Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File:                     IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier:          8LRgt7zlZtT+8Oadxa9+Mp4+5B9SjRz9wDwnAqQBUuk=
Subject key identifier:   D5:3D:B2:7D:94:36:C0:63:A4:E5:3E:BF:94:56:0E:1B:A2:FC:67:ED
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer:       /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial:       01901D7CC98C30396BBD196EDAA33B7AD9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number:          0193
Signing time:             Sat 15 Jun 2024 20:00:35 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:35 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:35 +0000
Files and hashes:         1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: d3jeQyo6+iQvo9LeRlvuaDiOExxXXmssBrpijyu2hkg=)
                          2: OZOU13jxcHSCna7NVq8NZj7z7Z4.roa (hash: OxTt22B22xpUgD98Fu864uaTHI8JlLlmqte20gDmtEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:c9:8c:30:39:6b:bd:19:6e:da:a3:3b:7a:d9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
        Validity
            Not Before: Jun 15 20:00:35 2024 GMT
            Not After : Jun 16 20:00:35 2024 GMT
        Subject: CN=d53db27d9436c063a4e53ebf94560e1ba2fc67ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:1f:bf:87:6c:9f:ed:7e:01:1f:2a:03:e6:
                    32:82:4f:33:8d:9e:0e:92:52:71:d1:98:be:66:54:
                    c8:82:09:c4:53:3b:21:74:8a:93:b2:cc:2d:f7:0d:
                    87:21:35:3f:bc:d3:08:6d:fe:ff:64:8f:e1:c2:5c:
                    80:37:cc:c4:23:27:f2:30:61:ae:36:aa:d5:2b:73:
                    19:eb:b2:b2:b4:1f:04:3c:8c:48:21:bb:1a:c7:bf:
                    a1:3d:fa:f2:0b:48:cd:d7:59:a2:5d:60:00:0f:fb:
                    36:86:04:27:4f:0c:b7:3a:79:19:e2:f3:6d:21:09:
                    5e:b3:4f:dd:95:33:1a:ee:5e:0a:ce:fd:5d:e4:83:
                    e6:76:29:c0:e7:42:41:31:41:73:d5:86:3d:e5:14:
                    e5:c8:5d:c4:c4:32:51:5e:25:7e:ac:ac:0f:74:a8:
                    f6:19:e1:33:9c:a9:a4:4a:3c:76:84:02:20:2b:f5:
                    fa:f1:59:cf:fc:e0:da:67:4b:43:fa:28:62:19:62:
                    60:fa:20:aa:dc:d7:92:f4:c3:ef:a1:96:72:b7:3c:
                    fc:18:a5:5f:e1:68:eb:a5:46:19:3f:3e:be:4a:71:
                    18:9f:0c:99:2e:3e:88:54:31:56:62:32:e7:40:1b:
                    e2:ca:3a:11:cd:af:64:5f:ac:8e:25:fd:dd:43:ea:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3D:B2:7D:94:36:C0:63:A4:E5:3E:BF:94:56:0E:1B:A2:FC:67:ED
            X509v3 Authority Key Identifier:
                keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:4a:6c:97:aa:a8:4f:21:aa:7d:11:e3:ee:3b:e3:31:16:f0:
         07:d2:4d:46:3b:d4:8f:14:68:ec:b2:bb:11:e7:bf:4d:0c:02:
         b0:ce:42:d9:bd:33:1a:55:3b:73:85:18:3d:e7:72:c8:cb:e0:
         4a:ef:ce:66:c2:39:86:3e:b6:1d:fb:06:01:19:77:12:30:f5:
         d4:e7:e1:92:94:08:30:9d:19:20:3d:06:c0:55:fd:9f:5b:71:
         6b:7d:28:50:5f:51:fe:fb:8c:30:9d:30:37:8b:35:9e:b2:d5:
         d1:44:2b:c9:fd:12:81:b5:73:d4:b1:55:fa:b2:0a:46:2e:11:
         a4:bb:51:0a:19:b9:48:dc:c4:2b:2d:75:66:d3:10:0b:99:98:
         67:45:49:19:d2:30:90:94:8a:e4:07:27:93:6c:79:48:df:91:
         1e:d8:8b:2a:2c:37:86:08:41:40:65:16:a4:5e:83:76:71:47:
         c5:c1:7f:d3:ba:4f:95:b0:c9:f0:ce:d6:48:b7:13:39:01:ed:
         5f:a9:30:b5:8b:ac:4f:e5:49:88:df:3d:d7:ff:9a:f0:56:f7:
         90:58:0a:da:2f:8e:3f:b4:af:6f:57:d5:67:d4:1b:8c:37:29:
         75:b0:d1:5d:37:7d:f2:0a:cc:2b:2f:cb:97:33:7f:cd:ad:85:
         64:66:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:59 2024 by rpki-client on console-ams.rpki-client.org