Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          ZAjalPixGv9xVacdDyawdDZgJt14kJIIWWfixFI5LS0=
Subject key identifier:   EF:45:B2:0F:F9:B9:97:36:E5:77:8E:90:60:F1:2C:7E:EC:56:F0:3E
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       01901F34C9194A25199F0FC6243103340A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          0134
Signing time:             Sun 16 Jun 2024 04:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:11 +0000
Files and hashes:         1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: H31wYj5KxbhpjWdHEWB0UHlXovsMN3+tekJeYecJjtQ=)
                          2: lt_EU_7XVRhGF-yEAFpjPB1ZGy8.roa (hash: SZ1EVTnhPA/PjUBNRgzJqtEoQNHC1vVQ2qDYTBkOE7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:c9:19:4a:25:19:9f:0f:c6:24:31:03:34:0a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Jun 16 04:01:11 2024 GMT
            Not After : Jun 17 04:01:11 2024 GMT
        Subject: CN=ef45b20ff9b99736e5778e9060f12c7eec56f03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:18:18:aa:0e:ae:cf:a0:dc:ab:2e:2e:d4:
                    64:5c:6c:23:26:f5:a3:f3:9b:4d:c1:0d:6b:d6:29:
                    62:b2:47:e8:cd:16:6c:a8:2e:73:40:1d:6f:8d:51:
                    12:65:13:ef:85:27:7d:44:af:7d:0f:cc:75:a6:87:
                    57:16:34:bb:cf:cb:c7:2a:d9:4f:8f:d4:ae:3e:58:
                    b0:02:96:58:c0:1b:f2:60:0c:f1:64:60:50:16:56:
                    a4:f7:19:7e:1e:8e:84:00:88:cb:47:89:c7:67:a2:
                    c0:ef:a1:22:a8:ab:7c:47:69:6b:4c:68:c6:3a:1e:
                    37:ab:fe:4f:65:c3:93:f7:5e:ca:4e:5d:2c:67:d3:
                    60:98:9a:d6:ec:63:c2:26:ab:dc:25:f3:96:c1:1d:
                    c4:18:7c:df:b4:15:46:27:9f:2d:5e:0a:c9:27:f7:
                    0e:d8:2c:bb:40:f4:d2:11:36:a7:03:58:f5:f3:ec:
                    2b:02:58:6e:8c:0d:6e:75:c3:90:cf:0e:5a:cf:02:
                    5a:cc:f8:e6:07:e1:6c:57:fc:48:fd:86:91:16:61:
                    d6:d6:57:6c:07:54:6f:9e:3d:47:80:61:ca:4a:b8:
                    1a:1e:01:3c:a5:dc:83:19:15:ad:1e:6e:0a:ee:f8:
                    41:24:d6:b6:21:98:63:83:ef:da:1c:c1:da:c7:e7:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:B2:0F:F9:B9:97:36:E5:77:8E:90:60:F1:2C:7E:EC:56:F0:3E
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:34:4c:f9:5b:9a:f0:fc:c6:c5:9e:c1:5e:cd:b5:c5:a1:70:
         1d:47:c5:22:b9:41:67:0a:5d:c0:65:da:68:da:3c:7a:c1:ee:
         f3:29:ec:4d:dd:b6:ab:5d:21:1d:9f:c9:9f:8f:b3:aa:31:f7:
         2a:a9:cb:d9:2d:7b:73:45:05:f3:2e:ed:b6:93:ac:0a:90:65:
         30:b5:e9:cc:f5:ee:03:b5:a4:81:c6:5e:1a:66:a4:6f:83:32:
         8c:0e:f9:75:9d:6d:cb:b6:1b:ef:d3:f3:a4:dd:64:09:7b:61:
         cc:80:f7:7e:2d:e1:ba:7e:de:be:4e:df:08:dc:3e:5a:a8:12:
         b5:03:34:8d:64:87:d3:18:ff:f8:0a:62:81:91:b2:fb:64:e4:
         c9:1c:c4:90:fd:94:f4:4f:11:6a:c7:e9:16:c7:73:ea:1b:a5:
         74:54:71:b4:51:e1:df:45:23:a7:4e:7f:07:f1:de:8b:a4:3f:
         2b:dd:f4:10:97:a9:14:57:3d:8a:71:33:5f:7a:1a:f6:1f:d8:
         1e:a8:d7:9a:ae:f8:bc:73:fa:8e:c5:b1:c7:23:08:fb:a3:0b:
         d3:f9:53:e9:ab:7b:32:ae:93:60:9c:86:f5:23:3f:36:92:9b:
         66:76:b0:33:89:9b:79:f5:7c:5a:ad:19:2c:8d:36:f6:ed:eb:
         da:6c:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:40:13 2024 by rpki-client on console-ams.rpki-client.org