Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File:                     Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier:          Udld8AdWTN+Bsgx+th2xIuE+45kqMIFZ3ClPbYBV1cA=
Subject key identifier:   B7:12:5D:98:E3:6B:34:4E:F9:AF:C6:59:AD:DF:D2:6C:2F:AD:1D:98
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       01905F947D2BB8DF10E71CB1715801016570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number:          09B4
Signing time:             Fri 28 Jun 2024 16:01:25 +0000
Manifest this update:     Fri 28 Jun 2024 16:01:25 +0000
Manifest next update:     Sat 29 Jun 2024 16:01:25 +0000
Files and hashes:         1: 03k1oq3nbC-8btzf-f6ng_K0SXM.roa (hash: CqqnJd5b7lutvB0LQGyi5CDj7BWPrLVo+9hF+7C0sD8=)
                          2: QU21eDYv3e8gZZ00oA406e9-6Pg.roa (hash: ydqdwz17HAKaVFnJaqWbyndxytSb3SqvaFJqizhsN7A=)
                          3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: /dto/ZxE35zIfQMJ2C7JNW2eT8B7gLYBbjNdKiR4UIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5f:94:7d:2b:b8:df:10:e7:1c:b1:71:58:01:01:65:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Jun 28 16:01:25 2024 GMT
            Not After : Jun 29 16:01:25 2024 GMT
        Subject: CN=b7125d98e36b344ef9afc659addfd26c2fad1d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:e6:39:1c:01:ba:1a:ab:b2:05:b1:9a:4f:
                    47:f8:40:b3:d9:2a:e5:5b:b7:f2:4e:f3:74:55:d9:
                    69:6f:2a:3e:78:e1:51:a7:23:e7:52:f0:20:93:26:
                    65:84:85:f0:05:2d:ba:ab:a5:dd:2c:18:d3:28:d8:
                    dc:fa:43:78:93:3f:1c:e1:9c:09:b3:c3:dc:6c:e8:
                    16:6b:1e:96:f4:58:9e:0b:71:8a:de:7f:79:9d:6e:
                    f7:52:20:bc:ae:bc:5f:37:2d:83:09:7f:76:d7:21:
                    47:75:4e:4e:e0:ec:8e:26:0d:31:e5:16:97:d4:21:
                    d2:a0:32:58:df:3e:dc:72:b9:d5:71:9c:0f:1c:5e:
                    bb:b7:a8:fc:3f:e4:a4:66:2e:12:0e:20:bc:d3:da:
                    9f:de:f4:ad:93:8a:2f:85:95:9d:c7:d4:6b:0b:3d:
                    c8:cb:ee:ea:f2:99:6e:d0:fe:b5:3c:41:42:37:67:
                    54:da:bf:bf:71:f2:ed:33:05:03:78:74:3b:83:44:
                    2e:21:28:00:99:78:32:b4:73:e9:c7:4d:3c:85:1e:
                    1f:1e:96:72:f6:9e:3c:13:4f:be:15:aa:f6:e6:98:
                    d5:51:50:46:b4:9b:20:cb:20:b9:1c:64:22:0e:8e:
                    3e:1e:4f:a3:5e:5d:aa:34:8c:a5:64:ed:06:da:2c:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:5D:98:E3:6B:34:4E:F9:AF:C6:59:AD:DF:D2:6C:2F:AD:1D:98
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:92:dd:81:28:fb:d1:72:0c:12:ca:4b:bb:b5:77:03:18:b1:
         2f:05:86:0c:53:11:4b:5e:fc:a2:6f:b0:8f:a2:cb:1b:e8:e0:
         2c:43:77:6a:54:e4:66:ff:ff:9c:11:a3:e0:e5:00:ad:bf:95:
         fc:f2:44:d5:73:d5:3e:b9:09:2b:3b:63:53:ad:81:42:70:68:
         8d:74:2a:40:62:9e:95:2f:02:39:fa:59:a7:ca:e9:bb:be:73:
         5a:72:30:2b:40:7a:3b:aa:bf:ef:9b:27:0f:51:b5:c5:90:78:
         51:07:ef:99:d4:30:1c:5c:06:10:60:5c:a6:6a:50:5d:98:27:
         2d:f3:9d:dd:a2:09:90:7c:be:3e:71:b3:89:ac:8c:10:e2:cd:
         9d:84:41:b4:ca:46:4d:2b:1a:bc:75:07:4e:86:de:80:d2:0a:
         0b:b4:20:9e:7e:ce:a4:f0:f0:39:7f:38:83:23:0a:da:50:15:
         1c:2f:ff:36:de:6b:5c:2a:0a:17:11:c2:6f:4d:dc:58:50:b0:
         cb:6f:ab:75:64:f5:40:04:70:c3:4d:77:17:5f:75:bd:11:36:
         bd:cd:6e:5a:73:6d:a4:b5:aa:e0:03:44:b3:ef:d8:6d:66:35:
         fd:1d:bd:ad:3f:db:6c:4d:73:91:54:41:cd:fb:c8:b0:72:b7:
         49:e5:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:13:21 2024 by rpki-client on console-fra.rpki-client.org