Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          zwjI84NX3BOb4ehWfNhUp5ZIrcOAIzp7vGMv/2572YI=
Subject key identifier:   A3:AF:1C:3E:B3:4D:41:04:9E:DD:3E:24:FC:3C:A9:48:36:84:F8:2D
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       018F8410946BAE2003B97D60EA07DA86A1A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0623
Signing time:             Fri 17 May 2024 01:00:30 +0000
Manifest this update:     Fri 17 May 2024 01:00:30 +0000
Manifest next update:     Sat 18 May 2024 01:00:30 +0000
Files and hashes:         1: Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa (hash: E9QuOpsJt3WWAQmPTsAaJVKm4LJn8B+KPrsU7qRdbWc=)
                          2: HB8Cm2pLjebMcj4OoJQv0fABZsY.roa (hash: UljQoxaG0zud6s4ArsAKP19kdWk6dP1112SMV69V36o=)
                          3: MAXZTMOIkdmvwOtOSxRT4d9V0HQ.roa (hash: OAAsiaIoVWs5YaIX8hinIFpmOAVZYAt6NtBN6RbOhts=)
                          4: _JppHjpM3kKh5wiTLut7j2H5ZxY.roa (hash: 0iJxz1sWSE63EVfNAFRkNGVYEEqn1YsZAyBPL7SaIZs=)
                          5: kinZNaw5TfeDCJOlRl8hPqbpnyY.roa (hash: VTN+ILF9dzwvGDzgdTEAKeN/gwpJIZajtmFL7VAbcWc=)
                          6: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: ODyqfMtvVgQsPum1KV7v0jc/nPBr76uGVL3LDhz1KTA=)
                          7: ybS-EzQPwrApIgbEorR_sY798fE.roa (hash: lDTyKZn7BpjHSH4bVKOrG+FhzPW6IkaHc7lUMfClApA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:94:6b:ae:20:03:b9:7d:60:ea:07:da:86:a1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: May 17 01:00:30 2024 GMT
            Not After : May 18 01:00:30 2024 GMT
        Subject: CN=a3af1c3eb34d41049edd3e24fc3ca9483684f82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:cd:c7:2b:06:0d:da:bc:85:9a:38:0f:25:
                    e0:05:b7:af:71:7e:30:0b:a2:31:3b:4d:39:d9:2d:
                    8c:2e:96:cd:70:67:b5:06:d0:18:e7:c6:4e:42:8b:
                    b9:c5:80:ab:9d:80:a8:c7:67:1d:a3:6a:d7:62:7a:
                    58:74:33:60:00:d0:14:70:25:1a:1c:d3:e8:dc:d6:
                    b3:8b:6b:3c:f6:92:4f:8b:27:d2:43:c5:0c:fd:e6:
                    12:de:2e:8b:ea:e7:b1:d7:86:69:91:e0:02:71:52:
                    b5:94:6c:5e:00:b7:fe:76:cd:28:14:ba:50:ca:b6:
                    1d:09:14:c7:f3:92:9b:8f:cb:85:18:12:0e:83:96:
                    2f:b8:97:b7:0c:57:b9:42:e1:ad:20:6a:3b:6d:2f:
                    95:0a:10:49:29:4b:b7:b7:d9:0b:02:56:00:80:a4:
                    bd:b4:b7:44:51:1a:00:67:6c:36:80:d0:32:0f:13:
                    f1:d1:a3:27:91:6f:c1:f2:e8:4d:c5:47:25:a3:d3:
                    c9:db:74:cc:da:99:9f:7e:32:6f:c9:75:89:bc:cd:
                    a1:32:f7:54:db:c8:46:d7:ea:58:ea:87:4f:95:e9:
                    cb:de:1f:b1:9d:55:f9:64:32:b8:89:a9:b2:48:ad:
                    10:b3:b9:30:ac:17:c1:01:d5:8d:35:0e:fe:41:52:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:1C:3E:B3:4D:41:04:9E:DD:3E:24:FC:3C:A9:48:36:84:F8:2D
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:50:9b:cf:36:87:6c:53:4b:b1:1d:2b:5b:72:98:88:6c:
         49:f3:9e:20:6a:af:0a:73:71:a6:96:30:c8:f8:eb:3a:c9:e7:
         a2:bb:a6:07:37:ea:e9:eb:30:ec:a0:28:27:c5:b0:a6:d0:4f:
         f7:ac:45:7e:4c:19:d7:b8:1f:66:a9:bd:b5:26:12:7a:bb:42:
         61:f1:13:f6:87:76:ab:08:b2:11:49:7a:c9:f1:12:bf:a9:5f:
         2f:dc:8c:84:82:b2:2d:bd:9d:c5:8d:48:23:fc:a1:cb:91:61:
         ed:d3:e4:e8:9f:e5:7e:ce:5d:59:5c:4f:fe:c6:2d:d2:ea:2d:
         e3:76:cc:75:44:89:b0:0c:5c:16:ce:7d:f9:af:70:6d:ad:9d:
         f1:e5:f0:93:2b:c3:7b:d0:3b:51:6b:2b:a0:aa:68:2e:9d:38:
         1f:58:aa:0f:bd:ec:fd:a5:bd:71:df:78:a8:87:26:9d:bf:33:
         e4:8c:59:e3:fc:70:6e:14:5b:78:43:2a:fe:06:c5:25:e4:97:
         ef:40:e8:8d:db:dd:62:2a:66:58:62:d8:41:f8:c1:41:3e:d4:
         61:4f:6a:c1:96:d5:bb:6d:8d:97:bc:0c:d5:0e:4d:c8:15:59:
         cb:50:c9:50:2f:a5:70:ca:6c:1d:96:a1:14:41:c5:ea:79:8b:
         35:67:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:49:20 2024 by rpki-client on console-ams.rpki-client.org