Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File:                     iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier:          1qN+zFUcmh7BqX5CT1UKsyRebnX+DtORWrqFyDF3E60=
Subject key identifier:   95:6D:26:74:1F:5F:CE:F0:C0:79:74:3A:18:4F:2B:F8:C2:59:AB:8F
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer:       /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial:       01901E588AF59A067E8AB44632F633673AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number:          0EE7
Signing time:             Sun 16 Jun 2024 00:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:37 +0000
Files and hashes:         1: NkrAmFn-tB2D7-muHxhJ0VmGXFw.roa (hash: 7k7yND85EvuJCUyszKT3io2nlw8MXNjHwXtrnNSGvYc=)
                          2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: rBYU3iuR5cJ4N1OehB6D4PYCjeMNELhUjY13G1cEyIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:8a:f5:9a:06:7e:8a:b4:46:32:f6:33:67:3a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
        Validity
            Not Before: Jun 16 00:00:37 2024 GMT
            Not After : Jun 17 00:00:37 2024 GMT
        Subject: CN=956d26741f5fcef0c079743a184f2bf8c259ab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:85:5b:47:36:96:00:93:3c:15:21:0d:d4:
                    21:2f:51:8d:c5:7f:5b:2b:16:98:3a:a3:1b:d0:a2:
                    e8:5d:6d:92:86:36:e6:5a:2f:50:53:08:31:82:4d:
                    78:86:99:f7:cb:fe:69:c9:5a:bd:79:d4:f8:d7:bf:
                    24:92:3f:37:ac:39:1b:e0:c6:f3:01:75:9a:99:71:
                    6b:79:eb:62:86:1b:02:34:66:be:e9:f0:a1:92:3e:
                    dc:eb:cd:8c:44:8d:35:ea:ae:d5:93:cb:2a:7a:c2:
                    21:73:3f:f0:b9:5b:58:f7:2c:53:8e:09:8f:96:ec:
                    33:1d:04:cb:dd:d1:85:ad:8c:b2:69:64:0f:07:d8:
                    0e:02:75:87:84:4f:8e:e3:a2:e1:38:47:bb:05:8f:
                    5a:98:de:b5:88:aa:8d:fd:dd:a7:40:d0:52:b8:77:
                    e1:66:50:4e:0b:50:00:1c:cb:05:c6:0a:95:3e:20:
                    67:b5:d2:db:67:2d:a0:9b:02:f8:60:39:3b:90:7d:
                    90:36:99:8e:ea:69:ee:ba:41:78:3a:4c:9b:f8:3d:
                    fa:8f:19:f2:74:60:fd:c5:27:e5:80:ae:c8:b0:26:
                    7c:ab:a0:9b:3d:7e:e0:0e:bd:b0:de:20:78:ac:e6:
                    1b:e1:58:57:56:f4:47:a6:9b:58:21:e6:ba:23:44:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:26:74:1F:5F:CE:F0:C0:79:74:3A:18:4F:2B:F8:C2:59:AB:8F
            X509v3 Authority Key Identifier:
                keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:69:22:9d:85:cd:09:54:4b:98:e3:cc:be:f4:63:cb:73:
         a2:0f:f9:a7:5b:3f:6b:dd:d9:0c:da:2a:d7:46:75:d6:49:ec:
         f5:f5:1b:4d:3d:78:82:7c:d9:80:1b:8c:58:f4:9b:f3:fa:c5:
         6a:65:02:a9:ac:7b:f8:f5:ea:87:e0:65:c3:9d:b2:7c:a7:47:
         7b:b6:1e:9d:f0:dc:d3:73:b7:c3:2f:52:2f:16:da:a0:e2:70:
         58:08:68:bf:52:05:e8:c5:6a:b1:9d:c5:14:d7:eb:ee:84:38:
         f6:d2:ac:4d:61:a5:8d:95:d0:8b:e1:aa:b7:4a:d9:84:1a:c7:
         19:3f:af:a6:0e:a7:53:43:b3:01:e5:ff:e9:f2:10:9c:9a:91:
         61:92:47:f0:fb:f1:3d:65:4c:30:6b:ca:e2:49:13:34:e5:44:
         ab:59:d4:39:ff:90:9e:7d:da:e0:1f:ec:ab:40:9a:0b:62:04:
         71:2d:55:58:16:e4:24:a8:6a:eb:9a:9c:da:61:62:9d:f9:70:
         72:10:36:ff:a7:d1:0b:56:73:bf:34:4d:f0:bb:ba:27:f5:bd:
         56:d9:b8:d8:b7:b8:16:ec:a8:a8:c8:aa:da:67:c1:46:38:62:
         b0:83:32:d1:3f:97:2d:2e:f4:2e:55:be:10:33:b6:1e:7d:81:
         70:c3:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:26 2024 by rpki-client on console-ams.rpki-client.org