Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
File:                     iBmVbdzq4CLP4SPaNzxrERZANo0.mft (raw, json)
Hash identifier:          ggOWA5ZeITOUnqnkzj06lqiMBOskQpAot+DfTg7743U=
Subject key identifier:   84:F1:F0:BE:75:4B:64:01:72:05:40:C9:DB:CD:1E:96:95:6C:0A:89
Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
Certificate issuer:       /CN=8819956ddceae022cfe123da373c6b111640368d
Certificate serial:       01901DECC4F9533994C48D41CD425BC4A719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
Manifest number:          0DD2
Signing time:             Sat 15 Jun 2024 22:02:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:54 +0000
Files and hashes:         1: 2gf75ybNcWte-YXJViT6ywLPiEQ.roa (hash: sU6E1UCITbRMWtM1MTurOfkYKw7Drz7Sbjs3vORYXUo=)
                          2: iBmVbdzq4CLP4SPaNzxrERZANo0.crl (hash: mwfGdAH9Ic75qWvhF099NXNKUn2gM5U002/QqlBzAt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c4:f9:53:39:94:c4:8d:41:cd:42:5b:c4:a7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8819956ddceae022cfe123da373c6b111640368d
        Validity
            Not Before: Jun 15 22:02:54 2024 GMT
            Not After : Jun 16 22:02:54 2024 GMT
        Subject: CN=84f1f0be754b6401720540c9dbcd1e96956c0a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:7d:6d:08:fc:69:a7:50:f6:bd:89:4d:78:
                    91:b6:46:af:15:e7:0e:cc:77:b1:3f:1a:a4:ee:a4:
                    bb:41:42:a3:30:36:6f:ad:e5:aa:c6:4b:51:7b:63:
                    70:6c:da:75:12:2d:67:4d:b4:1e:ea:1f:f0:22:42:
                    a1:c9:50:c4:7b:1b:6d:a4:0d:03:8b:98:8a:b2:5e:
                    66:ae:7b:e6:f2:1a:b2:66:f9:70:0b:18:fc:eb:46:
                    87:f7:11:51:66:c5:89:a4:c6:f8:7e:df:db:b3:ed:
                    66:b6:10:33:fc:8d:48:8e:39:04:42:15:9f:89:40:
                    bd:bd:40:f6:64:2d:0a:b6:ab:83:27:db:e7:b7:25:
                    62:08:3f:01:22:66:b1:b0:0a:93:fc:7c:e4:4b:f4:
                    2a:82:09:cd:a0:13:36:32:1a:a7:d7:0d:e7:6b:d3:
                    2b:0c:a4:58:bd:56:59:50:c7:de:d8:99:4d:b4:c8:
                    ee:5d:32:fc:3f:5e:28:26:14:fd:6a:d9:cf:72:bd:
                    df:83:19:27:15:3d:87:5c:bc:c1:9f:25:04:9e:46:
                    1e:52:fe:8f:43:be:bd:05:df:d6:ef:d9:cd:ff:80:
                    17:87:30:9e:d0:4f:0b:f9:3d:2b:51:a5:3a:97:4c:
                    db:d0:a3:ff:ec:01:6e:39:df:d8:c6:05:ee:0f:de:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:F0:BE:75:4B:64:01:72:05:40:C9:DB:CD:1E:96:95:6C:0A:89
            X509v3 Authority Key Identifier:
                keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:94:e7:d6:2b:27:69:c9:72:6b:a9:74:de:09:6a:f3:f8:24:
         78:ee:4d:37:c4:5d:82:5b:51:a0:4e:84:a2:e1:62:fd:9a:ad:
         65:35:c1:9c:40:13:13:c6:24:af:fc:f7:cb:cf:37:77:c7:9a:
         48:da:8e:5d:75:7f:3b:78:8e:e0:07:50:c3:0f:1e:38:b7:fe:
         c7:fe:cc:54:0d:c4:a7:63:cf:ee:59:c1:6c:be:bb:8e:6b:66:
         c1:6f:1e:42:05:05:72:28:c5:c8:62:68:10:23:d1:fa:37:de:
         76:98:fe:e4:08:c2:09:a5:52:8f:82:78:e9:59:24:6d:34:6d:
         86:39:7a:d7:00:26:a6:18:5b:0a:cd:59:08:f6:eb:1e:04:b5:
         90:50:45:ee:3a:84:ed:6a:8a:4e:61:6b:50:09:a9:59:35:82:
         dc:b1:4a:b4:b2:fa:da:5a:0a:46:4c:e2:6c:97:17:f0:c4:cf:
         84:7b:31:c4:3c:5d:56:ff:50:5a:35:1c:cc:b1:24:bf:d7:96:
         51:e3:22:90:d9:44:b4:6b:57:eb:f0:d4:4f:7c:d7:4e:0a:b7:
         be:56:10:98:09:00:11:89:3a:61:79:98:24:91:0a:23:f7:46:
         34:7d:8a:3f:af:40:2f:05:2e:b3:37:d0:82:a7:3e:16:fb:7e:
         83:2d:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:31 2024 by rpki-client on console-fra.rpki-client.org