Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File:                     IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier:          F5RzMX92hmX1LTenQc0GPUniCY0BN6tQH77qbW+JpoA=
Subject key identifier:   68:84:71:03:DE:C0:CF:A4:09:67:72:F0:07:B6:E8:3B:B9:01:7F:0A
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer:       /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial:       01901DED58E7CE13ACFE4190FF8B0BED3324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:32 +0000
Files and hashes:         1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: hvDQUE8aZT5D4wZI0gIriwRYhXRniQTG2HTHz2+gpKM=)
                          2: nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa (hash: Hs8kkhzWSInG2bbz2V+A6c+fmfyTkYFnJuZQoyAUjhc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:58:e7:ce:13:ac:fe:41:90:ff:8b:0b:ed:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
        Validity
            Not Before: Jun 15 22:03:32 2024 GMT
            Not After : Jun 16 22:03:32 2024 GMT
        Subject: CN=68847103dec0cfa4096772f007b6e83bb9017f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:bc:9c:ab:c8:aa:cc:64:5e:52:04:e4:ba:
                    61:db:7c:d5:dd:ea:0f:18:3f:19:1e:7e:72:8a:3b:
                    52:a2:63:04:6f:44:47:79:69:3f:ea:a4:99:30:12:
                    2b:0e:11:6e:80:87:10:54:72:a4:d0:8c:46:02:ba:
                    36:13:75:45:7b:1d:f0:05:6b:25:68:ba:64:98:dc:
                    9a:52:bb:6f:96:26:c7:52:18:7c:b2:07:8b:ee:6a:
                    42:7a:f8:5e:80:97:c6:3e:07:cd:2e:7f:13:a6:61:
                    6c:c2:06:b9:91:38:8f:c0:d7:c5:28:a3:5b:ee:4b:
                    08:4c:3c:84:bc:dc:2d:9f:84:8a:f0:a3:ad:2e:93:
                    15:89:e1:11:1a:fb:a7:51:0c:73:e2:49:33:83:6c:
                    6a:a8:47:20:9e:2f:a0:04:e7:4f:30:09:23:bc:d0:
                    d1:71:09:53:12:cb:54:fd:7a:ca:11:23:26:13:04:
                    7a:db:c9:88:d7:b8:46:db:9a:44:a2:ca:ab:41:cd:
                    54:cd:c0:68:db:9e:3d:c4:16:73:81:b9:28:2c:86:
                    7d:6a:e3:8c:74:a2:94:34:25:45:4a:40:e0:1b:81:
                    a8:9d:40:84:df:ae:ff:24:aa:03:2c:af:dd:a3:16:
                    81:25:25:0d:3a:a4:78:62:f8:9c:2d:07:a3:1a:7a:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:84:71:03:DE:C0:CF:A4:09:67:72:F0:07:B6:E8:3B:B9:01:7F:0A
            X509v3 Authority Key Identifier:
                keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:2d:97:21:e3:57:5b:0c:b9:3c:7d:00:e8:a3:27:71:11:26:
         71:57:17:9f:1b:a9:26:3c:1e:43:b7:07:78:ea:03:46:9b:e4:
         37:a9:43:0b:ef:b6:20:ea:5e:38:11:6e:93:96:ac:06:57:e0:
         ff:3a:0d:e5:c8:75:3a:85:21:7b:5a:b7:35:8c:88:11:69:61:
         38:2d:58:1b:83:bf:a4:dd:3f:cf:07:ea:08:76:9c:1a:4f:96:
         e8:9a:d6:8c:d0:a3:b1:dd:d4:d1:e2:1e:ee:e4:e0:8b:e6:c6:
         67:77:bd:52:a1:d3:a8:4a:09:a3:51:5e:05:d2:08:a0:a2:d6:
         ea:69:13:c1:d6:f7:dc:e5:47:c6:7a:04:eb:17:f1:78:a9:2a:
         b0:13:e9:e6:b2:65:11:c6:e4:1b:05:67:59:bf:20:aa:55:e2:
         31:37:38:6a:98:5e:f5:d7:5e:86:db:34:3f:84:14:8a:7e:cd:
         eb:d2:3f:ac:04:b4:cc:ef:be:38:19:22:b8:2f:59:d6:d5:9b:
         da:1d:ca:4b:aa:15:ff:14:93:4a:4c:fd:ea:6c:b7:4a:99:71:
         e4:98:6a:05:23:4e:10:f2:62:7e:4d:7b:62:5c:13:ef:16:84:
         f5:f2:89:df:a4:66:49:38:28:6e:80:b2:f1:8b:03:9a:26:e9:
         02:a7:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:46 2024 by rpki-client on console-fra.rpki-client.org