Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File:                     Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier:          g5Foo3UudmLysJtM2kRpgCBWY2rI4+iG215DAYn9Grw=
Subject key identifier:   A7:8A:7B:F8:BF:8D:CC:A8:1C:07:86:91:D4:5C:7A:5F:5C:D4:84:3F
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       0190452F7553B85C47BB29BCD983F94E356C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 13:00:56 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:56 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:56 +0000
Files and hashes:         1: 8dJqb3rgtUKrpk4cBKVqsSz1688.roa (hash: fXl/l3qZOd/2iWAJC1juxDfdWIAoDI4myb5JO/yJSEs=)
                          2: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: Evwls5rO+YHcWc49GSBXgQSYyHfPqadQwrbGxA/7yOs=)
                          3: qLJStqooRx4TFzgIqyJ7Z91kTno.roa (hash: bhJ3SpLdlx3SqIVih8wYEEmRFmE/wa14N4AvFnwfuUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:75:53:b8:5c:47:bb:29:bc:d9:83:f9:4e:35:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Jun 23 13:00:56 2024 GMT
            Not After : Jun 24 13:00:56 2024 GMT
        Subject: CN=a78a7bf8bf8dcca81c078691d45c7a5f5cd4843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:ac:22:0e:0b:f8:03:ec:c2:b2:76:45:f6:
                    b8:36:11:25:6c:d4:09:91:78:20:4c:37:5f:60:c2:
                    c1:e0:d2:65:c5:be:23:69:70:e1:dd:19:84:0b:cc:
                    7e:08:8d:75:1d:da:22:3e:9c:71:10:62:06:6b:a6:
                    90:f9:3d:9b:83:62:af:6b:d4:be:9f:d3:11:9e:04:
                    42:fd:2b:0a:9e:6b:b1:07:64:88:c5:ab:5c:68:cf:
                    a4:74:5b:eb:f7:a6:12:26:4a:ef:ec:0b:c2:85:32:
                    ed:30:9d:ba:54:7d:d5:ec:c8:38:1a:5b:fa:2a:b9:
                    73:61:c6:12:c5:bb:3a:82:70:9b:e7:b3:7d:57:e8:
                    55:38:b8:00:08:11:eb:9a:59:b4:fe:d7:72:78:71:
                    ef:c3:fa:fe:41:e2:63:f4:62:d7:c8:a5:12:f9:e8:
                    b9:ff:33:7b:c3:a6:39:28:c2:5e:cf:88:82:a8:d7:
                    b0:5f:45:ad:a0:01:6e:c1:b6:ee:3d:7e:1b:eb:59:
                    ec:23:6b:29:d0:03:e5:22:e6:bd:5f:3b:87:30:cb:
                    50:a0:92:8a:14:12:b5:b9:1d:4c:c5:67:86:54:18:
                    da:70:78:e0:e8:36:70:a7:44:f2:ef:75:69:53:fc:
                    af:04:ee:f8:06:25:3f:66:cb:58:d4:c1:2f:e7:72:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:7B:F8:BF:8D:CC:A8:1C:07:86:91:D4:5C:7A:5F:5C:D4:84:3F
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:93:c9:a4:d9:65:6c:67:8d:3c:fd:cd:ef:24:b8:ed:83:
         78:2f:ed:55:62:a9:37:6b:6a:90:e6:c2:1c:c8:7d:fe:10:61:
         eb:de:37:5f:13:c4:31:a3:03:f7:60:9b:7e:3a:6f:f3:cd:ea:
         12:ce:c6:cb:61:be:3f:7f:42:75:36:db:37:c9:9a:7f:a3:a2:
         c3:ef:19:a5:76:a8:ec:99:ff:53:e0:a6:f6:36:57:4f:bb:86:
         b5:a7:4c:a8:4b:d9:5d:8b:4e:82:b8:4c:d7:af:a1:c8:38:6e:
         5c:e8:17:50:b7:9d:22:db:51:cc:bf:ba:b1:4f:b0:52:74:6f:
         48:1a:9b:43:6f:fe:32:7e:47:c8:9a:7e:3e:1b:f0:7b:ba:64:
         15:4c:a7:cc:43:4b:e4:a5:d6:16:f3:65:ad:2c:fb:e9:3c:35:
         8d:eb:98:ff:82:61:d3:b5:20:a8:ec:ef:2b:e5:60:c8:7d:94:
         fc:6c:e7:03:b6:06:6d:cc:16:29:d3:30:89:bc:fd:e6:b6:5c:
         08:3b:af:75:02:3d:4c:e2:36:46:78:c4:38:ac:26:5f:7e:8d:
         3a:26:39:37:8b:f5:3a:b8:65:80:d0:19:df:70:22:e2:93:28:
         c2:93:61:2c:b2:ef:41:14:3d:bb:28:0c:4d:67:37:a8:38:64:
         9e:61:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:19:55 2024 by rpki-client on console-fra.rpki-client.org