Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File:                     iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier:          /UWMVtGa5QJc2HXxO+p0fVThTS+ia5sZ/+8gdrnGrYU=
Subject key identifier:   B7:13:CC:7D:68:CB:A6:0D:19:3A:E9:8B:F3:2F:D5:1B:50:EF:01:5A
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer:       /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial:       01935840395627E6F7BBE7170C62967DA613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number:          57
Signing time:             Sat 23 Nov 2024 09:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:24 +0000
Files and hashes:         1: biKRt7g_kd5_WHcG9Sv_6yodZiI.roa (hash: 0I8yQ1bapWrZjbk/4t8NRHQcRBF23t27HxpmWq4nGcM=)
                          2: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: U81mQqkH1NuKdDfOuFhLwHsTG7LJunLwGiyqCoyz69E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:39:56:27:e6:f7:bb:e7:17:0c:62:96:7d:a6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
        Validity
            Not Before: Nov 23 09:00:24 2024 GMT
            Not After : Nov 24 09:00:24 2024 GMT
        Subject: CN=b713cc7d68cba60d193ae98bf32fd51b50ef015a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:43:0f:b1:2b:e9:36:5d:37:c1:84:82:cb:
                    d1:d8:5e:fd:9a:45:d3:ad:5e:c1:53:65:df:35:99:
                    53:fb:3b:c7:48:3a:87:84:fe:dc:d3:be:86:c7:11:
                    73:e5:6e:21:bd:48:d3:6b:86:99:f2:9c:5a:e6:dd:
                    43:af:25:75:3f:07:f6:a0:b9:1f:22:92:cc:9b:8e:
                    09:de:3e:ce:89:3e:b3:22:cc:f7:d6:d8:03:77:01:
                    2e:1c:ae:02:5f:b1:30:b1:c4:70:c1:c0:d8:e4:6f:
                    ab:51:43:16:5b:fb:b4:54:03:e2:99:c8:ad:05:22:
                    02:39:3c:de:c6:f7:f6:0a:e2:d2:b9:86:2f:d4:51:
                    e1:73:c0:db:68:31:01:79:e5:2a:27:e5:c1:bf:73:
                    96:47:a2:ed:c1:95:9f:cc:bf:d3:17:e8:f5:cf:d3:
                    aa:94:fa:69:0b:eb:61:05:0e:c9:9f:49:c1:c5:38:
                    b0:ed:51:36:e9:d0:6f:a5:20:70:a5:81:ed:af:26:
                    44:3e:09:41:bc:bb:d7:f1:9c:53:b7:91:d1:96:b1:
                    e9:5c:95:0e:ff:b7:57:d0:89:c5:a3:08:a6:c9:b4:
                    d5:c0:9a:43:84:82:4b:8f:75:83:e1:51:d7:fb:1e:
                    57:2a:76:29:8a:e6:ca:c7:23:b4:44:f0:31:c2:6b:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:CC:7D:68:CB:A6:0D:19:3A:E9:8B:F3:2F:D5:1B:50:EF:01:5A
            X509v3 Authority Key Identifier:
                keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:67:a8:ef:c3:93:1f:d4:81:6b:a4:25:63:d1:5a:66:57:
         ef:7e:64:bc:75:75:64:1d:37:ee:14:b8:45:3e:36:23:cd:7e:
         32:6e:f9:aa:59:1d:8d:47:06:d9:05:2f:8d:4a:22:2a:4c:28:
         61:69:c5:3e:d0:c7:32:09:4e:90:9f:d2:33:99:13:03:cf:ec:
         30:dd:6f:58:6b:ea:86:a6:41:45:9a:ca:bd:87:8d:ee:4e:87:
         10:c3:f0:2d:4e:0d:77:e3:2f:4a:ad:e8:27:d5:88:c7:a6:8d:
         8f:9e:2c:92:89:ff:2c:f8:e2:88:68:f4:89:03:b6:b2:b9:1f:
         f8:de:d1:5a:d6:8e:69:08:b5:46:48:96:9e:e3:ee:67:08:7f:
         31:b8:27:30:b1:d5:4e:ca:f5:dd:06:67:eb:8d:86:99:c0:81:
         e4:12:ff:4c:64:e8:41:1f:89:8b:f3:ca:2c:37:c5:c2:71:7c:
         8d:34:88:ba:d3:b2:28:a7:d4:f1:4a:a1:9e:6e:dc:eb:6b:40:
         97:6e:81:80:24:fe:15:61:5b:15:8c:23:f1:4a:51:6b:55:3c:
         68:ad:17:1d:0a:c3:a0:ab:42:e1:eb:f8:9b:b4:82:65:2d:28:
         cb:ce:9a:a7:0a:ea:d2:f3:0b:35:44:d9:21:2f:46:8c:9d:8c:
         36:24:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:23 2024 by rpki-client on console-fra.rpki-client.org