Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
File:                     iqaY-D40KcieNMjy77WxIBoY_Pc.mft (raw, json)
Hash identifier:          dnFHwvWgYY+HtG9gq9+XCqGK5L70/6tnFFyMlozuT5U=
Subject key identifier:   E5:07:E0:76:4A:B3:BB:9C:BB:60:8D:74:74:93:B3:2D:73:6B:7C:A8
Authority key identifier: 8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
Certificate issuer:       /CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Certificate serial:       01903AE2D509FBB339291A75FCBA564D7BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
Manifest number:          11D8
Signing time:             Fri 21 Jun 2024 13:01:02 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:02 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:02 +0000
Files and hashes:         1: fPgXPqnUSjfYh8oJwN272Gzd5cs.roa (hash: n1k+ZcTmISZvkNKNX0kUU6PYK4cnNgOQZCBBKL7LDHo=)
                          2: iqaY-D40KcieNMjy77WxIBoY_Pc.crl (hash: 58rnaQw1TykdD5E0eoJBXV85wxk1V0lZ68n20Fn3rpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:d5:09:fb:b3:39:29:1a:75:fc:ba:56:4d:7b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
        Validity
            Not Before: Jun 21 13:01:02 2024 GMT
            Not After : Jun 22 13:01:02 2024 GMT
        Subject: CN=e507e0764ab3bb9cbb608d747493b32d736b7ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:b7:3c:11:7c:e3:af:da:62:db:6d:2e:9a:
                    94:dc:65:fb:bf:14:65:1a:7a:35:e4:ca:fd:5d:28:
                    ee:6f:32:be:50:be:12:23:db:11:d9:e5:13:9f:ee:
                    38:a6:36:c2:c0:a9:77:be:d9:bc:c0:6c:19:84:35:
                    c9:27:39:93:89:67:b3:2b:e6:ae:5d:9c:df:b3:a1:
                    29:e0:20:90:4a:ad:f5:8a:bc:2a:65:eb:02:57:69:
                    bd:bb:a5:ec:10:58:83:30:2e:2a:fb:2f:0d:1f:37:
                    27:32:b7:66:72:95:b4:e1:d4:c3:02:84:72:df:da:
                    ba:e0:c2:8d:5d:27:1b:16:ee:02:a6:8f:92:61:17:
                    cf:8e:dd:5e:d3:83:2b:d1:c3:37:31:f2:f1:8d:7c:
                    73:73:54:ba:42:55:c3:e7:cf:01:c3:f1:dd:72:59:
                    09:66:6e:5c:33:ec:e6:2b:77:cb:42:bf:c5:09:47:
                    df:bd:ec:1a:56:90:98:54:71:7c:63:de:80:ca:2b:
                    6c:e0:d6:76:47:96:ec:ad:7c:a1:b0:b9:4d:08:80:
                    37:b4:96:1e:a2:42:0b:0d:e0:ab:c0:cc:59:2b:d7:
                    83:ae:9f:01:71:94:b3:ee:aa:87:c4:3a:74:e6:85:
                    ec:dc:66:5e:23:31:90:bd:29:09:4e:4b:4c:87:0c:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:07:E0:76:4A:B3:BB:9C:BB:60:8D:74:74:93:B3:2D:73:6B:7C:A8
