Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          g5GtoTY7Q5qRDuLlb1z5nDtwPvhOQ0DSyLmIcmToVVg=
Subject key identifier:   82:F9:32:4C:BB:1C:55:97:94:62:67:9B:0E:88:30:FB:97:B1:31:4F
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       01907351924678C278D17F06DCEBDABD84E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          11F1
Signing time:             Tue 02 Jul 2024 12:00:44 +0000
Manifest this update:     Tue 02 Jul 2024 12:00:44 +0000
Manifest next update:     Wed 03 Jul 2024 12:00:44 +0000
Files and hashes:         1: 3Ws6pCxbzEj1ioJ27ysX81yjTkQ.roa (hash: fOqpK8FJptJ4boLFGHTZKsZhzD4Q8w3BtpYbHdNoEJc=)
                          2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: sguiYtg8YQYtjO4KgbwkJIIi4vOXWvCmERrTUqNVsYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:51:92:46:78:c2:78:d1:7f:06:dc:eb:da:bd:84:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Jul  2 12:00:44 2024 GMT
            Not After : Jul  3 12:00:44 2024 GMT
        Subject: CN=82f9324cbb1c55979462679b0e8830fb97b1314f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:ea:66:12:fb:9f:e8:5c:2a:fa:25:2f:6b:
                    f8:85:ae:0d:0e:87:14:a0:11:5e:4c:f5:3f:80:d8:
                    79:83:ad:9a:c1:6c:17:9d:44:0d:7e:8a:2d:18:c8:
                    1b:9e:05:d9:41:dd:71:b0:89:94:23:5c:a8:1b:27:
                    37:92:6f:bc:18:50:3a:ac:63:ec:a2:46:dd:5b:88:
                    77:2e:ae:08:02:48:53:69:7f:25:5e:cc:41:36:45:
                    8a:8f:a6:39:05:dc:f0:70:f9:d0:78:44:3c:20:50:
                    79:9c:5f:da:03:84:db:88:1a:75:12:eb:63:b7:57:
                    70:d1:2d:51:5c:5b:a2:03:d2:3e:91:3a:96:72:5b:
                    8c:00:63:37:31:22:ea:8d:a5:fd:b1:db:f6:22:2a:
                    5f:83:72:e0:d7:9c:4e:0f:7f:85:5c:49:1d:72:25:
                    1f:89:46:71:3c:58:bb:c0:32:33:df:e3:d4:8c:7b:
                    6e:0a:00:a8:0d:2a:18:f7:f4:b3:4e:64:a7:1b:01:
                    c7:3c:84:70:eb:e6:f3:7f:75:d2:ef:14:91:4c:c5:
                    2c:56:b5:0b:24:4f:1d:22:ca:14:bc:db:b1:c8:f4:
                    7f:ce:03:56:f7:43:ae:2a:ef:ef:3c:25:b3:a6:71:
                    97:b0:c2:51:f4:b6:c4:4d:78:d1:96:a8:cc:8d:81:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:32:4C:BB:1C:55:97:94:62:67:9B:0E:88:30:FB:97:B1:31:4F
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:29:03:c1:5f:c9:ff:50:a7:46:f4:c0:82:3d:61:ba:e2:
         d3:8a:a3:0b:02:1c:8f:2c:3d:fd:ad:4f:7c:f8:9f:03:55:75:
         2b:c3:8b:00:8f:d3:f7:3d:9e:fd:3a:7a:a9:24:67:34:5d:94:
         1b:df:8d:54:74:ce:f0:1d:78:96:41:87:a8:bf:88:f5:38:6e:
         8f:7e:80:ad:a0:6b:fb:1e:a6:99:de:96:16:f8:37:f5:f9:49:
         2a:60:13:f2:1b:26:4e:0e:21:67:a3:04:d5:95:df:62:9d:b5:
         c6:31:aa:51:f0:87:e7:76:c8:50:ab:c9:be:91:a9:7e:7e:74:
         8d:b4:42:be:37:8b:f4:8b:e8:67:a5:b4:48:4a:16:30:65:38:
         e4:a5:19:da:e2:3d:bc:d9:ea:87:05:8f:b7:e2:01:a3:9e:e2:
         e4:5c:37:15:01:59:2c:58:5d:17:de:69:a3:87:86:5e:99:04:
         f4:3d:84:3d:fc:5f:fc:dd:24:ba:a9:60:5e:f3:c7:88:d9:dc:
         ae:1c:f8:f1:b2:56:bb:c4:d1:7d:19:5b:d1:18:e6:e3:97:6f:
         16:45:42:5c:46:2b:d9:3c:05:27:ff:d0:e2:97:e2:e3:a5:3d:
         29:90:4d:96:a2:05:a3:fb:33:51:c1:e4:64:b0:10:6e:ed:2d:
         97:77:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:18:53 2024 by rpki-client on console-ams.rpki-client.org