Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          uV63u24vFqUn+m4G0T5bZ2KlRNxacwKDsiJDkwcHcBc=
Subject key identifier:   CF:6E:7F:44:EA:AC:6D:A2:AB:6E:99:AB:FB:76:68:1F:1F:C2:7F:A4
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       01901D0EF9F8E205C7714C7FC249E7CEBF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 18:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:38 +0000
Files and hashes:         1: CoKFm945lUG_bPWHhkeUJeGQh84.roa (hash: g7kJMh9PWX1DRAtA2O58ID9CpSSrTxVcNoT6Jl+9Ub8=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: EXfUEGxjKvehaX8etBveLmW5c3ZS7mQKHeYk0uKghwE=)
                          3: Z5rHjvgUx6fqbRaZqPzICbQhxAo.roa (hash: Hr5e9lSTAKKoeT+GNvDZkLLHCeBQ5EKql5SfhHCvpsU=)
                          4: aE0wkVOWDxBIiI7DNbEuML2c7QY.roa (hash: +Ks8QRTdYO2MXG6QiStCkLU7m1R7ItX7TQ90LsnMczY=)
                          5: d0JTcLqGjG3taQkrSywda44GQJc.roa (hash: Jyt6fS5TufEp/gKivNl55LsBN8cDy2ZLLsIbAjNuskQ=)
                          6: sMjren0IMoprvYYhl88BbJMKuFc.roa (hash: XPNcR3X+KZIZ5XTlZmVhg+rLluDwOhR35Y7IH2iDr/o=)
                          7: zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa (hash: f7VkQM61KOvEr4Up9vusjZ5zN9dX2+Ax7MlGTC6rXpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f9:f8:e2:05:c7:71:4c:7f:c2:49:e7:ce:bf:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Jun 15 18:00:38 2024 GMT
            Not After : Jun 16 18:00:38 2024 GMT
        Subject: CN=cf6e7f44eaac6da2ab6e99abfb76681f1fc27fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:4d:25:86:17:16:0f:08:89:d4:25:27:52:
                    01:b6:bf:6e:5e:8d:4a:97:cd:e2:6d:e0:c5:cf:f7:
                    b0:41:20:9d:e5:d3:11:e1:b8:9f:5a:fa:37:50:d0:
                    57:f6:5e:77:45:db:e7:f1:2f:ff:ec:3a:78:83:ba:
                    43:98:8c:ee:bb:6b:99:f9:39:8d:e8:da:7a:1f:4b:
                    6e:1d:96:fd:91:9e:1b:a9:93:d9:56:1f:dd:76:47:
                    9d:b4:05:59:e8:c3:1a:94:9e:cb:f0:75:2f:c1:53:
                    62:58:0c:65:92:12:36:0d:7b:85:a0:d6:23:88:44:
                    9e:cf:df:df:bb:fd:43:b2:8f:70:6e:e0:d0:c9:5f:
                    0c:d9:c8:b9:40:4a:4f:c4:8d:a2:ef:26:dc:b1:8a:
                    51:24:d5:30:ea:c0:a8:28:e1:3d:9e:60:57:8d:a9:
                    3c:47:e5:45:b8:1b:75:36:c2:7d:68:f1:19:5a:9d:
                    d4:93:6d:49:46:6b:10:77:b1:16:83:08:91:53:d9:
                    39:57:74:49:13:7e:91:51:24:0c:67:06:d2:34:82:
                    d3:67:8d:e5:ab:46:ef:07:62:95:bb:df:39:67:a8:
                    6d:e4:df:80:25:8a:1e:7b:86:1c:44:3f:84:4f:95:
                    9e:e6:72:3c:cb:66:c2:27:7b:07:07:84:e1:2c:12:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:7F:44:EA:AC:6D:A2:AB:6E:99:AB:FB:76:68:1F:1F:C2:7F:A4
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:30:ca:53:b0:c7:38:98:2f:47:e8:9a:0b:7d:5e:d1:24:77:
         95:f4:cd:9c:4d:43:97:ce:6e:40:32:97:cd:e4:c1:58:f0:4e:
         55:ea:d0:4e:66:f7:58:88:31:d9:7d:5e:42:9e:51:a7:b9:f0:
         35:48:9b:75:74:ed:d7:71:36:8a:a0:fc:e2:57:54:30:0a:3a:
         71:d7:55:59:28:3f:7a:14:ac:f4:71:f4:e8:41:71:ab:82:f7:
         85:05:1d:89:90:1f:6b:08:f2:43:c3:c5:31:a3:2a:4e:1a:6c:
         77:20:6c:7e:61:40:8f:d3:b4:15:79:1d:3a:6b:be:29:94:f4:
         c4:39:ed:54:22:ca:8f:7d:45:13:16:f4:9f:6a:6a:96:80:4f:
         71:2d:a1:9e:96:a5:9d:e4:a3:ed:05:ac:5d:b1:da:6b:00:46:
         88:2e:f7:4d:87:02:e9:9a:00:cd:6b:ed:94:4c:ea:01:1d:83:
         1b:90:f8:23:63:e4:c4:e5:99:a7:bf:fa:67:e9:a9:ef:4b:c0:
         9e:6a:41:7c:8e:6f:d1:c2:96:f5:e0:08:af:ab:47:79:4b:44:
         fe:0a:c3:48:7a:66:a1:04:33:66:5e:33:c3:a1:f3:74:fe:04:
         58:1a:e1:c8:c4:6e:e8:97:e9:02:b3:8f:ae:1a:1c:49:28:94:
         da:77:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:59 2024 by rpki-client on console-ams.rpki-client.org