Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          v5wgjFv6YIcPKTEC7f21e2RBoDNP0F9o3CkDbKvfKj8=
Subject key identifier:   A2:EB:9A:26:59:C8:F9:33:8D:77:30:03:C2:9B:26:A6:D1:0B:E9:75
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       018F88240629F67F736EEB9047A5D9365A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          0E89
Signing time:             Fri 17 May 2024 20:00:13 +0000
Manifest this update:     Fri 17 May 2024 20:00:13 +0000
Manifest next update:     Sat 18 May 2024 20:00:13 +0000
Files and hashes:         1: SBzamSvrwjErj8mdO-NxnabwkR4.roa (hash: vKiTmCdWmbLjEiAcTl7Ov1YXawFiM7D1Bm9YxgWMJ64=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: adcsidgg0Nu/hI4sunl4JZQW3j9V3P+3jSbIdQvbG8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:06:29:f6:7f:73:6e:eb:90:47:a5:d9:36:5a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: May 17 20:00:13 2024 GMT
            Not After : May 18 20:00:13 2024 GMT
        Subject: CN=a2eb9a2659c8f9338d773003c29b26a6d10be975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:8b:cb:e9:3f:17:87:ae:72:82:22:80:64:
                    8a:ef:72:71:b9:b4:43:97:a7:35:65:ef:89:af:cd:
                    ce:b1:9d:fe:54:7e:ac:38:67:05:49:96:03:44:e6:
                    2b:ce:e2:7a:b4:4c:6c:72:43:31:0d:3a:c8:11:71:
                    46:8b:38:79:36:dd:d6:28:e3:a1:31:e4:01:24:96:
                    06:0e:a9:ba:2f:99:ac:42:06:33:e1:f3:4f:97:b3:
                    4b:11:40:5a:9b:a8:cd:af:a6:a1:6f:17:40:ab:bd:
                    c6:f8:23:2d:42:30:83:ff:3b:b6:ae:74:52:95:94:
                    41:03:c5:02:8b:d9:36:81:51:84:89:95:a3:3d:7e:
                    bf:e9:86:81:2b:3c:59:e1:8b:a4:b3:f2:d7:c8:e2:
                    be:a1:5e:b3:64:f6:71:dc:c3:13:44:6f:ed:53:47:
                    65:ea:53:57:64:46:4c:3c:ab:82:79:3b:99:3e:8d:
                    a1:5b:f3:2d:cb:e8:28:5d:4c:2c:e6:f2:35:d3:2d:
                    d2:27:16:8e:6b:32:06:02:79:a8:4c:33:a3:11:31:
                    42:4f:3d:c6:f6:38:63:ea:20:68:43:3b:77:09:d6:
                    38:8d:81:be:7e:56:26:b2:d0:83:c7:40:64:68:91:
                    e3:48:f4:98:b0:e4:9f:37:91:76:09:09:79:9f:59:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:9A:26:59:C8:F9:33:8D:77:30:03:C2:9B:26:A6:D1:0B:E9:75
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:49:89:61:3c:a3:be:1f:7c:3a:b3:5e:6f:cd:e2:4a:a1:
         29:b1:dc:8c:49:2d:fb:71:fe:6a:2d:87:86:75:d5:bf:21:33:
         2e:88:03:42:e7:1a:f5:3a:23:10:5a:25:e2:17:04:27:72:4b:
         5b:82:77:d5:75:8d:07:cd:a6:d2:30:36:9c:75:67:da:d2:c3:
         de:fc:f1:97:a7:6d:78:3f:c3:b8:55:50:77:bb:99:20:ad:12:
         62:53:bb:09:6e:12:dc:38:51:be:f9:3f:ec:08:af:39:a5:9d:
         ea:aa:6f:b5:55:75:43:fc:2e:0d:7a:49:51:d4:4c:34:43:8d:
         e8:50:a1:5a:f2:70:74:da:7b:29:f6:0c:b3:48:6d:bc:52:57:
         f0:1a:96:d3:58:11:80:c2:16:eb:19:42:2a:8e:af:25:44:49:
         75:28:a7:fd:73:a3:d0:a2:d2:e9:0a:dd:53:25:91:86:8a:78:
         6c:1a:ea:a9:78:9c:9d:e7:23:3b:44:5e:c1:54:e7:e0:9b:59:
         bb:93:21:6a:73:99:eb:0b:a8:15:4d:85:1a:4f:86:9a:94:b9:
         fd:54:fb:c3:fd:f8:a9:83:a5:24:89:9c:cb:83:7b:6f:da:dd:
         3e:2d:05:35:c8:e9:e1:43:61:10:41:95:19:d2:b0:a0:86:64:
         03:47:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:13 2024 by rpki-client on console-fra.rpki-client.org