Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File:                     is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier:          TtqEJKAh+QYSyca8gZhit9SZICA8/ugVWMzrO/CGVVU=
Subject key identifier:   88:3E:BD:06:BD:75:65:10:EE:79:9F:5E:DE:D9:89:5D:BA:5D:AF:10
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer:       /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial:       01901E8FE61E67986848EB0FBA7BD9106B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:05 +0000
Files and hashes:         1: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: UocQUXViKuSolTWhctJwkN38Lsu9iGb4SG9spzk6W9s=)
                          2: pja1mcuE4fLv-SYAL1h7IMV8cNg.roa (hash: AHFc08AGYrXBXbMRJLm6ueHfvgcpPIfPuLJIXMUV43U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e6:1e:67:98:68:48:eb:0f:ba:7b:d9:10:6b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
        Validity
            Not Before: Jun 16 01:01:05 2024 GMT
            Not After : Jun 17 01:01:05 2024 GMT
        Subject: CN=883ebd06bd756510ee799f5eded9895dba5daf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:2f:5e:b9:49:7b:e2:fb:54:d3:a7:db:4c:
                    90:80:ff:e1:4a:3c:22:cb:d6:43:65:8d:19:81:e5:
                    51:c6:8d:09:a4:79:b9:e4:b9:53:a4:fc:2c:64:e3:
                    cb:d3:16:fd:eb:c9:7a:8b:88:0d:a8:92:30:51:3c:
                    16:44:7e:7f:a1:a2:e9:bb:fa:cc:87:5b:95:f6:6c:
                    6f:e1:94:cd:b3:e6:7b:43:ac:aa:41:0d:ca:41:a1:
                    5a:f3:d1:d6:eb:ed:21:e5:a9:af:46:2a:c2:e7:f7:
                    64:b2:e6:a9:dd:9c:41:d2:82:50:dc:4a:f7:aa:88:
                    84:27:e5:d7:52:06:31:db:fd:96:e6:41:76:ff:a0:
                    f3:d2:bb:1a:3d:2c:f6:94:5b:7b:05:a3:9d:09:de:
                    77:6f:f1:a9:96:4f:0e:6a:19:46:c0:17:4f:0d:44:
                    fe:ea:aa:55:f8:80:c5:1d:ff:b0:2b:e6:1d:f6:9a:
                    71:fb:c9:2e:55:b8:00:36:10:f2:2d:c9:cd:9b:41:
                    14:10:9b:36:bb:56:3e:aa:0e:b4:65:75:16:c2:b4:
                    06:e0:54:77:a8:2b:5b:e5:2b:a4:6e:17:b3:c1:10:
                    f5:34:ef:5a:9f:05:b3:ae:af:ea:4a:33:4a:fb:a6:
                    f8:ba:23:5e:d3:ff:48:89:4a:4c:95:7a:41:54:17:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:BD:06:BD:75:65:10:EE:79:9F:5E:DE:D9:89:5D:BA:5D:AF:10
            X509v3 Authority Key Identifier:
                keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:5b:ec:7e:99:b9:69:4b:81:f7:94:be:88:e9:6f:85:30:
         d1:fa:f1:5c:8d:e4:96:80:a7:33:2e:fc:ac:97:1a:62:74:ae:
         6d:7f:75:ba:6b:55:97:b8:c5:d2:7c:6a:72:81:f0:cd:68:31:
         f1:78:ee:d1:71:d6:03:8b:17:3c:28:56:ea:0d:db:9c:f5:7b:
         c5:e0:ad:3d:f1:24:6d:63:44:f3:bb:bb:e5:f7:66:d1:f0:98:
         7a:c8:7d:7f:0e:0a:fb:7d:ff:dc:94:ae:8c:52:85:ba:b8:dd:
         93:d8:db:ec:ec:cb:80:bb:3a:91:14:d0:d7:23:a8:d6:f6:30:
         25:24:44:3a:b4:29:4d:d0:f5:12:2b:5e:7b:24:c3:99:57:37:
         b2:43:9c:7f:d0:9c:07:70:b9:2d:e4:21:66:6a:e3:35:b8:b4:
         e8:ea:1a:27:1f:f7:bd:d1:4c:0e:e5:ac:68:ec:47:02:e6:28:
         44:42:1d:e4:f3:5c:1a:a4:56:f0:a0:28:e4:ef:75:75:d4:ac:
         3c:af:ba:f1:75:f4:b6:2e:d3:58:e0:c0:df:60:a6:bf:cf:44:
         ce:87:36:93:d9:40:7b:44:f0:bd:83:31:56:c2:6c:51:97:d6:
         21:a3:ca:a8:da:41:7b:87:37:e3:5f:23:91:1b:b6:08:59:26:
         60:3c:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:28:01 2024 by rpki-client on console-ams.rpki-client.org