Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File:                     Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier:          d72thdEWM8iWRigWF7W7TRDhzAxuMU+3YuV2la0YY4w=
Subject key identifier:   7A:72:0A:7D:8F:76:86:CC:A1:E6:92:D0:C7:ED:E6:44:18:EE:3F:64
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer:       /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial:       019076C08DEC213464888F3F9305D870AF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number:          1188
Signing time:             Wed 03 Jul 2024 04:00:49 +0000
Manifest this update:     Wed 03 Jul 2024 04:00:49 +0000
Manifest next update:     Thu 04 Jul 2024 04:00:49 +0000
Files and hashes:         1: FoQRgM8BnpzoZHF8ZymmbE_DzuI.roa (hash: VtgFeGz98uhmpWtZ/9J00fC8b236yzM8nS+m1C/NI6A=)
                          2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: lXdsj+HsMTw0hTQigxAAZYi3Jf98CyHld4+XWJ0+pLo=)
                          3: UPuik-ow8ItaTzb_W4LHg2dMNIM.roa (hash: SIZCE3igrb5N8MZ80UtQhJ9QI2nmdHpGelrfxXnj5l4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:c0:8d:ec:21:34:64:88:8f:3f:93:05:d8:70:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
        Validity
            Not Before: Jul  3 04:00:49 2024 GMT
            Not After : Jul  4 04:00:49 2024 GMT
        Subject: CN=7a720a7d8f7686cca1e692d0c7ede64418ee3f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:06:47:26:eb:fd:d6:80:0f:6c:11:e3:b9:
                    64:f9:d7:d7:fb:dc:bd:46:d3:c3:24:8d:70:fd:b7:
                    be:10:d9:ee:26:24:50:6e:58:57:33:96:fe:81:0f:
                    b3:35:86:95:7a:32:48:ab:4e:d1:fc:33:dd:1a:38:
                    c9:c9:9e:34:e5:a8:a0:be:92:6a:05:87:7f:11:b7:
                    39:8a:62:26:81:e7:9f:f6:36:15:53:5a:fc:3f:c0:
                    0e:82:28:3e:f8:b1:c3:9b:d4:d9:46:21:86:d9:d9:
                    23:4f:c2:77:d5:fb:59:c9:d2:c1:00:b2:43:81:ed:
                    18:5c:49:e1:63:6c:6e:cd:ef:8e:59:2a:5d:d0:1e:
                    f2:04:dc:4b:39:84:fb:7f:eb:83:4d:7e:4f:e2:74:
                    31:5a:c5:c5:fe:e4:d6:2e:1b:67:f3:e8:2d:72:fa:
                    77:6e:39:cc:57:ec:d7:9e:96:eb:2c:69:d2:39:1a:
                    cc:d6:56:44:53:f9:cf:6f:cf:c9:c9:43:38:39:00:
                    69:27:f7:f4:a8:15:b0:46:ac:c5:9a:ac:61:e8:fb:
                    92:e3:50:0c:bb:bc:bb:71:8b:aa:c3:54:ea:7f:6c:
                    3e:63:6f:1e:75:69:d2:8c:38:46:3a:03:b3:cd:1d:
                    f0:53:47:b9:b0:1b:12:4d:fe:0e:1c:e2:c6:dd:58:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:72:0A:7D:8F:76:86:CC:A1:E6:92:D0:C7:ED:E6:44:18:EE:3F:64
            X509v3 Authority Key Identifier:
                keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:31:1b:32:e9:df:7d:b5:a3:c9:78:88:33:c0:40:58:b5:
         35:1b:88:b4:77:f6:c6:bd:99:0b:60:2d:28:89:97:3b:19:df:
         52:7d:0b:16:a7:0f:31:72:73:79:20:02:30:af:bb:28:1f:6c:
         6f:6f:62:66:17:e5:7d:98:d4:cc:e9:0e:0a:cf:13:62:7e:37:
         64:80:a2:dc:ff:00:f0:38:29:e1:d2:f2:47:d2:5e:df:af:a1:
         1d:87:a6:42:ff:0d:04:ca:ad:0b:c6:12:36:b3:0a:6d:05:fb:
         84:7a:e1:50:ae:28:57:b1:a5:26:32:68:60:b9:79:74:a7:d4:
         4c:a1:78:25:ae:a4:11:e9:2f:c8:4b:30:39:a2:f2:0b:3c:76:
         15:35:24:47:3d:15:b6:09:00:31:70:eb:53:04:a1:4a:e3:59:
         f7:1a:7a:03:b4:17:c0:39:85:0c:c8:f7:3d:69:51:9d:ce:ac:
         d5:2b:b5:07:74:a0:fc:45:9f:23:02:89:bd:08:f6:fe:52:b7:
         e4:f4:71:02:74:0e:47:9d:65:cc:d8:c5:4b:7f:9a:dd:29:36:
         91:e5:5c:27:6e:c8:a2:c0:f2:70:79:3a:da:65:19:bd:ea:69:
         00:09:d7:ea:e1:4a:a8:62:6a:15:7d:2e:11:8a:1e:8e:f4:c4:
         6f:4a:09:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 07:11:52 2024 by rpki-client on console-fra.rpki-client.org