Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          JqhJWdVPpXP4o8F8wpK0a/N3KloIYMt6VlAyh2lc4lY=
Subject key identifier:   C7:68:51:BD:A0:D0:2B:04:60:D2:0B:0F:37:AA:70:93:8D:00:DB:94
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       01901EFD7151AB03BEDE5B8557DF2B836AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          0D19
Signing time:             Sun 16 Jun 2024 03:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:44 +0000
Files and hashes:         1: 3GjCQVWzGhZ9clnIHVfAC4ZIBOE.roa (hash: KddN6Fiv6XXI/LXB7saLFxICYbtQ5ela92BIg1jwFaE=)
                          2: 7_wG1qywB41busNPNyk58KBjTn0.roa (hash: CmAestMIVAI/htSVKCV+fMLI0A+sTiBwEXeUtUi2pSs=)
                          3: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: rTlkpP9r1vdKoEOoPir0Ea/MOHVPDYrVtV9mcAn7ZII=)
                          4: LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa (hash: pwTodIZuuYqTvbBnaCVRMWAvMtiWCyRaBs4RZ/skCs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:71:51:ab:03:be:de:5b:85:57:df:2b:83:6a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Jun 16 03:00:44 2024 GMT
            Not After : Jun 17 03:00:44 2024 GMT
        Subject: CN=c76851bda0d02b0460d20b0f37aa70938d00db94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:99:88:fa:60:74:cf:56:34:0b:59:ab:ec:
                    3a:5b:72:63:11:54:6b:17:90:dd:9c:06:cb:a6:86:
                    fb:9a:f6:5e:55:bf:86:45:84:9f:ef:ff:ca:6f:30:
                    f0:04:00:db:c5:3d:71:4c:eb:f2:25:85:e6:92:4c:
                    6c:23:63:62:34:0e:9c:8b:7b:4f:46:f9:5b:6f:89:
                    4f:09:2d:ba:11:d3:01:16:a9:27:cd:24:b6:02:92:
                    d4:aa:fa:80:b7:0e:f9:18:55:61:0f:4f:57:9e:b9:
                    b6:fa:5d:91:ad:c2:26:56:21:d7:c4:b0:bf:b7:0a:
                    b6:fc:eb:09:fd:da:de:b0:fa:31:95:1b:f6:89:cb:
                    f3:ae:95:35:8e:cd:f0:69:fc:12:f7:c4:a7:e2:4f:
                    f6:40:70:17:8c:9d:70:31:30:e1:5f:c4:91:7f:30:
                    fd:ba:64:9a:44:c4:a2:38:86:03:94:8c:d0:02:8e:
                    90:13:31:3c:a5:54:a1:34:19:88:53:db:7d:15:81:
                    59:23:4c:7d:96:8c:b5:55:80:b0:fb:88:06:44:d1:
                    c5:d5:2c:b4:d4:fc:64:75:8b:72:be:e5:09:a6:f9:
                    05:c1:f3:1e:88:80:2a:5f:fa:1c:cc:2b:fe:01:4c:
                    18:9b:97:ed:6b:df:d1:89:d9:f2:6a:8c:af:16:69:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:51:BD:A0:D0:2B:04:60:D2:0B:0F:37:AA:70:93:8D:00:DB:94
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:62:3f:44:e8:21:aa:9e:cf:ce:61:99:27:f0:17:75:b0:4d:
         0d:d1:c4:3e:0f:77:50:5e:fb:83:45:af:64:12:b6:04:16:0a:
         5a:e8:a2:0f:dc:c5:71:1a:f3:ec:94:f0:b2:28:65:c5:e4:26:
         d7:5c:ab:2b:12:2c:ba:cb:65:3f:c7:7f:eb:8f:60:fb:7a:6f:
         cb:1d:b8:be:86:4f:aa:84:21:2a:43:bc:74:10:18:24:26:a6:
         d4:b6:6e:0e:25:f4:d3:41:d6:94:f7:1a:d0:b9:1e:0c:d4:f3:
         79:18:e8:79:91:63:c8:8a:42:11:d4:b9:56:f5:7c:f5:f4:30:
         4f:33:e2:4e:14:a4:a5:16:dc:b3:94:3b:65:f8:d5:bd:89:91:
         04:c9:34:d8:91:27:7f:fc:bf:39:a3:e7:2b:f5:60:a3:0c:94:
         2b:4d:14:35:d9:fb:ef:82:d1:dc:2d:a0:79:09:96:a2:45:aa:
         05:55:4b:32:f5:af:7c:0a:11:2d:7b:24:ab:ac:a9:d6:ec:96:
         b4:7b:68:93:4e:47:b3:9e:86:67:bb:a4:04:d3:ad:f1:37:97:
         b1:51:ee:c4:39:9a:db:13:60:6b:2b:b7:8a:15:00:3b:aa:62:
         65:fa:e5:49:24:00:47:4d:47:7c:1a:8b:7d:bf:06:da:bb:9a:
         fc:e4:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:30 2024 by rpki-client on console-fra.rpki-client.org