Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File:                     iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier:          yIpe2jc9m3AQTXOml4WIynOECUkpLYmk1AMuEMOU2Ks=
Subject key identifier:   83:93:07:93:77:69:82:06:D9:EA:85:55:45:20:01:CA:C2:AD:12:F2
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer:       /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial:       01901F346EB957B5C2539E4CDC4EF5C09A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number:          0A39
Signing time:             Sun 16 Jun 2024 04:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:48 +0000
Files and hashes:         1: 9yVY6yUm5RPHBH3cYHYF_a2-HhA.roa (hash: 5Z3OjCiAIpNWwlNMzv/LCkUxFw7Wmcv82+QThBSFncY=)
                          2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: DeM39sJNamHnazk6z+aeoD255QFQ2i7++pa7J9OKxQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:6e:b9:57:b5:c2:53:9e:4c:dc:4e:f5:c0:9a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
        Validity
            Not Before: Jun 16 04:00:48 2024 GMT
            Not After : Jun 17 04:00:48 2024 GMT
        Subject: CN=8393079377698206d9ea8555452001cac2ad12f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:de:ba:65:1e:71:6e:91:b5:d5:60:cf:fc:
                    91:af:06:3e:5a:8e:6f:33:93:ca:f2:08:41:b3:49:
                    c6:8a:fb:e5:e9:27:da:ee:29:c1:01:f2:d1:23:f8:
                    04:37:d1:50:31:46:10:54:77:6a:85:30:1e:be:0c:
                    9e:91:03:be:b9:94:43:f1:7c:cd:e0:24:69:62:b8:
                    dd:5f:6a:af:95:dd:10:45:ac:a3:25:9a:73:6b:82:
                    6f:e4:7c:8f:4f:46:e9:f6:e4:f0:6d:15:fa:06:47:
                    cb:07:c5:51:84:0a:a6:51:31:25:87:ca:f8:56:ce:
                    d4:f5:8c:c0:ba:78:38:37:5b:ba:3c:e0:89:5f:30:
                    09:eb:fe:0f:82:d8:93:02:3c:5a:ff:96:8d:d4:5a:
                    a9:e9:bb:ff:a0:cb:9e:5c:fb:13:89:4d:98:2a:96:
                    c3:3f:38:5a:7c:b9:85:4c:6d:1c:5c:37:03:58:86:
                    2e:7e:f0:88:93:54:e7:a4:34:9f:7a:98:77:85:15:
                    9a:9f:fb:32:de:c1:c2:67:c0:14:46:f9:cb:f0:e6:
                    70:e4:c9:65:6d:e0:ff:86:11:e2:b7:94:d7:8b:53:
                    65:ba:63:a5:b9:f9:7f:1b:5e:53:13:f5:56:f6:b5:
                    4d:c0:6f:eb:3a:dc:54:ec:4e:3e:13:47:fb:7c:a8:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:93:07:93:77:69:82:06:D9:EA:85:55:45:20:01:CA:C2:AD:12:F2
            X509v3 Authority Key Identifier:
                keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:4a:ad:ed:37:2f:e5:50:6a:e4:ae:3d:9c:e3:e0:8e:12:
         81:eb:84:5c:4c:ff:1e:94:4b:e1:14:2e:0d:3d:83:73:0f:e0:
         4c:df:d0:21:32:cf:51:d5:58:f6:89:b7:36:e5:5b:84:e5:ac:
         80:e7:85:da:e8:30:74:1c:93:21:c6:26:be:38:4e:08:49:ee:
         25:d7:76:7d:af:cd:1c:32:71:fe:14:8b:20:25:26:61:6e:3d:
         55:26:c8:85:be:51:aa:d2:66:ae:2b:00:60:94:47:d0:3e:96:
         94:b8:e8:96:f5:d1:81:8a:5e:56:69:15:b0:4b:c6:e3:c0:b1:
         7d:96:e8:21:45:ef:58:8c:7e:8a:94:16:28:b8:45:a5:55:bb:
         80:18:bf:cd:a4:b4:03:e4:8a:14:b2:c0:5f:98:91:48:a6:f9:
         ef:1d:2a:54:11:fa:ca:f2:06:06:e1:14:99:14:d6:d6:ce:38:
         30:51:27:f2:34:ad:4e:86:4e:c7:ee:b0:e6:66:21:89:9f:8e:
         f5:49:d3:2d:e2:cf:03:0c:df:a9:fd:b2:22:3e:09:9f:16:67:
         da:39:af:81:0e:15:ee:c3:c0:87:10:f9:a4:dc:2a:2c:ae:3c:
         50:aa:bf:4b:4c:54:73:3e:bb:18:34:8a:4a:c2:65:c5:fc:17:
         84:c7:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:35:12 2024 by rpki-client on console-ams.rpki-client.org