Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File:                     iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier:          bLbNLllUC8mVs9TpKJO6qWnbYcukmCcGwwsI+fQDSnI=
Subject key identifier:   75:C0:A0:45:E2:19:E5:5C:88:F6:04:28:BB:E1:B7:8E:EF:C9:A6:0B
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer:       /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial:       018F87B6C9F1738E5BFF581C486E5702EE72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number:          0E7D
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: 0H4x4q5_LjUvnPZFW2od7cjhawU.roa (hash: HAZgzZdZtN9lNP9ClNQsCoDSb7mNQ7XdzXksXsgixNU=)
                          2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: stNXpwAM856UGIzdp5/PWixqCqJnXtXc3oH8t5M2K9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c9:f1:73:8e:5b:ff:58:1c:48:6e:57:02:ee:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=75c0a045e219e55c88f60428bbe1b78eefc9a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:5f:41:e1:2e:4b:26:77:f1:98:dc:f1:7b:
                    22:d8:2b:8a:c7:b7:0d:6a:97:b0:c0:d7:80:51:a2:
                    b0:a4:a4:60:c3:ff:3d:2a:d4:23:c6:10:e8:00:a8:
                    7c:a6:98:78:1f:ae:a2:b8:41:03:8e:23:36:b2:6b:
                    e2:03:37:70:ed:00:99:89:39:e4:11:13:f1:9c:17:
                    76:b3:82:49:d5:c6:32:50:04:d6:3d:92:90:4f:e6:
                    2d:0a:a5:a9:24:f6:47:b7:a2:a6:8d:67:41:19:4f:
                    61:fe:b1:b8:12:52:0b:8c:56:40:a0:4d:f5:0c:7a:
                    8f:41:5b:42:6b:d4:6d:05:98:c7:cb:21:8b:c7:2a:
                    d3:d8:78:c6:12:99:74:65:8a:4c:1a:0f:7c:22:40:
                    0c:72:e1:72:f0:11:8c:e9:48:86:07:53:1f:0c:03:
                    ac:98:76:7d:d8:40:95:7e:7f:dd:6a:73:a9:8f:f7:
                    34:57:ed:4c:ee:13:89:e7:a0:37:5d:2f:0b:e5:0b:
                    8e:5a:d6:07:b0:41:52:6c:5a:50:89:90:7b:32:65:
                    f3:ca:dd:7b:a2:f4:93:84:d9:99:0c:fe:b8:e7:48:
                    8c:28:37:c2:a9:e2:9e:cb:e4:d4:36:dc:65:1c:95:
                    50:a8:dd:fa:f1:c1:cf:5f:98:e8:aa:aa:a2:a4:ae:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:A0:45:E2:19:E5:5C:88:F6:04:28:BB:E1:B7:8E:EF:C9:A6:0B
            X509v3 Authority Key Identifier:
                keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:bc:7f:8f:2c:8e:3e:24:1a:1d:c9:7f:3d:8b:26:f8:6c:
         1b:15:b9:3e:5a:eb:14:4b:50:7b:11:bd:99:44:8a:91:a0:04:
         ed:42:bc:71:02:4d:bb:52:36:f0:8a:13:7e:11:a7:ea:9a:a4:
         4d:d6:8c:c7:ff:1b:62:00:e0:73:74:e4:6f:fd:2d:34:90:fc:
         b4:b8:23:87:03:9e:0b:a5:ab:b4:5b:de:47:8b:8b:d0:9f:b5:
         49:94:1e:6b:4d:9d:60:aa:67:27:5f:45:8b:9b:6b:ac:9f:4f:
         cd:df:f6:2e:d0:60:76:fd:ce:b9:19:5b:d9:a3:46:cf:bb:7a:
         cd:be:c1:5f:fd:f8:25:4d:fe:20:3d:63:e8:e1:48:3b:14:a2:
         d3:f1:0c:ca:86:b8:d9:e3:60:ce:3b:53:cf:27:cc:9d:f4:cc:
         62:ec:a7:70:53:0e:3e:59:5a:ad:66:34:1a:9b:2a:81:70:aa:
         c4:e1:61:1e:ac:a2:bd:b8:e6:f0:52:06:13:7a:bc:af:bc:be:
         b7:58:ca:d8:e0:5b:9b:7b:41:59:20:db:29:37:98:55:07:a0:
         e7:da:0c:73:b1:d1:bb:7d:4f:dc:2c:c8:1a:28:39:6b:26:10:
         a2:43:fe:e8:21:27:32:40:02:da:b1:5e:37:56:1d:20:9b:cd:
         26:c3:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:56 2024 by rpki-client on console-fra.rpki-client.org