Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File:                     iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier:          4FPrLoZihJPqeQ7f2gA5eLYEOK+ZB7Vq8xylqOqqPEE=
Subject key identifier:   C6:99:C5:B6:4D:A8:B4:F4:59:89:7D:E8:84:64:A2:41:00:DA:DD:CF
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer:       /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial:       01901C6AD14C6F12BB3202490C74123AACE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 15:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:20 +0000
Files and hashes:         1: Qh6IfNNXYuQApptQvtGhingRs5o.roa (hash: tSYNomvgnaP2JvI3uOIiCeg2OHXB/BVGD8DkwHscgPo=)
                          2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: f0K8OkwF1zYv8H3KhYDbpXd+5wiDS3goygZXMrNjSmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:d1:4c:6f:12:bb:32:02:49:0c:74:12:3a:ac:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
        Validity
            Not Before: Jun 15 15:01:20 2024 GMT
            Not After : Jun 16 15:01:20 2024 GMT
        Subject: CN=c699c5b64da8b4f459897de88464a24100daddcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:81:ce:b6:4c:20:39:d8:a1:7b:93:74:65:
                    77:3e:a3:74:c3:36:30:28:cf:43:ec:75:01:fe:af:
                    26:1c:db:e5:16:40:9e:36:58:31:6e:f5:ea:59:63:
                    87:92:38:51:0f:30:94:9d:c7:a5:12:e9:da:f3:e1:
                    6d:ba:46:25:73:4b:59:88:bf:ea:79:ac:b0:6e:83:
                    51:d7:ef:5b:21:2d:66:51:e7:e0:2a:5e:51:4e:f5:
                    ae:2e:77:c5:c0:59:dc:46:1f:2f:ba:26:8f:5d:27:
                    05:59:ec:72:03:6e:2c:35:1b:ed:1b:a3:78:07:05:
                    12:66:66:8e:95:4c:59:bf:84:5d:ea:be:06:3f:5f:
                    db:5f:0f:05:53:66:ad:51:75:87:b8:f1:c5:f3:0a:
                    38:e9:77:83:b2:2f:c0:fd:bc:df:cf:01:9d:84:40:
                    be:75:f2:ca:af:d2:a8:0b:43:4b:0a:80:b1:94:0e:
                    0d:24:c0:35:b5:36:6f:5f:8d:62:f6:bc:36:b4:7a:
                    d9:54:6e:d6:2b:26:3e:af:9b:f7:84:22:e1:31:fb:
                    e3:27:59:8b:e8:f9:62:25:5e:49:12:1d:9f:ab:8a:
                    34:01:6c:20:6d:4f:32:d2:71:d4:4a:8d:b0:81:40:
                    83:90:0c:3b:94:c4:e4:0e:97:6e:e6:f5:75:ce:2b:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:99:C5:B6:4D:A8:B4:F4:59:89:7D:E8:84:64:A2:41:00:DA:DD:CF
            X509v3 Authority Key Identifier:
                keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:18:2f:a1:bc:82:83:97:0a:5c:56:64:3e:46:cf:9b:17:
         4e:2a:7c:86:c8:34:a9:c7:d9:bd:fb:42:57:e7:85:cc:bc:ea:
         f3:4a:63:e8:99:60:1a:08:56:8a:1a:34:72:17:0e:31:6d:46:
         36:74:15:b1:2b:7e:07:02:37:24:b7:ac:be:96:3a:c0:3b:76:
         95:4e:e1:23:2b:98:ed:64:4b:ba:c1:8e:31:cf:a5:32:ff:0a:
         87:85:b8:0b:9d:5d:91:11:b9:fb:d2:c3:eb:00:a7:8a:20:0c:
         86:13:b2:a9:23:a7:aa:a3:43:37:89:97:7e:62:24:48:a0:b7:
         7a:f6:d2:1c:73:1c:8b:84:e2:9e:02:3d:57:84:66:31:50:f0:
         b1:f6:e3:b9:c8:49:16:ec:60:ae:5d:4a:7d:ca:09:00:10:a0:
         f5:41:85:0d:be:82:6c:4e:37:26:a9:5d:0c:e2:44:bc:6c:37:
         20:cb:ab:cc:19:53:78:21:74:0c:58:ce:43:36:76:18:d1:ca:
         2f:25:f3:7f:a7:f1:6d:5a:c6:89:c8:3d:05:3c:37:d3:f3:d8:
         0a:98:31:29:e7:0e:cb:99:06:e5:03:e2:8b:1f:a0:dd:80:e0:
         af:91:ba:46:9c:db:aa:3a:d4:70:58:6a:ab:83:0d:af:a5:50:
         46:d4:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:42:59 2024 by rpki-client on console-ams.rpki-client.org