            X509v3 Authority Key Identifier:
                keyid:8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:73:41:93:c2:c0:e6:2f:14:b2:69:20:19:f5:2f:e4:64:
         6a:bc:13:37:94:f3:8a:35:a6:e3:ae:93:89:45:e9:ab:11:1d:
         d8:49:70:02:e9:d3:75:29:e6:23:c8:ae:76:28:98:7a:33:57:
         dd:0a:05:58:14:a4:c1:dd:f7:f4:c1:78:c3:29:79:b5:34:52:
         67:00:b8:7c:dc:5f:0d:fe:e3:86:88:cd:f1:1c:c5:67:34:13:
         5d:43:b7:0f:13:17:3e:9d:3c:1e:4d:c2:d3:9d:a1:6d:90:6c:
         2b:98:f5:1a:ca:f6:2c:f7:7d:b8:90:82:c9:51:55:f8:fa:34:
         f1:d0:3d:fd:35:e5:02:ad:80:1f:bf:1a:81:14:f8:35:b3:0d:
         d8:cd:a9:d8:74:52:58:d1:96:d9:22:54:3b:24:8d:67:85:86:
         01:2b:14:15:e2:a8:43:4c:f3:03:8e:d2:fa:6a:b8:3e:46:63:
         7f:92:b2:8d:53:54:bd:b4:e2:f4:d4:3a:3a:8d:c5:6b:51:bc:
         96:35:10:3b:f1:de:f6:ed:d6:c9:09:ea:eb:2a:15:f9:69:67:
         0a:9c:cd:f1:0b:d5:b9:26:90:1e:b9:d5:28:cd:ce:d0:5c:d0:
         00:65:db:65:99:1a:dc:ad:f9:a8:3e:7a:7d:d7:8c:2e:66:9c:
         af:73:2a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA64tUJ+7M5KRp1/LpWTXvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTY5OGY4M2UzNDI5Yzg5ZTM0YzhmMmVmYjViMTIwMWEx
OGZjZjcwHhcNMjQwNjIxMTMwMTAyWhcNMjQwNjIyMTMwMTAyWjAzMTEwLwYDVQQD
EyhlNTA3ZTA3NjRhYjNiYjljYmI2MDhkNzQ3NDkzYjMyZDczNmI3Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2y3PBF846/aYtttLpqU3GX7vxRl
Gno15Mr9XSjubzK+UL4SI9sR2eUTn+44pjbCwKl3vtm8wGwZhDXJJzmTiWezK+au
XZzfs6Ep4CCQSq31irwqZesCV2m9u6XsEFiDMC4q+y8NHzcnMrdmcpW04dTDAoRy
39q64MKNXScbFu4Cpo+SYRfPjt1e04Mr0cM3MfLxjXxzc1S6QlXD588Bw/HdclkJ
Zm5cM+zmK3fLQr/FCUffvewaVpCYVHF8Y96Ayits4NZ2R5bsrXyhsLlNCIA3tJYe
okILDeCrwMxZK9eDrp8BcZSz7qqHxDp05oXs3GZeIzGQvSkJTktMhwxmMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUH4HZKs7ucu2CNdHSTsy1za3yoMB8GA1UdIwQY
MBaAFIqmmPg+NCnInjTI8u+1sSAaGPz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNzA0ZjItNmVkNC00NGMxLThlNGYt
NGQ3YTg0YmFiYmRlLzEvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kNzA0ZjItNmVkNC00NGMxLThlNGYtNGQ3YTg0YmFiYmRl
LzEvaXFhWS1ENDBLY2llTk1qeTc3V3hJQm9ZX1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsxzQZPC
wOYvFLJpIBn1L+RkarwTN5TzijWm466TiUXpqxEd2ElwAunTdSnmI8iudiiYejNX
3QoFWBSkwd339MF4wyl5tTRSZwC4fNxfDf7jhojN8RzFZzQTXUO3DxMXPp08Hk3C
052hbZBsK5j1Gsr2LPd9uJCCyVFV+Po08dA9/TXlAq2AH78agRT4NbMN2M2p2HRS
WNGW2SJUOySNZ4WGASsUFeKoQ0zzA47S+mq4PkZjf5KyjVNUvbTi9NQ6Oo3Fa1G8
ljUQO/He9u3WyQnq6yoV+WlnCpzN8QvVuSaQHrnVKM3O0FzQAGXbZZka3K35qD56
fdeMLmacr3Mqww==
-----END CERTIFICATE-----
Generated at Fri Jun 21 20:29:50 2024 by rpki-client on console-fra.rpki-client.org