrNDMkcYSy_inM.roa (hash: 3p+HfmQfsCCKVnKoNxOWG3b3ouKSQAVqE6Sb9frtEm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:45:fa:af:de:c8:90:1b:e2:4c:a0:ae:16:3c:14:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
        Validity
            Not Before: Jun 26 02:00:36 2024 GMT
            Not After : Jun 27 02:00:36 2024 GMT
        Subject: CN=5deb0bd0fefbe7e41a1413b68385a83092e26094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:4e:97:94:6e:4f:a4:28:64:11:6e:6b:27:
                    f6:a9:98:f1:d5:c5:18:52:3c:a3:5b:6d:92:9b:d7:
                    0f:79:84:9c:04:94:33:55:41:6a:67:85:cb:31:06:
                    69:1f:7f:a4:77:b5:4b:5d:9c:4d:87:3d:c8:8e:43:
                    7b:e2:21:60:52:4d:b0:af:d5:ae:b3:6f:42:ab:26:
                    ea:ea:9a:f1:6f:e1:a6:09:5a:b2:8e:93:b1:1b:4b:
                    68:55:8f:f1:d6:e6:97:c6:76:93:40:41:d7:33:20:
                    2e:e2:74:24:07:5f:94:d9:a1:c0:dc:ab:4a:46:74:
                    75:d2:56:89:33:bc:4c:be:b9:09:46:18:b0:00:9e:
                    2e:a3:02:99:77:70:32:3e:e7:27:e4:ec:79:c1:d9:
                    6c:f7:a8:6d:21:b7:b2:d6:a4:57:70:ea:15:1a:d7:
                    cf:e8:b8:2e:9c:bb:97:fe:74:54:3f:09:f7:bd:97:
                    86:af:f0:1b:4c:da:10:ff:a2:fd:96:dd:29:5f:cb:
                    18:e3:ce:84:8b:0e:0f:4a:87:41:a3:a6:a6:df:57:
                    bb:d7:24:c2:11:48:80:70:74:01:5a:b3:93:64:91:
                    7b:75:a5:6c:ab:1c:f7:5f:06:81:cd:0d:ca:26:53:
                    6c:d5:9d:3f:9a:88:26:fc:8d:25:36:5b:46:43:22:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:0B:D0:FE:FB:E7:E4:1A:14:13:B6:83:85:A8:30:92:E2:60:94
            X509v3 Authority Key Identifier:
                keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:f1:49:2d:61:8a:4d:b1:96:b6:a1:e8:41:35:f1:32:8a:
         d7:5e:98:38:13:9f:9b:70:bd:0d:ec:99:21:19:1c:ff:a4:b8:
         ff:90:ec:d7:32:44:b1:9f:d0:9b:24:fd:42:a6:87:d5:86:7d:
         a8:eb:b3:96:98:fc:18:17:e2:85:f5:fa:eb:8f:bd:6e:93:59:
         50:72:fb:09:2a:3f:0b:50:49:d3:f0:d4:e8:7e:48:d6:4b:c1:
         2b:4c:84:f3:3f:c5:83:6c:b6:5c:0a:07:22:ee:3c:59:fa:e0:
         58:c3:a9:dc:fa:d6:e8:9e:a4:92:29:a0:0c:f3:74:2b:75:ec:
         6b:45:b1:7f:e0:93:a6:a3:50:be:67:56:98:6f:86:bc:71:36:
         0b:6f:d3:3d:a2:80:1c:0d:60:9e:d9:7f:ba:ef:ce:64:4d:a0:
         e6:f2:d9:98:65:d3:bf:32:dd:22:59:b6:16:aa:77:3b:20:90:
         ea:4b:f0:99:59:b4:7a:c7:07:43:c3:41:13:74:8a:e5:23:c6:
         4c:a4:91:12:88:07:02:f9:22:32:55:cd:5d:dc:a3:69:ce:85:
         1c:22:00:47:08:0d:3e:2a:ec:50:90:a6:49:cd:87:f8:3b:9f:
         07:d8:cb:98:d0:f9:b1:ec:d8:dc:54:08:44:83:b6:2e:32:d1:
         e8:d0:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:31:30 2024 by rpki-client on console-fra.rpki-client.org