Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File:                     iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier:          wUGdg3VQgq+fivllIAOy9HGUDZBmcAA99kXyGgeu69I=
Subject key identifier:   CD:47:DE:8C:DD:29:EB:7D:D6:F2:C0:42:28:7C:82:6A:B2:CB:80:0D
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer:       /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial:       01901BFF04D27AAAF5063360C17B1476FD67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 13:03:35 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:35 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:35 +0000
Files and hashes:         1: 1-k_KmZOBusITFY5I4gikxD7IMzQ.roa (hash: 79zln1HPthu79FYLzjfgPfgoaBv6A7oXYyV1p8vlRK8=)
                          2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: Hy9zfzBodbfin0lZKTkdik9trvGhym7EdQt0d/ATk7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:04:d2:7a:aa:f5:06:33:60:c1:7b:14:76:fd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
        Validity
            Not Before: Jun 15 13:03:35 2024 GMT
            Not After : Jun 16 13:03:35 2024 GMT
        Subject: CN=cd47de8cdd29eb7dd6f2c042287c826ab2cb800d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:b4:2c:71:de:ca:16:4b:8b:8e:a5:81:8f:
                    b6:af:b7:8e:83:40:d3:38:42:46:36:ab:07:11:a3:
                    fd:a4:ea:88:83:39:3f:e5:18:35:91:bf:e4:1f:f5:
                    b3:5e:9f:c4:98:dc:e4:d1:09:f6:c4:81:dc:bc:15:
                    d1:04:47:90:ef:97:8f:60:0b:a9:93:df:c6:fe:03:
                    0f:a6:f6:70:42:6d:3d:fe:a9:97:49:76:b0:f5:b0:
                    71:1f:6a:89:2f:e6:a7:b5:8c:1b:f0:de:17:75:b2:
                    25:31:27:76:0d:76:a1:5b:ad:68:37:e1:d7:b5:a8:
                    ce:92:2b:4b:a2:61:a2:28:65:11:ac:f5:26:97:7c:
                    5b:fd:45:17:4b:37:38:c9:66:fa:38:cf:3d:eb:e8:
                    e1:c0:1a:f9:9f:00:22:5c:b1:0b:57:83:61:b9:d1:
                    86:92:69:19:71:7e:10:c3:f2:e0:8e:70:24:2d:c6:
                    6f:36:9b:61:19:8e:07:9f:a5:a0:a4:50:23:a4:23:
                    18:52:f7:fd:22:22:45:a7:a2:b7:d6:72:75:d5:fe:
                    7f:eb:52:7c:6d:a1:03:6f:2e:bd:c3:a9:9a:0b:e8:
                    17:e7:2c:3a:70:f3:30:6c:6a:d6:f7:d4:18:02:bf:
                    3c:25:93:2a:2f:fc:17:86:07:84:51:8e:b2:e8:fc:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:DE:8C:DD:29:EB:7D:D6:F2:C0:42:28:7C:82:6A:B2:CB:80:0D
            X509v3 Authority Key Identifier:
                keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:09:3c:8f:8c:82:fb:42:bb:94:71:00:1b:ed:6f:40:94:
         ce:39:bf:16:83:02:4d:b9:be:cd:80:f3:99:75:e6:5a:53:66:
         3c:c8:7d:02:16:f1:38:a0:38:6e:14:d8:15:ef:f5:af:ac:6a:
         ac:67:78:86:29:91:ec:b7:5b:d2:a8:9c:00:7a:85:c8:67:3e:
         9e:d9:7e:93:32:c4:5e:f5:15:29:b5:e5:ff:0c:e8:af:64:8c:
         fb:7a:e5:ea:54:76:e8:9c:5f:03:05:d0:41:b0:71:f4:ae:26:
         e0:e7:4f:74:7f:e6:91:79:8d:cd:be:4d:0a:04:b2:20:0c:9a:
         dc:d1:dc:57:bb:52:81:36:9a:d5:62:0d:5c:3c:7b:5a:c7:7a:
         8e:4b:4a:05:6f:cf:fe:57:34:82:87:e2:1f:72:8b:fd:07:e5:
         1c:fe:19:50:88:4e:2d:20:f7:34:24:e4:bb:a7:f6:f8:51:1d:
         0f:af:17:78:3e:f3:49:9d:68:d0:44:5b:81:4c:51:76:e7:a3:
         8e:62:1e:2e:35:97:13:fb:06:54:8e:87:34:27:77:00:22:8a:
         6c:a7:32:e1:95:c9:2a:ba:f2:f3:e3:14:81:d4:b0:59:4e:cf:
         42:db:e9:96:5e:dd:b2:c6:21:92:a6:9e:b3:06:f2:70:6e:bc:
         d5:d2:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:17:22 2024 by rpki-client on console-ams.rpki-client.org