Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File:                     iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier:          IYfwtkKtBIVdq6D5wZtfeig4VcHSzsQ9DQEbdzPCpy8=
Subject key identifier:   89:FE:E4:AF:19:8B:4B:52:7D:93:98:E3:4F:E2:7F:EF:06:61:23:EA
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer:       /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial:       019073517F8CF12B001834B401BB6FA03C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number:          11F3
Signing time:             Tue 02 Jul 2024 12:00:39 +0000
Manifest this update:     Tue 02 Jul 2024 12:00:39 +0000
Manifest next update:     Wed 03 Jul 2024 12:00:39 +0000
Files and hashes:         1: 3BqkB4-euZ50OnldZBn-jZL2K5E.roa (hash: uG2ZtIGP2DoQn0Wkmv1RAVmWrb+vpeU7ij+0WgkQjUY=)
                          2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: jC/3i+p2U7rQoV+RFETcG6XhPV+km+V4pRmZgaKWUWQ=)
                          3: sNcCSqQfi33Q7kAmSHEke_K4MqU.roa (hash: 4ZqUnDzQ07RwDbiFJJHyH7RB9ogM1iCrxA9VkvHctIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:51:7f:8c:f1:2b:00:18:34:b4:01:bb:6f:a0:3c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
        Validity
            Not Before: Jul  2 12:00:39 2024 GMT
            Not After : Jul  3 12:00:39 2024 GMT
        Subject: CN=89fee4af198b4b527d9398e34fe27fef066123ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:1c:58:b6:aa:af:8d:c9:66:e2:66:63:0f:
                    9a:24:cb:29:91:17:6c:9a:14:ff:15:69:53:15:48:
                    0e:6b:45:fb:de:91:d5:84:76:2a:8d:eb:45:35:ca:
                    fd:77:2d:20:8e:ce:97:89:05:13:ab:11:21:39:39:
                    fe:70:98:b2:2a:fd:9c:fe:28:09:d1:ee:a6:f5:45:
                    d5:7b:ed:9d:c5:a4:72:cb:05:4e:f7:95:d9:4a:a4:
                    f0:87:0e:04:60:d5:ff:48:0a:e3:41:04:61:5f:41:
                    39:2c:f1:38:78:bd:0b:d1:f3:fd:d4:e4:5d:cd:a0:
                    64:ad:2d:22:58:03:7f:38:59:1e:f1:a2:79:7f:f6:
                    11:21:1d:af:cb:17:ec:4f:e7:e1:7e:c8:d1:bb:8b:
                    5a:97:a0:2d:ca:c7:f1:da:ae:be:0c:fd:d7:00:0f:
                    4d:83:43:63:e3:6c:31:df:8a:aa:ce:44:58:3f:49:
                    c2:31:31:5e:c6:98:72:3e:5f:c7:e0:9c:ef:21:7f:
                    8b:3b:d3:82:6e:45:19:79:3c:a7:47:a2:64:85:7d:
                    45:23:f4:86:ca:9d:95:ec:37:ae:79:43:cf:ce:57:
                    27:28:50:91:d0:45:7f:43:2a:ac:9e:bb:dc:e8:7f:
                    1b:85:ec:37:d2:95:54:41:32:fb:f2:44:10:59:00:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:E4:AF:19:8B:4B:52:7D:93:98:E3:4F:E2:7F:EF:06:61:23:EA
            X509v3 Authority Key Identifier:
                keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:f3:c5:5d:16:7e:59:8b:88:a1:c9:4c:58:97:32:55:bd:
         f3:45:e9:0e:94:74:54:e2:de:07:e2:f0:99:37:d9:e5:aa:6a:
         95:39:7a:f2:3c:8d:c4:6e:c8:27:b7:fd:e4:0e:db:93:16:8f:
         35:32:ef:92:94:95:6d:ef:03:2e:a4:71:bc:65:43:f3:e0:af:
         e3:92:43:92:b0:73:0d:44:97:d5:59:20:95:a1:5c:c2:26:0f:
         a5:08:d7:42:75:e8:3b:8a:76:60:40:f2:e7:e7:97:7c:a7:14:
         e4:2c:8b:ed:ab:e8:cb:a7:2b:d5:f4:a4:48:fb:df:6f:b4:86:
         55:e5:bc:f0:1d:03:ec:c9:da:cd:11:c2:eb:6d:d6:fc:c5:95:
         fc:a6:2b:47:5e:f4:f6:b6:73:04:ce:3e:c1:ed:6c:c3:a0:af:
         25:7f:76:37:6e:56:6d:fe:a0:87:19:1b:f5:30:a1:b3:b4:7e:
         5c:30:e5:a9:fe:9a:a3:a2:10:2c:29:48:ee:17:e7:ee:74:33:
         30:d3:7f:95:0d:2b:2c:58:88:08:71:18:9b:42:f4:30:39:92:
         2f:34:6d:27:3a:df:13:d8:d1:69:ea:30:22:f6:52:b9:04:7c:
         88:ad:db:76:22:e5:69:2b:b7:a2:7a:dc:34:1e:b3:00:d9:50:
         c5:12:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 15:55:17 2024 by rpki-client on console-fra.rpki-client.org