Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File:                     ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier:          8cXZ2v42WezaOcxxaCV8j9BLNSnOPwtBqiwRwfegDqQ=
Subject key identifier:   F9:F4:79:6B:D7:71:3F:BA:39:9C:DE:33:69:9E:07:07:5C:50:C5:62
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer:       /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial:       01901EC69D22E9D08601805A56573F4CEAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number:          11CE
Signing time:             Sun 16 Jun 2024 02:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:50 +0000
Files and hashes:         1: 7EDjoF5mutdcAJvIdfxor5LfZp4.roa (hash: O7ykZyXLu8J+CJMyCpWG1jkMtL50tJC56CgoAtaouX0=)
                          2: VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa (hash: Fm/3JAW+LkJlCVJjJiLbVSwtKPVWANU2oe6Ari4QbLM=)
                          3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: Mm4WAhilBOwUHij+aBB2t/eDiu4snv9BQjcDDIIT3TM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:9d:22:e9:d0:86:01:80:5a:56:57:3f:4c:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
        Validity
            Not Before: Jun 16 02:00:50 2024 GMT
            Not After : Jun 17 02:00:50 2024 GMT
        Subject: CN=f9f4796bd7713fba399cde33699e07075c50c562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:0f:3d:81:27:1f:bf:ee:ca:e2:80:ca:35:
                    5c:fe:55:5d:5d:99:d1:b0:85:29:98:20:aa:19:58:
                    98:3e:e5:5d:a0:26:15:94:fe:dc:f9:a6:86:23:45:
                    10:db:5f:b3:a8:78:6f:23:65:65:cd:48:09:dd:8c:
                    7f:73:09:18:f8:6b:6f:b9:73:d9:77:e6:99:74:be:
                    f4:a7:d1:d8:43:69:ae:6b:53:f9:7f:a2:14:50:a0:
                    77:8e:f0:97:a0:13:bf:38:60:a8:58:b8:dc:fc:f4:
                    9f:13:a4:21:18:81:b5:8c:9f:1e:b6:6c:ad:ea:24:
                    a2:d0:51:eb:d3:b8:cf:2e:1f:1c:ff:5e:36:44:66:
                    cc:eb:a8:ef:56:e5:8d:14:cb:05:17:c5:eb:19:b1:
                    62:f5:df:33:a2:22:a0:51:e5:ad:ef:31:0d:c8:88:
                    21:89:61:b4:eb:47:a3:27:ee:26:f3:f7:c0:6f:bd:
                    83:55:63:2c:3d:08:c3:b3:42:da:71:81:d5:48:d3:
                    98:eb:b8:fd:e1:5c:6a:fc:3e:cc:fe:c5:d0:b8:b7:
                    1c:24:33:75:f3:08:44:e2:86:db:f1:fe:e7:bb:ce:
                    27:f8:ce:68:f5:de:8d:c4:97:a1:22:a5:1c:ec:f7:
                    2f:84:68:bc:6f:3a:65:6d:e3:00:10:b8:c7:3a:1d:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:79:6B:D7:71:3F:BA:39:9C:DE:33:69:9E:07:07:5C:50:C5:62
            X509v3 Authority Key Identifier:
                keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:f1:d3:90:da:c2:06:14:14:af:75:b2:80:e7:e2:88:03:
         d6:6e:0b:93:5c:b5:92:d8:a7:dc:db:35:b6:5e:17:06:cb:a3:
         a8:ab:df:34:99:e0:13:cd:51:5d:98:ef:c0:1c:bf:0e:75:99:
         6e:64:04:bc:9c:b9:2a:1b:dd:45:de:e9:96:11:5c:d6:f9:e6:
         ba:57:e8:06:62:6f:90:f8:e8:3d:41:8d:c3:83:36:78:84:92:
         4c:14:22:cb:16:62:87:8a:0b:57:8f:63:7f:fb:dd:9d:0f:5c:
         47:a8:06:51:2e:19:6c:b0:20:0e:5d:0d:1c:62:d3:27:1b:b5:
         74:49:b2:94:22:41:05:e1:d8:48:c1:a5:fe:eb:a0:6d:10:82:
         8a:ac:2e:32:98:a7:70:b9:db:a9:ca:9f:46:ae:7e:04:9b:90:
         cd:0f:fb:f5:22:e9:bc:3b:93:32:23:7a:58:b8:d8:1b:92:ea:
         c0:21:3a:0e:f8:2e:13:05:c0:3e:a0:91:ef:ab:bb:40:3d:de:
         13:7c:31:d9:73:6c:d4:3f:01:25:e5:a1:76:82:89:d4:e2:a3:
         b1:68:7d:1d:fe:0d:55:a1:24:83:92:62:41:1c:ac:5a:58:f5:
         61:9d:9d:fe:92:79:57:d0:ca:ee:e2:20:7d:8b:d5:2e:f9:95:
         42:53:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:44 2024 by rpki-client on console-fra.rpki-client.org