Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File:                     iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier:          Pa/qtrFuIXcTY3AOdTZit/AEwgbfrw1z2CKfpG4A3nU=
Subject key identifier:   81:35:B6:1F:FB:4D:1E:1E:8D:F6:F6:92:ED:3D:40:1B:DA:3A:5D:70
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer:       /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial:       01901DECA6C42DF2BA573BE366ABD0DAFC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number:          02F7
Signing time:             Sat 15 Jun 2024 22:02:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:46 +0000
Files and hashes:         1: amGG5lCTuDxH_pf4Flr3VvQkZpI.roa (hash: +o5L7wM9+7kwuNYJw32muZp3W9/Zk+r/ir77ovw+Ro8=)
                          2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: imkphUIkR7kGffG0eilIwDLCCgmn55q2l8eS5Lq60j4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:a6:c4:2d:f2:ba:57:3b:e3:66:ab:d0:da:fc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
        Validity
            Not Before: Jun 15 22:02:46 2024 GMT
            Not After : Jun 16 22:02:46 2024 GMT
        Subject: CN=8135b61ffb4d1e1e8df6f692ed3d401bda3a5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:bd:41:70:b9:13:9e:dc:e5:dd:3e:1d:e0:
                    35:a3:2d:2b:c2:d7:dc:a0:74:22:be:3c:e3:82:5a:
                    2b:77:99:1d:33:5e:34:8f:b0:fb:88:78:39:ba:cf:
                    52:00:66:54:54:64:e1:55:6f:70:a5:9d:bf:ca:09:
                    e9:8e:04:f0:7d:af:4f:e0:55:d6:e1:a9:cb:ee:e4:
                    87:dd:5a:d0:92:08:7f:65:43:30:cb:ad:49:1b:21:
                    ba:85:f9:06:97:e5:c7:df:dd:c7:80:de:ba:56:e1:
                    82:f1:e9:56:a2:88:90:d4:95:68:e8:a6:3d:b2:9c:
                    b7:2e:1e:b1:f8:40:8d:0f:37:53:c0:82:34:f5:da:
                    ee:36:98:29:12:64:27:7c:c4:22:96:06:c0:4f:61:
                    0a:4c:b7:e9:40:2c:ff:67:a7:40:37:1e:c6:51:b2:
                    d6:98:bd:80:43:3a:d7:7d:4d:7e:79:fd:17:cc:a9:
                    08:94:67:1f:2c:3f:ad:a4:4f:cc:ee:70:b9:f7:41:
                    89:34:f0:85:c3:04:b7:3f:4a:fe:ed:ec:38:5c:b8:
                    7d:e9:25:28:39:f0:73:a8:25:cd:7f:38:f9:e1:b0:
                    ec:72:b3:1a:b0:3b:52:9f:4a:ea:ec:78:c3:06:e2:
                    3d:ca:85:1a:c2:78:e6:ad:4e:9c:a3:a5:e8:ec:14:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:35:B6:1F:FB:4D:1E:1E:8D:F6:F6:92:ED:3D:40:1B:DA:3A:5D:70
            X509v3 Authority Key Identifier:
                keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:22:df:6c:21:6b:b6:90:73:c2:73:ab:f0:0b:2e:c4:37:
         3c:db:75:9f:be:f1:a7:5d:66:9e:70:58:bd:05:3d:2e:77:94:
         54:b9:81:49:90:37:00:36:9e:cc:bf:16:d8:59:8b:ed:4b:8f:
         92:1a:a1:14:b2:88:17:76:fd:b3:8a:cc:91:cd:fa:d9:28:52:
         da:99:12:ce:33:0a:40:53:a2:dd:ca:2f:fe:d5:d7:db:09:12:
         59:dd:32:74:11:24:9d:07:17:c8:c3:32:07:01:ca:0b:c0:a4:
         5f:f3:9f:26:62:1b:f8:51:7e:d0:99:f9:72:cb:64:2c:8c:75:
         ee:5e:58:04:1c:24:9e:9b:9f:eb:80:5e:ed:e5:a2:80:12:79:
         1c:df:bd:cf:c9:78:48:cf:4c:ca:67:eb:d5:f1:77:88:dc:02:
         b2:9a:25:ee:26:b0:89:05:2e:70:f2:ef:1b:bf:a6:5c:bc:f3:
         c4:36:cd:e4:5a:45:11:ba:ae:82:82:dd:50:35:e0:22:aa:94:
         7b:56:34:62:0f:f3:bd:03:39:5a:09:37:ce:6f:c2:ff:b9:9f:
         75:5c:12:ce:1d:cd:0d:4e:35:e7:81:fd:47:18:12:c0:ec:9f:
         dd:cb:e0:47:76:f9:14:1c:07:2b:a0:e6:4d:48:d9:66:2c:34:
         6c:64:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:01 2024 by rpki-client on console-ams.rpki-client.org