Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File:                     IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier:          /GIfHbxm5Xk5bk3n8nUq3TWI1d3cvuR80Sak1YTjMDE=
Subject key identifier:   6E:9A:D9:91:B2:BD:0B:AB:62:85:EB:35:22:A6:EF:F1:75:D8:25:A7
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer:       /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial:       01901DEB1B9ECDE88B334B88D79CDAFB7BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number:          0882
Signing time:             Sat 15 Jun 2024 22:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:05 +0000
Files and hashes:         1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: FQlGwH7cwCIpWYAWxFqbVueqFb4mOxhB9UAuAH39Fnc=)
                          2: JZGJAOnyD8DXgjZaV2Ez9nlgYN4.roa (hash: c7QWjoMl6keYpOGqyK0ikFsFHVKtJUoLvFH/iO3/Gf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:1b:9e:cd:e8:8b:33:4b:88:d7:9c:da:fb:7b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
        Validity
            Not Before: Jun 15 22:01:05 2024 GMT
            Not After : Jun 16 22:01:05 2024 GMT
        Subject: CN=6e9ad991b2bd0bab6285eb3522a6eff175d825a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:7c:c4:11:b1:6a:76:f9:bd:a6:d4:34:4c:
                    d3:03:e2:2e:15:0c:2e:2d:04:fd:ea:71:be:f3:5b:
                    02:4c:bf:82:78:08:4f:cf:f5:64:99:58:61:66:fd:
                    8d:19:7c:51:48:50:e0:7e:e3:50:a9:f4:2b:92:6f:
                    e8:3f:6a:71:09:a5:1b:ab:7c:16:92:9b:c4:30:fe:
                    12:78:35:c3:e8:08:6d:a4:89:78:dd:2d:2d:ac:aa:
                    79:4b:5d:11:25:c9:c2:57:68:3c:67:76:d5:f4:9f:
                    32:e5:b5:d5:74:e5:f4:b3:d3:f3:5b:59:a2:f8:93:
                    c6:c4:d3:5e:b9:3b:e9:bf:66:8e:16:76:9a:08:21:
                    44:95:9f:88:45:88:a3:82:05:fd:4f:df:70:31:df:
                    64:ec:d4:8b:c7:a5:10:e7:f3:d5:49:f2:d7:52:a5:
                    5a:b4:9e:3f:d3:5a:ba:2c:3d:34:0a:5d:07:d7:25:
                    dc:d6:e3:6f:01:83:82:3f:af:ad:60:f1:48:97:df:
                    53:ee:f9:de:78:ad:9c:ee:b8:30:9e:41:d2:a3:7f:
                    f2:93:08:ed:43:4c:55:31:15:91:f6:e2:ef:f2:d5:
                    95:0f:56:52:46:b1:c6:87:95:3c:1d:fa:30:98:bf:
                    ed:ae:97:1b:a2:bc:da:fb:78:8d:c4:2b:aa:b2:a2:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:D9:91:B2:BD:0B:AB:62:85:EB:35:22:A6:EF:F1:75:D8:25:A7
            X509v3 Authority Key Identifier:
                keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:6f:6c:59:76:a0:8e:7b:64:84:97:fc:a2:77:c7:64:e7:
         76:6c:a9:60:6e:c5:8b:4f:1c:a0:0b:a0:6c:c7:85:6e:42:20:
         fb:b3:32:ab:19:6e:c6:11:78:7b:ba:a1:64:f9:93:ce:55:f7:
         c3:b7:59:dc:fb:2a:7e:b0:60:14:a4:9d:64:4d:71:3e:06:a8:
         1b:ed:ee:0c:24:8b:ad:c9:9b:14:c2:de:74:05:e5:cc:f1:be:
         79:4e:73:20:71:6d:71:6f:85:13:17:62:15:ce:2c:61:8c:a2:
         ab:02:46:fd:c6:29:1b:62:b0:1e:4c:c6:38:74:f3:4e:ef:6d:
         d4:1d:57:29:34:83:f1:d5:21:16:be:97:e2:4f:ce:14:60:4d:
         df:b2:fd:7c:4c:70:c8:92:d9:9a:4b:5c:0b:e1:ee:52:50:82:
         47:5b:02:58:b7:7f:77:e1:9e:93:72:8e:2e:5c:bb:20:02:92:
         58:b0:a6:2f:3b:40:d1:b0:57:59:68:cd:2e:a3:f9:75:d7:4b:
         20:05:9d:3f:bf:72:9e:58:83:c2:b9:f9:15:f9:92:a9:7f:40:
         fc:a6:c5:62:3a:3d:9a:f0:7b:3b:4a:fe:9c:d5:c2:88:c8:60:
         73:f8:30:06:c8:7c:c2:42:e7:ad:32:85:08:54:0d:2c:16:90:
         73:43:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:21 2024 by rpki-client on console-ams.rpki-client.org