Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File:                     IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier:          0upC0zaeIGnOFnuZsLFpwhf2XaPA9HrPYYDcT5onir4=
Subject key identifier:   8A:9E:67:26:F9:42:30:DB:97:83:D9:C4:3A:17:23:FF:53:0C:16:15
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer:       /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial:       01904868EAEECA2A49D344590A21345B26B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number:          0858
Signing time:             Mon 24 Jun 2024 04:02:33 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:33 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:33 +0000
Files and hashes:         1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: wRjvJNnt6wHazvasWhGF2A5muDlYvVu1F54nL6XP/R8=)
                          2: R-QzQ7DREobxXbLRHeZLv2QXf-Y.roa (hash: IL24i/zccRCyUOv2LgU7kL0qbRkj51TTHHKW9dSswmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:ea:ee:ca:2a:49:d3:44:59:0a:21:34:5b:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
        Validity
            Not Before: Jun 24 04:02:33 2024 GMT
            Not After : Jun 25 04:02:33 2024 GMT
        Subject: CN=8a9e6726f94230db9783d9c43a1723ff530c1615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:9d:14:f0:38:30:6b:71:43:ee:07:22:d0:
                    43:be:a2:29:56:46:6d:c7:d9:29:f4:8d:fe:a7:84:
                    c4:4f:b2:68:2f:5d:7e:ea:35:01:d1:f5:f1:b6:cb:
                    a1:a7:55:97:b5:28:7e:be:82:00:df:be:1d:47:3a:
                    f4:66:9d:25:33:ec:e6:e8:c9:6e:e5:b1:c0:ea:3a:
                    2b:4d:ee:e4:82:5f:f7:08:b3:79:50:5a:28:9e:bf:
                    2e:dd:10:5f:e7:3a:63:fe:7b:83:8a:29:45:d5:3a:
                    42:bb:66:39:86:06:7c:49:dd:4b:99:54:37:37:ad:
                    e2:2a:2a:44:50:0b:1e:17:da:33:07:00:0d:4d:4e:
                    0b:55:a9:4b:0e:e6:a7:4b:4a:cd:ef:2a:a3:0b:c2:
                    79:22:b1:b4:5f:ab:46:d9:25:3f:69:c6:a1:b9:7e:
                    3e:3e:7a:5c:16:29:33:28:1c:4d:75:8c:48:70:93:
                    cc:15:72:f2:86:7c:99:d4:68:b9:ed:6f:28:8d:79:
                    81:16:3c:ed:94:b5:47:06:34:ee:8c:60:3c:17:fc:
                    30:dc:9b:d2:80:1b:e6:b7:19:7d:6b:6c:84:df:77:
                    80:f6:1a:d3:a6:eb:10:41:3f:1c:56:09:60:a4:e5:
                    8a:e7:9d:ae:7d:b9:e2:1f:f6:be:c6:c5:87:d2:6a:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9E:67:26:F9:42:30:DB:97:83:D9:C4:3A:17:23:FF:53:0C:16:15
            X509v3 Authority Key Identifier:
                keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:61:9a:70:dd:79:65:0f:20:90:b2:2d:bf:93:56:34:8d:
         c4:cb:07:ed:8c:84:31:ce:23:b3:40:27:e2:b6:d9:f3:75:f2:
         60:7c:11:9f:0e:1b:d2:b9:e4:fc:3a:2f:75:37:0e:85:68:83:
         88:89:1e:f7:b1:bd:18:dc:d0:a6:28:7b:ac:2a:31:37:a1:c9:
         68:71:d8:8a:51:de:f6:a1:c4:fe:3f:c2:4d:d1:2a:f3:e2:5b:
         39:dd:c3:e4:bc:5f:39:70:fd:ab:b5:c2:42:a2:d8:50:d5:53:
         5a:ff:d3:72:1f:2a:61:55:42:56:e9:b5:02:d1:14:01:4d:21:
         3d:a9:c0:2a:e5:db:1d:67:f3:19:a3:e4:f2:3e:68:84:b7:9b:
         22:2d:84:08:e5:92:11:1a:02:bd:7c:ac:00:00:70:dc:26:0f:
         82:70:78:6e:f2:9f:ac:79:01:cf:a0:bf:12:19:75:5a:8a:82:
         e0:ba:ac:67:02:48:58:cf:c6:fc:b4:a6:ec:d1:47:87:d0:a6:
         83:32:a8:82:49:a0:e0:be:93:c2:f9:3d:10:ba:5c:e2:3d:b3:
         b4:8f:3c:60:51:c1:f9:be:73:14:da:40:5e:57:57:8c:1c:6a:
         a5:a0:d9:61:69:bf:cc:0a:a0:8f:24:d3:9b:9f:8e:d6:ae:a3:
         f7:2d:18:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaOruyipJ00RZCiE0WyawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMjRmZDY1MDAzYzM5NDkwYWJlYWE5ZTFlZmU1ZjIwMjQ2
ZGM3N2IwHhcNMjQwNjI0MDQwMjMzWhcNMjQwNjI1MDQwMjMzWjAzMTEwLwYDVQQD
Eyg4YTllNjcyNmY5NDIzMGRiOTc4M2Q5YzQzYTE3MjNmZjUzMGMxNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaudFPA4MGtxQ+4HItBDvqIpVkZt
x9kp9I3+p4TET7JoL11+6jUB0fXxtsuhp1WXtSh+voIA374dRzr0Zp0lM+zm6Mlu
5bHA6jorTe7kgl/3CLN5UFoonr8u3RBf5zpj/nuDiilF1TpCu2Y5hgZ8Sd1LmVQ3
N63iKipEUAseF9ozBwANTU4LValLDuanS0rN7yqjC8J5IrG0X6tG2SU/acahuX4+
PnpcFikzKBxNdYxIcJPMFXLyhnyZ1Gi57W8ojXmBFjztlLVHBjTujGA8F/ww3JvS
gBvmtxl9a2yE33eA9hrTpusQQT8cVglgpOWK552ufbniH/a+xsWH0mrTnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqeZyb5QjDbl4PZxDoXI/9TDBYVMB8GA1UdIwQY
MBaAFCIk/WUAPDlJCr6qnh7+XyAkbcd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYt
YzZkYjM0YzJmN2U5LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYtYzZkYjM0YzJmN2U5
LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGJhmnDd
eWUPIJCyLb+TVjSNxMsH7YyEMc4js0An4rbZ83XyYHwRnw4b0rnk/DovdTcOhWiD
iIke97G9GNzQpih7rCoxN6HJaHHYilHe9qHE/j/CTdEq8+JbOd3D5LxfOXD9q7XC
QqLYUNVTWv/Tch8qYVVCVum1AtEUAU0hPanAKuXbHWfzGaPk8j5ohLebIi2ECOWS
ERoCvXysAABw3CYPgnB4bvKfrHkBz6C/Ehl1WoqC4LqsZwJIWM/G/LSm7NFHh9Cm
gzKogkmg4L6Twvk9ELpc4j2ztI88YFHB+b5zFNpAXldXjBxqpaDZYWm/zAqgjyTT
m5+O1q6j9y0Yjg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:25:07 2024 by rpki-client on console-ams.rpki-client.org