Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File:                     ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier:          E/T9xAX7dp0SaEfasywRZ8ZIvEMS6Fsirhsk+ZESYeI=
Subject key identifier:   75:0C:0D:D1:54:6B:0F:6F:BE:49:EC:2F:E2:78:9B:00:EE:4A:47:A7
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer:       /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial:       018F8F03CDBDB62AB7AD9373643894F7D403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number:          0C29
Signing time:             Sun 19 May 2024 04:02:22 +0000
Manifest this update:     Sun 19 May 2024 04:02:22 +0000
Manifest next update:     Mon 20 May 2024 04:02:22 +0000
Files and hashes:         1: IO35Muv-BryoM0I1ZKBw4gQAssI.roa (hash: /HIdjuk2TTG+JsiNcy4Oe8mhBPP53nj2Gqq6oeor96M=)
                          2: ib1U59acFH1rVvjGognT3q6id90.crl (hash: GewcWqQxzv0bHCjgVGucXeGweiYfEXUaVKQTLY3EUfc=)
                          3: pKI3eBEQp68WDIQEUJhwqRWPYsc.roa (hash: IpOvW8QzxMOVNRrSBlsgKqV3tRaohypVBi9YY6Hpvqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:cd:bd:b6:2a:b7:ad:93:73:64:38:94:f7:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
        Validity
            Not Before: May 19 04:02:22 2024 GMT
            Not After : May 20 04:02:22 2024 GMT
        Subject: CN=750c0dd1546b0f6fbe49ec2fe2789b00ee4a47a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:b2:ae:83:4c:f3:f6:7c:f4:b2:1e:79:1a:
                    03:bc:da:e5:c0:9f:0d:58:d3:09:d1:1f:6a:3c:3b:
                    cf:c0:b0:75:78:9e:d7:6a:9a:b4:2f:c3:be:44:b6:
                    22:94:2b:fa:be:52:da:37:77:24:ff:09:4f:4e:fc:
                    06:fc:74:3d:83:a1:5f:d8:81:a2:3b:9e:f3:2f:f4:
                    a5:09:c0:fd:8c:e0:c1:e9:0f:ea:99:1b:bb:91:0d:
                    81:69:70:c6:cb:d5:28:b4:43:da:ee:d5:d3:7f:68:
                    76:a2:ee:57:85:f0:4a:cd:48:49:66:2e:5a:54:3f:
                    7a:11:62:b5:13:50:b9:63:b8:00:38:6c:c4:b6:3f:
                    67:59:1d:40:6f:e9:58:cd:04:41:de:e6:24:45:22:
                    8f:df:c6:84:ab:7a:34:61:65:9c:c8:24:a2:42:5f:
                    52:05:e0:e4:ea:09:3e:c8:39:4c:62:71:e0:34:21:
                    52:f9:c1:e6:70:3b:31:21:78:6a:84:5e:b1:2f:0e:
                    ba:fd:cf:85:e0:0e:44:b7:5f:64:1c:f7:21:1d:04:
                    50:b6:d9:b0:61:d2:69:92:8c:70:74:87:6c:17:39:
                    e2:78:9e:8b:81:bf:8d:e1:0a:bf:76:e8:7d:67:b3:
                    a1:2b:28:60:44:85:97:f5:bf:99:eb:c1:1b:fd:bb:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0C:0D:D1:54:6B:0F:6F:BE:49:EC:2F:E2:78:9B:00:EE:4A:47:A7
            X509v3 Authority Key Identifier:
                keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:c3:50:08:39:75:44:2a:77:60:9d:b7:ea:e1:d8:c5:c3:55:
         70:2c:d5:07:a7:80:2b:e0:a3:41:73:1f:3b:e1:ca:fd:e4:ca:
         4f:64:ae:18:2a:8a:07:b8:bb:25:4a:68:2a:e3:eb:d4:35:19:
         d8:7a:7e:15:23:72:2a:3b:59:26:96:b1:73:93:67:62:c3:6f:
         6c:6a:5a:33:bb:50:a5:34:d7:a4:df:52:cd:58:c3:8e:e8:22:
         5a:83:1a:c6:94:06:fd:04:25:84:ae:40:38:5e:d7:30:0b:2e:
         55:e3:10:e8:b0:e5:7c:31:77:c5:57:53:c0:65:f9:86:dc:ac:
         00:ff:5f:d1:1a:9d:f9:8f:40:4d:ba:0f:1f:6c:56:65:fd:28:
         0d:ee:0e:b9:b7:ff:12:bd:cd:bd:1b:d5:7d:e8:7e:44:6f:46:
         0c:f7:e3:91:75:8d:69:1a:b1:5f:e8:32:93:97:2f:0c:d5:a3:
         ad:66:44:63:30:4a:c7:f4:99:92:36:16:cb:c2:b0:46:e0:31:
         4a:90:6e:aa:ce:e3:9b:5d:1a:4f:c0:f3:ff:5c:a8:ef:9e:0f:
         66:d4:b8:f1:7b:55:8f:1f:5d:b9:f8:64:85:79:c3:44:0e:82:
         15:42:a8:d8:b9:44:52:5f:71:62:a9:05:76:24:bc:47:52:a6:
         75:d7:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:39:32 2024 by rpki-client on console-ams.rpki-client.org