Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File:                     iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier:          RpvpH6wtLV4C8lDRHFLLXAYVlEc4ZBVK6TEiL1X+LJE=
Subject key identifier:   C7:9F:21:DE:FF:15:46:E2:6A:54:CB:10:CA:86:58:C0:18:4E:9A:CE
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer:       /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial:       01901F34BE91CBCB8F8B53821F801DC35F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number:          0B2E
Signing time:             Sun 16 Jun 2024 04:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:08 +0000
Files and hashes:         1: 9jxNqZ1m5S-phxgXLPFGJuBI4fE.roa (hash: cb5Q8nDenY0WDoM66jl4Mcb54ZfXILPrgszNpZXsons=)
                          2: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: WWtMMAK2LzWTPEnbWiiKn+eWm+8wne3S2O/iyEpMyZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:be:91:cb:cb:8f:8b:53:82:1f:80:1d:c3:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
        Validity
            Not Before: Jun 16 04:01:08 2024 GMT
            Not After : Jun 17 04:01:08 2024 GMT
        Subject: CN=c79f21deff1546e26a54cb10ca8658c0184e9ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:01:86:0a:dc:1c:5c:ab:de:0e:60:e2:73:
                    bc:16:e2:35:db:76:1d:be:27:9a:5b:08:6c:0b:6d:
                    02:c4:81:08:95:e8:12:50:49:28:9d:4c:fb:2d:67:
                    18:a3:3c:df:d5:49:13:26:94:6b:33:0f:4c:b0:ee:
                    58:d0:59:9f:b9:e4:ac:01:2c:9a:e8:fb:55:6b:ab:
                    ec:a2:1d:2e:a7:68:cc:96:31:21:f2:0f:d3:3a:03:
                    26:5b:d6:26:e4:ea:1c:9b:d5:fa:61:e6:dd:6d:47:
                    5f:f4:f7:83:17:fd:91:d4:f9:ab:7e:fd:03:c2:42:
                    e7:03:96:bb:fa:c8:cd:86:a9:c0:33:56:dd:97:7f:
                    5e:08:7a:d7:8b:d2:ad:6d:a0:09:8a:dd:0e:f7:95:
                    1a:ee:81:c9:56:a1:d7:90:6f:4a:54:03:3f:70:a8:
                    7e:f6:d6:3d:5c:25:ee:47:cf:37:fa:d6:51:74:6d:
                    05:d9:66:0e:0b:09:ae:1e:b1:f4:28:e2:f0:2d:4e:
                    24:d9:02:bb:88:83:78:ee:2b:0d:65:59:15:a7:9e:
                    49:23:2c:b4:a3:99:f6:59:3a:52:aa:db:1c:5a:5a:
                    5e:0d:46:b4:d4:4a:29:73:26:db:c7:cb:b0:a3:70:
                    58:78:6c:2e:17:28:4f:a3:ea:4a:5d:d0:88:0c:97:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:21:DE:FF:15:46:E2:6A:54:CB:10:CA:86:58:C0:18:4E:9A:CE
            X509v3 Authority Key Identifier:
                keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:0d:d0:5d:00:2a:6d:96:b9:7c:03:c4:e5:66:e4:eb:74:
         4c:3b:42:d3:68:d5:6d:70:2f:eb:2a:60:06:dd:61:34:2c:0b:
         07:eb:f8:1a:37:55:4b:16:3a:ed:09:ab:74:27:2f:6f:be:e8:
         cd:e1:87:57:c0:f7:3e:00:4b:1a:f4:b6:e5:34:b7:33:c9:33:
         9e:58:2e:4f:d5:ab:4e:11:16:c9:ef:8a:f8:67:fe:db:33:3d:
         e5:fe:13:36:3f:9b:54:e9:28:71:fc:93:67:e8:a2:8f:76:b3:
         12:ca:e8:59:5b:91:52:5f:ca:05:4c:89:cb:ff:88:4d:ee:01:
         2d:f8:05:02:1e:59:0a:56:c0:64:6a:75:7a:06:aa:b8:2e:fb:
         ae:37:e0:7d:dd:3d:57:21:ea:02:61:7a:37:58:05:4b:94:4d:
         07:1d:b7:b7:e7:e4:11:84:b4:e9:bf:14:05:78:b6:45:dc:57:
         60:cb:3e:17:fc:af:55:da:cc:05:6d:00:92:42:61:b7:f7:ae:
         6a:ce:8a:37:58:e0:3f:61:40:f1:b9:30:3a:8a:ee:a7:58:d3:
         98:9e:54:bf:66:41:97:fc:fa:b1:a0:ac:50:de:f0:6e:c3:f1:
         55:c2:b2:61:c3:e5:28:e1:05:bc:6c:c9:b6:a8:31:28:d1:ca:
         2f:24:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:05 2024 by rpki-client on console-fra.rpki-client.org