Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          n3ooMA+xm9ETO3VbJ5UgnEfIFUlUcRXaeGZFFaQYJRU=
Subject key identifier:   BD:3D:67:81:00:D1:E8:FD:58:0B:38:B6:E4:24:F7:6D:45:35:6C:12
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       019045D473965C5E5E92CE0BDC42B34B7739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          024C
Signing time:             Sun 23 Jun 2024 16:01:09 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:09 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:09 +0000
Files and hashes:         1: 2UiVQPkK10yNcIi1bFkBkKF-8U0.roa (hash: XYrkgQkshXCqKWU2sLJhVYFoJ8xPhBeOo55PxPiRSkw=)
                          2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: tSKrmBUfyHmqEWgcJ1MVXUROa/DEvUe9Zkqd7eysvSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:73:96:5c:5e:5e:92:ce:0b:dc:42:b3:4b:77:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Jun 23 16:01:09 2024 GMT
            Not After : Jun 24 16:01:09 2024 GMT
        Subject: CN=bd3d678100d1e8fd580b38b6e424f76d45356c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:16:25:44:3c:b8:3c:59:72:3b:b6:5a:07:
                    ef:e6:e0:f5:17:60:a7:53:d1:ef:b4:a7:96:27:af:
                    cd:2c:86:63:3d:ea:dc:eb:e1:69:d2:3b:cf:c5:66:
                    91:1f:09:f5:c1:5c:86:14:44:01:8b:69:94:ca:ea:
                    03:9b:d4:bb:29:f7:5e:b2:2e:1b:84:76:05:18:99:
                    18:da:8e:1c:d3:0a:a3:81:dd:40:d0:f0:60:e0:81:
                    b6:0f:a3:c8:0b:95:6f:1a:3f:c5:8c:52:ce:f5:b3:
                    e1:2e:2c:77:27:3a:6a:9d:26:d7:19:b8:cd:3c:20:
                    56:ba:13:34:14:4a:c2:6d:43:ba:e2:e0:00:ae:fd:
                    1e:c4:ce:97:7e:73:8e:a5:13:58:1c:33:b8:39:27:
                    b1:04:97:ee:e7:11:37:39:e9:8e:36:97:60:23:6b:
                    a5:58:74:c7:90:31:43:f1:52:53:42:8f:5e:bd:10:
                    fb:a5:b3:1c:9a:38:33:eb:be:7a:9b:57:b1:da:32:
                    34:79:e9:fe:4a:a2:b1:ab:8e:f2:68:72:2e:af:92:
                    e5:04:bb:61:56:30:7d:ad:de:c4:83:f2:0a:6b:5e:
                    d0:d2:cd:d0:e2:22:cd:86:66:53:d7:5e:99:80:c6:
                    db:ef:89:e4:6c:e1:ed:f9:e9:dd:13:e7:5a:67:09:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3D:67:81:00:D1:E8:FD:58:0B:38:B6:E4:24:F7:6D:45:35:6C:12
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:87:8f:ea:72:43:46:4c:f3:82:d2:52:97:3e:21:c0:eb:
         f8:c5:4d:b4:f3:7d:50:c5:91:bb:5b:16:65:2c:5b:59:f0:4e:
         26:0b:97:cf:5f:7c:a1:bb:5b:39:0d:0e:56:c1:ea:ee:10:31:
         3c:0e:a9:0e:84:c5:b5:9a:cd:db:85:dd:3f:13:e8:68:2a:f3:
         2a:c1:da:fe:7e:b3:5e:e7:9c:da:62:89:11:51:83:93:9e:e7:
         12:21:96:82:b7:4d:12:86:97:31:f0:57:60:65:86:da:66:fb:
         36:91:3d:e3:a8:dd:d9:39:b4:6b:83:c4:31:34:a0:b0:f5:47:
         31:1c:40:c6:e3:1b:ba:c9:e3:43:05:f9:7a:74:e5:81:95:6c:
         2c:83:fe:a6:17:36:45:d9:a4:9f:69:fe:2c:9c:70:61:45:1a:
         6d:e7:f5:15:af:cf:40:9b:dc:ce:17:70:71:e2:bb:89:9e:77:
         8d:32:80:99:3c:04:1a:59:67:4c:d7:02:b6:5e:99:f6:e2:9a:
         0b:56:4e:46:e1:37:7a:98:e6:4a:fc:48:e3:41:e6:ed:fb:1f:
         73:d2:35:9b:cb:cb:56:ca:9b:c4:f9:f7:43:11:99:6c:ed:68:
         b2:5f:f6:cc:ea:48:ff:b9:c8:77:d6:0b:94:03:7b:65:6d:f7:
         e4:f1:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:34:54 2024 by rpki-client on console-ams.rpki-client.org