Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File:                     iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier:          ox9ZA/rB/RHEhKGa1S1ofKzG2I3sBdqOT21Xyx4HToA=
Subject key identifier:   62:CC:E5:BB:08:4C:4A:6A:6F:37:8D:5E:97:37:D9:A6:C2:DE:6A:E7
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer:       /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial:       01901EC6D17A17B8C85AD43B715DED27504D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number:          0974
Signing time:             Sun 16 Jun 2024 02:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:04 +0000
Files and hashes:         1: JrWJFn4eLBO6KH3UjZcBsRTwAv4.roa (hash: AHQWQYRiHl0+R/sSDmd2BU0VIGeAhIuPQ38AMocoTR0=)
                          2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: JEdyH0GiR+w3ocRtoVG2fR7mtD4EOlSGBmMv0seKjN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:d1:7a:17:b8:c8:5a:d4:3b:71:5d:ed:27:50:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
        Validity
            Not Before: Jun 16 02:01:04 2024 GMT
            Not After : Jun 17 02:01:04 2024 GMT
        Subject: CN=62cce5bb084c4a6a6f378d5e9737d9a6c2de6ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:4e:6e:1b:3a:4e:67:29:c6:7b:f5:3e:57:
                    11:c2:20:c9:75:1c:fb:e3:d6:cf:d5:7d:da:03:67:
                    8a:e3:a0:7e:6a:5e:de:82:45:53:37:41:4d:bd:b3:
                    2b:26:07:19:cd:22:2e:e2:3a:a1:7c:7a:4a:2e:68:
                    e3:d2:e4:b2:e6:ea:eb:d5:ee:f3:66:a4:bb:c5:0f:
                    c6:c5:a5:0b:b2:6f:c1:73:1b:06:52:e3:04:39:38:
                    b9:1b:ba:2f:aa:83:2a:c4:dc:01:ca:e3:90:70:77:
                    73:2f:45:1f:59:ee:4e:cd:8e:ce:02:c5:bf:dc:c5:
                    6b:4d:2b:4c:97:55:be:01:71:6d:5b:4c:47:26:0d:
                    5d:db:28:a7:c8:b9:74:2a:c7:76:6d:03:84:8b:35:
                    c5:c3:34:e2:60:80:5e:1c:40:db:36:3c:ed:b0:17:
                    07:bf:16:ef:51:eb:b9:78:b2:9b:f1:6c:a3:c0:69:
                    31:90:5a:cd:83:7b:e3:32:2f:ad:f2:a5:c8:be:46:
                    7a:a9:b4:e2:7f:1f:2d:a7:e6:6b:7f:85:1b:7f:f9:
                    c5:22:ed:98:b7:f2:1f:eb:3a:a7:63:0c:a4:7c:5d:
                    ee:4b:38:9e:8c:0b:a4:5c:4f:f5:8e:8c:d1:e9:16:
                    8b:9b:b2:ea:16:3d:7f:e4:25:b3:08:ae:42:91:0f:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CC:E5:BB:08:4C:4A:6A:6F:37:8D:5E:97:37:D9:A6:C2:DE:6A:E7
            X509v3 Authority Key Identifier:
                keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:b1:a1:8f:0c:ff:48:e2:41:ed:aa:83:5b:4d:ea:77:fa:
         65:fd:e4:3d:23:1a:29:17:b7:65:66:b2:8e:f4:21:6f:a9:0a:
         36:b4:05:1d:ec:f1:b9:f1:1d:cc:6e:cd:cd:d8:7f:32:97:fd:
         d9:58:11:ce:f0:54:a9:14:a0:c2:14:21:a8:5d:61:cc:8d:c3:
         b9:00:5e:a1:c7:a8:d7:06:31:48:48:ea:ca:46:a5:08:96:50:
         f5:3c:01:35:05:a9:f8:a6:74:e2:f2:ec:40:8e:d9:a7:a8:4c:
         33:27:d9:53:b8:20:b3:8f:22:4c:4c:60:f8:2e:c5:24:7c:6d:
         22:01:a2:23:8d:c2:2a:6b:f8:72:30:43:6f:7b:8e:fd:76:92:
         de:3d:2c:fd:ba:4a:91:cc:20:f5:65:28:96:18:cb:05:4c:85:
         23:36:1f:1d:19:07:f1:a4:ca:1b:6a:36:e0:25:3e:37:3c:02:
         60:67:58:8b:e7:cd:d8:1b:3a:ba:fb:c0:86:9d:b3:cc:20:14:
         17:f6:ca:a2:e1:1c:ab:21:1c:da:ce:dc:2a:b3:16:30:f7:f9:
         17:92:11:5a:2c:48:2f:f3:7d:1d:39:c1:c5:32:dc:4e:02:76:
         d4:0d:1e:ba:10:8d:57:16:49:22:37:23:e7:62:7c:d3:76:a1:
         83:96:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:29 2024 by rpki-client on console-fra.rpki-client.org