Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File:                     Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier:          0oy9DRt6ayUy1FGVK0zQnq26of2/ipgURbhS3/d/TZY=
Subject key identifier:   7A:23:6D:BF:5F:85:43:09:FF:80:EC:01:94:41:73:77:6A:86:7C:B9
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer:       /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial:       01901BFCA824AE33CCBE8E5DE2DC302AC67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number:          0E96
Signing time:             Sat 15 Jun 2024 13:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:01 +0000
Files and hashes:         1: 4EtvpWp3t3yuG9UpobViZqd9YvI.roa (hash: C8B2UPgeBh8R3D6nfq5RnZzNhCmW6Jv2BKfEcsCYGis=)
                          2: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: PfmP3KiT7I45HoYbO4/vKTiNztbYeVJbK+QVziX5YVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:a8:24:ae:33:cc:be:8e:5d:e2:dc:30:2a:c6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
        Validity
            Not Before: Jun 15 13:01:01 2024 GMT
            Not After : Jun 16 13:01:01 2024 GMT
        Subject: CN=7a236dbf5f854309ff80ec01944173776a867cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:14:a7:43:b4:79:4e:d6:2a:0c:ad:3f:25:
                    23:f2:f1:85:f9:96:d5:99:90:29:5f:31:cd:85:c4:
                    3e:cf:da:dc:3d:d8:f2:1b:66:56:9c:9a:c4:22:7e:
                    66:5a:d6:99:e4:ff:2a:46:c6:4b:31:e6:e1:99:df:
                    f1:8f:4a:b0:de:6c:a1:84:cd:87:3c:17:2a:a5:6b:
                    b0:63:ff:59:b5:a2:96:85:7c:ed:64:84:04:52:22:
                    cb:23:50:6e:75:b6:1c:a7:c7:cf:a0:f7:27:68:a0:
                    73:fe:04:f8:a9:66:c6:0c:01:ba:61:b7:d7:7a:d0:
                    e4:1f:ef:54:7d:52:b8:f2:9b:8b:e3:0d:e6:fa:95:
                    54:98:c9:48:13:61:bb:99:a4:fb:48:07:23:ab:eb:
                    82:b5:5a:28:ce:e7:54:56:38:54:1f:b7:04:62:59:
                    fa:48:6a:b3:4d:cb:0e:91:44:c1:ba:f3:b8:e0:6f:
                    63:22:ca:e4:ad:0c:d9:d2:09:7d:3e:75:5d:f5:6a:
                    72:34:41:bb:1c:df:62:87:ba:1a:93:ec:25:1a:6b:
                    4f:e9:5a:68:44:f8:3a:f9:75:67:0d:9e:ae:57:64:
                    7e:54:bf:0e:cd:ca:b0:cf:a9:bb:f6:ac:a2:69:6b:
                    05:20:87:05:75:ef:3e:bf:07:1c:b2:7a:f8:18:32:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:6D:BF:5F:85:43:09:FF:80:EC:01:94:41:73:77:6A:86:7C:B9
            X509v3 Authority Key Identifier:
                keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:36:c3:1c:42:9c:8c:96:cc:98:e3:88:28:b3:ce:50:50:
         35:b4:7e:58:eb:96:8a:7d:f9:14:57:1b:60:27:10:3d:b0:a5:
         bf:43:41:33:75:bd:8d:ad:38:fe:9c:eb:5c:62:87:09:f3:5d:
         86:02:7b:7b:af:b9:93:26:2d:20:81:0e:05:f2:56:2c:56:ef:
         f9:58:b9:0a:e0:06:73:2e:e5:7f:fa:a6:e5:39:5a:6c:a5:2b:
         80:7c:27:09:89:57:70:fd:01:20:5a:89:51:4c:06:13:dc:50:
         10:63:04:16:52:43:58:7d:2a:35:f3:ec:bf:98:85:ad:f1:09:
         c3:88:28:1e:d3:f1:88:29:67:9e:ac:4f:03:bc:f5:b3:6d:75:
         d8:fb:71:7a:1e:c9:7c:01:a6:35:1c:59:d5:be:10:9c:05:78:
         45:8d:84:7d:a3:c6:37:30:57:f4:17:58:e4:d9:18:f6:9c:71:
         96:cc:74:ac:6c:9d:0e:fc:41:bd:27:25:16:9e:e9:ea:8a:a2:
         9d:e1:57:20:ee:26:5d:40:02:a0:b0:15:df:f0:03:d5:9b:d1:
         20:82:0c:64:4a:45:88:67:6b:b6:a1:e6:a1:ca:4d:7c:a1:df:
         45:10:54:57:bc:a6:56:9f:0a:5c:af:9b:17:d8:10:71:8c:df:
         69:f0:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:25:35 2024 by rpki-client on console-ams.rpki-client.org