Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File:                     IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier:          C8uIcibIZhR5UG2DOjwZdT29HPnIEWZhU10eOO+jQNE=
Subject key identifier:   79:89:A1:A8:CD:D9:C8:09:63:5D:01:E4:DB:71:13:56:BC:0B:25:D1
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer:       /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial:       018F877F2C3AB6CA69DD2958978C73A4A180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number:          98
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: 7XX3CU40Cj3wJCsfu/kLu3tdF0AuIyYHwWzlneZ1BBM=)
                          2: yY9lRC-lRqjPIUjFir0VxQM_vQU.roa (hash: CnzJDtlYxY/9XYJdyWKr/w0iY4v/fdPl8g9dZ62NfCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2c:3a:b6:ca:69:dd:29:58:97:8c:73:a4:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=7989a1a8cdd9c809635d01e4db711356bc0b25d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:d0:0c:ab:1b:aa:e4:ac:10:b7:9b:7d:cd:
                    be:42:39:4a:6b:67:ab:c7:a7:bc:76:27:99:71:a7:
                    45:42:83:2d:48:1e:62:29:30:d6:bc:0f:58:f9:3e:
                    c3:c4:a1:55:c5:c7:53:86:d8:d7:2b:88:15:df:ff:
                    f2:dc:4d:b3:04:6b:f1:24:f0:70:36:4a:73:9e:64:
                    d2:56:86:8f:90:28:9b:9d:53:a1:97:bb:a4:bc:7c:
                    75:3c:d2:e8:73:f2:8e:1f:28:3b:95:dd:4d:71:b4:
                    79:7c:c1:8d:f4:e3:d2:10:35:7c:0b:4f:ec:29:a7:
                    66:4d:07:d3:3f:51:d7:d3:a7:8c:92:70:a7:b5:42:
                    26:a2:81:15:48:6d:04:bf:8a:fb:e8:8b:f4:3b:67:
                    be:cd:91:fc:62:ec:2c:61:2e:2e:55:eb:22:8a:b7:
                    e5:da:3e:5a:c8:d9:94:34:32:af:c8:8f:3d:bc:10:
                    04:1e:30:35:4a:89:70:42:a6:7d:d6:66:a3:5c:1d:
                    02:a8:f4:30:4f:d6:88:85:2f:90:5a:fa:57:96:3c:
                    fd:a8:e5:3d:d5:84:f7:8d:cc:bc:d7:76:89:26:92:
                    08:c2:74:7b:56:f6:4d:10:ce:de:a6:61:fe:0e:70:
                    c0:8b:79:b1:3b:50:1e:fd:7a:7d:61:33:f7:64:e3:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:A1:A8:CD:D9:C8:09:63:5D:01:E4:DB:71:13:56:BC:0B:25:D1
            X509v3 Authority Key Identifier:
                keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:c5:b6:9d:d0:87:74:2f:c7:c4:bc:04:37:5b:b8:94:75:
         05:26:69:5a:c5:15:17:b6:58:9c:0e:34:de:10:11:9c:11:09:
         0d:74:5e:32:84:9d:a0:e1:19:99:73:f5:a5:11:dd:07:d0:e7:
         47:10:04:51:d6:35:10:3a:0c:b8:4d:21:ff:a1:b2:85:7a:a3:
         91:61:97:6a:c3:59:84:17:be:c4:04:60:dd:0f:8a:50:10:9d:
         6a:11:e7:a1:17:cd:ca:59:f3:b7:d7:b9:90:46:87:56:72:3b:
         04:33:97:4c:ba:02:a3:61:7a:38:b6:26:79:02:fb:c1:73:e2:
         cc:98:0b:43:2c:d5:46:34:94:fa:c6:46:cc:36:a8:0a:07:27:
         7e:b9:41:6d:99:6e:24:85:a4:a3:06:23:52:84:bd:32:f7:d3:
         47:b1:3c:b1:a2:3d:03:c2:46:73:f3:e5:93:b7:b4:56:53:c5:
         9f:62:16:81:d8:7f:ef:71:c0:d3:93:53:ed:c7:d4:1c:2e:12:
         a0:34:cd:28:18:5a:1c:07:8e:8a:88:65:a3:ba:cc:47:0a:2e:
         d6:33:74:24:11:cb:d9:f5:37:1d:46:57:c8:37:10:7e:04:e1:
         2d:bb:da:d6:a3:9a:2f:00:f8:34:af:a9:9c:fa:75:5b:52:f5:
         82:a9:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:09 2024 by rpki-client on console-fra.rpki-client.org